Team playbooks
Setting a single team up with governed access, in the order you would actually do it, using the systems that team already runs.
Notion MCP access for Claude, per person
Set up Notion MCP access for Claude so each person reaches only the pages they can already open, with write tools blocked for read-only roles.
OneDrive MCP access for ChatGPT, per person
OneDrive MCP access for ChatGPT, per person: each employee connects their own Microsoft account, so ChatGPT reads only what that person can open.
Salesforce MCP access for Claude, per rep
Give each rep Salesforce MCP access for Claude under their own login, block the delete tools, and cut access off cleanly when they leave.
How to use ChatGPT with Buildium (or Claude)
Use ChatGPT with Buildium to ask who hasn't paid rent, which repairs are open and whose lease ends next month. What you need, and the setup.
How to use ChatGPT with LeadPerfection (or Claude)
Use ChatGPT with LeadPerfection to ask how many leads came in, where next week is short and which reps are open. What you need, and the setup.
Connect Snowflake to Claude for access and warehouse admin
To connect Snowflake to Claude for access reviews, decide whose Snowflake user the call acts as, allow only the read tools, then keep the audit row.
ServiceNow MCP server access, role by role
A ServiceNow MCP server rollout for IT: which tools each role may call, how a restriction blocks the risky ones, and what the audit log records.
Connect Ashby to ChatGPT for recruiters
Connect Ashby to ChatGPT for recruiters with two restriction rules that hold the role to reads, plus the audit query that proves nothing was changed.
Connect Linear to Claude for our product team
To connect Linear to Claude for our product team, govern Linear's own MCP server: per-person sign-in, a block rule, review for new tools.
Looker MCP access for Claude: a read-only rollout
Looker MCP access for Claude, set up read-only: one connection per person, a block rule on the analysts' role, and the audit query that proves it.
Microsoft Teams MCP access for ChatGPT: a playbook
Microsoft Teams MCP access for ChatGPT: pick the route, set restrictions on the Microsoft apps around it, then prove them in the audit log.
Linear MCP server for our engineering team
A Linear MCP server for our engineering team changes whose account each call runs as, which tools stay on, and what the audit log keeps.
Outreach MCP access for sales team in Cursor
Outreach MCP access for sales team work in Cursor: allow sequence reads, block bulk enrollment and mailbox sends, and freeze the sequence owner.
Greenhouse MCP access for Claude: the recruiting setup
Greenhouse MCP access for Claude: catalog first, three restrictions on the recruiting role, then the audit query that proves them.
Slack MCP access for ChatGPT: a safe company rollout
Two restrictions, one guard you do not configure, and one audit query: Slack MCP access for ChatGPT, rolled out company-wide.
GitHub MCP server for a company with SSO
A GitHub MCP server for a company with SSO has two sign-ins to settle: your identity provider, and whose GitHub account the tool call actually runs as.
Zoho CRM MCP server for our sales team: two paths
A Zoho CRM MCP server for our sales team can mean two different things. Here is what changes underneath, and what a rep sees in ChatGPT or Claude.
Google Sheets MCP access for Claude, team-wide
Google Sheets MCP access for Claude, team-wide: each person signs in with their own Google account, and two block rules keep Drive reads from writes.
Notion MCP access for ChatGPT, without private pages
Set up Notion MCP access for ChatGPT so private pages stay private: per-person connections, two restrictions, one locked argument, one audit query.
Stripe MCP access for finance team: what to block
Stripe MCP access for finance team work in ChatGPT: reads on charges and invoices, refunds blocked by a restriction rather than an OAuth scope.
Okta MCP server for IT admins: the mechanic
An Okta MCP server for IT admins changes who a call runs as and what one tool can do, not what your directory holds. Here is the mechanic.
Connect Datadog to Claude for our SRE team
Connect Datadog to Claude for our SRE team: Datadog runs the MCP server, Elaichi handles sign-in and access, and three restrictions keep reads read-only.
Connect Jamf to Claude for device management
How to connect Jamf to Claude for device management, the two restrictions that stop an account escalation, and the audit filter that proves both held.
Connect Jira to ChatGPT for our product team
Two routes to connect Jira to ChatGPT for our product team, the three restrictions that stop an assistant changing issues, and the audit query to prove it.
Put AI to work in your own apps
14 days of Black, no credit card. Start with one app and one team.
When the trial ends, nothing is deleted. You move to the free Personal plan, and connections, roles and the audit log stay where they are.
Add one link to your AI app
The same link for everyone on your team.
https://api.elaichi.ai/mcp
ChatGPT
Claude
Cursor
Microsoft Copilot