Your CRM and Brain, inside your AI assistant

Your assistant reads the real record

Model Context Protocol is an open standard. It hands an AI client a set of tools it can call. SAGARIS runs the server half at /api/v1/mcp, over Streamable HTTP in stateless JSON mode. That means one JSON-RPC message per POST, one JSON response back, and no session to open or close. Connecting a client is one short piece of configuration: the endpoint URL and your API key.

So the assistant your team already works in can ask your workspace a question and get the answer from the record itself. No more pasting a stale export into a chat window and hoping it is current. Your pipeline stays where it lives, and your people read it where they already work.

Your revenue data becomes something the assistant can call, not something a person has to go and look up.

Safe to connect on day one

You can hand this endpoint to an assistant without wondering what it might change. Read only here is built into the code, not promised in a sentence. The tool list is derived from the public API and filtered to GET, so a write operation can never turn up as a tool, whatever gets added to the API later. Nobody has to remember to keep it that way.

Every tool also tells the client it is read only and non-destructive. Good clients use that signal to answer your question straight away instead of stopping to ask you for permission first.

An assistant connected to SAGARIS tells you what is true right now. Sending, dialling and enrolling stay with your team.

You decide what each key can see

It uses the workspace API key you already create in settings, sent as a bearer token. Three things follow, and all three are enforced in code rather than written in a policy:

• The key names the workspace. A client never gets to pick one, so it only ever reaches yours.
• Scopes filter the tool list before the client sees it. A tool your key does not cover is never offered at all. That is the version an assistant handles cleanly.
• Every message needs a valid key, the opening handshake included. There is no step where the server talks to a stranger.

Requests are rate limited per key, and a browser client has its origin checked before anything else happens. Revoke the key in settings and the access ends. That is the part you want on the day somebody leaves the team.

You choose what leaves the workspace

The Brain holds more kinds of record than this endpoint hands out, and every one of those calls was made on purpose. Internal delivery commitments, the record of what your own team promised a customer, stay inside the workspace. So does machine-derived competitor intelligence, which only reads properly next to its source and its date. Your most sensitive context stays where you can see who touched it.

The list of subject types this endpoint can read is compiled from the same table the runtime check uses. So this page and the product cannot drift apart. Add a new kind of subject and the build stops until someone decides, on purpose, whether an outside client should see it.

Included in your seat

Nothing beyond the seat. SAGARIS is $499 per seat per month on the founding price, every module and every agent included, with no seat minimum. The endpoint ships with the product rather than in a tier above it, and tool calls are not metered.