Governance
Deciding what an agent may reach: roles, restrictions, frozen arguments, the audit trail afterwards, and what happens when somebody leaves.
Elaichi Black: Workflows, Dashboards and the Agent
Elaichi Black puts connectors, workflows, dashboards and AI in one place, under one set of rules. Your own AI does the building. Here is what it adds and costs.
Uday Gajavalli
Send Audit Logs to Datadog for AI Tool Calls
How to send audit logs to Datadog from Elaichi on Black: the destination, the log types, the test, and a monitor on refused AI tool calls.
Uday Gajavalli
AI Spend Controls: Limits and Payment Approvals
AI spend controls in Elaichi Black: usage limits, payment caps and approvals above a set amount, and test runs that cost nothing.
Uday Gajavalli
Claude connectors for Slack, Drive and Gmail: should you enable them?
Should you enable Claude connectors for Slack, Drive and Gmail? Yes, in steps: read tools first, one pilot group, Owner limits, then role rules.
Raajshekhar Rajan
AI access for new hires: what lands on its own
AI access for new hires splits in two: the directory decides the role they land on, and a person still connects each client, account and team.
Uday Gajavalli
Salesforce field-level security for AI agents
Salesforce field-level security for AI agents holds only when each call runs as the employee's own account, and writes need a second layer of control.
Uday Gajavalli
Which tools AI agents call: read the audit log
One audit log across Claude, ChatGPT and Cursor records which tools AI agents call, naming the person, the client, the connector, the tool and the outcome.
Roopendra Talekar
MCP control plane setup checklist: the first week
An ordered mcp control plane setup checklist for your first week: roles, first connections, one restriction, audit export, and what to leave alone.
FedRAMP MCP AI agent access: when to buy and when to wait
How to evaluate fedramp mcp ai agent access when the vendor has no authorization, and when the right call is to wait.
Raajshekhar Rajan
MCP restriction resolver precedence, as a decision tree
How the mcp restriction resolver precedence works across Elaichi's enforcement points, traced through one real tool call from browse to outbound request.
Raajshekhar Rajan
CCPA data subject request MCP evidence for Salesforce
A CCPA data subject request MCP trail: Salesforce holds the consumer record, and Elaichi holds the access record. The audit log keeps 90 days of it.
Uday Gajavalli
SCIM Group to Role Mapping in Elaichi
A SCIM group to role mapping names at most one Elaichi role. Here is which role wins when two mapped groups overlap, and when it applies.
Roopendra Talekar
Resource ACL view use edit: how Elaichi shares access
How the resource ACL view use edit grant works in Elaichi, and why no org-level permission widens what a member can list.
Uday Gajavalli
Vendor Security Questionnaire AI Access: 20 Answers
Twenty vendor security questionnaire ai access questions, answered with the mechanism: which key, which role, which log row.
Nachi Raman
MCP governance: who may do what, in which app
MCP governance decides who connects which app, which tools each role calls, whose account a call uses, what is logged and how access ends.
Uday Gajavalli
GDPR Article 30 AI agent entry, field by field
A GDPR Article 30 AI agent entry needs recipients, transfers and retention. Elaichi's audit row fills part of it; your role design fills the rest.
Roopendra Talekar
Contractor Guest role configuration in Elaichi
Contractor Guest role configuration in Elaichi: what Guest actually holds, why most contractors need Member plus restrictions, and what removal revokes.
Raajshekhar Rajan
HubSpot MCP access for sales team, per rep
HubSpot MCP access for sales team, rep by rep: each rep's own HubSpot sign-in, deal deletion and pipeline edits blocked, and an audit row that names the deal.
Nachi Raman
Vendor MCP servers: why run them through Elaichi
Vendor MCP servers bring the vendor's own tools. Through Elaichi they also get one address, per-person sign-in, tool rules and one audit log.
Uday Gajavalli
MCP audit log comparison: what each shape records
An MCP audit log comparison across four shapes: what each one records about intent, the account reached, arguments, and whether AI actorship is a field.
Uday Gajavalli
Read-only auditor role setup in Elaichi
The read-only auditor role setup in Elaichi: assign the free Auditor seat, see what its 12 view permissions open, and learn what the role cannot do.
Nachi Raman
AI agents with employee permissions, no shared bot
How to run AI agents with employee permissions instead of one shared service account, and the cases where a named service identity is still correct.
Uday Gajavalli
How to set approved AI tools per team
Approved AI tools per team is a role job: write each role's allow rules, share a template with the team, and handle the rest as access requests.
Uday Gajavalli
IT admin controls for MCP connectors, compared
What the IT admin controls for MCP connectors cover in Claude, ChatGPT and Cursor, and the three gaps none of those consoles closes.
Uday Gajavalli
Put AI to work in your own apps
14 days of Black, no credit card. Start with one app and one team.
When the trial ends, nothing is deleted. You move to the free Personal plan, and connections, roles and the audit log stay where they are.
Add one link to your AI app
The same link for everyone on your team.
https://api.elaichi.ai/mcp
ChatGPT
Claude
Cursor
Microsoft Copilot