AIONDATA product · launched October 2026

mcpbizapps: the governed MCP gateway for your business apps

mcpbizapps is AIONDATA’s governed MCP gateway. It sits between Claude, ChatGPT or Microsoft Copilot Studio and the business apps your company runs, so people ask about customers, orders, invoices and projects in plain language and prepare changes that are previewed, approved where your rules require it and logged under their own name. SAP Business ByDesign connects today with 24 tools; 294 apps across 37 categories are listed and set up with your team in a guided pilot.

Facts checked against mcpbizapps.com on .

At a glance

Assistants
Claude, ChatGPT, Microsoft Copilot Studio, any MCP client with OAuth
Apps
294 listed in 37 categories; SAP Business ByDesign connects today
Controls
Roles per tool, preview before every change, approval above a set amount, audit log
Data
Read live and not stored; conversations never pass through the gateway
Hosting
AWS, United States (N. Virginia)
Pricing
Subscription, quoted after a two to four weeks guided pilot

Every request takes the same governed path

An assistant never talks to the ERP directly. Its request reaches the gateway, which checks the person’s roles, shows a preview of any change, applies the approval rules, writes the audit entry and only then calls the business app through one dedicated integration user. The same four checkpoints apply to every app and every assistant, so IT sets the rules once.

Tools are named after tasks (“find customers”, “prepare a sales order”), not raw endpoints, which is why a finance team can use them without training and why an assistant picks the right one. The platform page describes each control, and the IT and admins page shows the console an administrator works in.

Illustrative request flow, controls as published on mcpbizapps.com

What happens when someone asks

The demo on mcpbizapps.com walks through one sales order on demo data. In four steps:

  1. 1

    Ask

    A sales rep asks their assistant to order four NH-CP 80 centrifugal pumps and eight seal sets for Becker Wassertechnik, delivery on 20 November, customer PO 4500017823.

  2. 2

    Preview

    The gateway prices the order in ByDesign and shows the preview: €13,328.00 net, pumps €11,816.00 and seal sets €1,512.00. Nothing is created yet.

  3. 3

    Approval

    The total is above the €10,000 limit the admin set, so the request goes to an approver. Sofia Romano approves it with the note “Within credit limit”; she could not have approved her own request.

  4. 4

    Audit

    Sales order 1081 is created in ByDesign with a note naming the person who asked. The audit log records each step by name, with a link to the record, for a year.

The same pattern covers receivables and open items (read-only, with aging buckets per currency) and project budget against actual; the sales orders page has the full example.

Four checkpoints on every request

These are the controls as mcpbizapps publishes them, the ones that let an IT team and an auditor say yes.

Roles decide who may use which tool

Only people an admin invites can sign in, with their work email and a one-time code instead of a password. Built-in Admin, Approver and Member roles, plus custom ones, set tool access in one matrix: read-only for most people, sales orders for sales. The assistant only sees the tools a person’s roles allow.

A preview before every change

The assistant shows what it is about to create, with the app’s own prices and totals, and nothing is written until the person confirms. Confirmations are single-use, expire after ten minutes and are bound to that person, connection and exact change. Admins can switch each kind of change off and keep look-ups.

Approval when it matters

Above an amount the admin sets, per currency, a second person decides on the approval page. Nobody can approve their own request, and the rule counts the same person’s recent orders for the same customer. An approval waits at most twenty-four hours before it expires.

One audit log, by name

Every request, approval decision, sign-in and admin change is recorded with the person, the assistant, the tool, the result and a link to any record created. Personal fields and free text are removed from request details. Logs filter by person, tool, result and date, export to CSV and are kept one year by default.

Works in the assistant your people already use

Each person adds one connector URL, signs in with their work email and a six-digit code, reviews a consent screen that names the exact tools their roles allow, and asks. There is no new app to learn.

Claude

Added as a custom connector in Claude’s settings on plans that support them; on Team and Enterprise an owner may add it for everyone. Access lasts up to thirty days and can be removed by the person or an admin.

Setup on mcpbizapps.comAIONDATA’s Claude services

Any other client that supports remote MCP servers with OAuth sign-in also works, and one person can connect several assistants under the same roles, rules and audit log.

SAP Business ByDesign today, 294 apps listed

SAP offers no MCP server for Business ByDesign, so mcpbizapps started there. The ByDesign pack gives an assistant 24 tools across sales, receivables, purchasing, payables, stock and projects: 20 look-ups and 4 previewed changes (prepare and create a sales order, prepare and save a customer contact change). Ten tools run on ByDesign’s standard services; fourteen need a web service your administrator enables once, during the pilot. It connects to ByDesign through one dedicated integration user, so nobody needs their own ByDesign licence to ask a question, and each request is still logged under the real person.

If you are weighing this against the alternatives for ByDesign, our SAP MCP guide compares the routes for every SAP edition and the ByDesign integration page covers the APIs, licensing and the April 2026 delisting.

Every other app is added as a pack on the same gateway with the same controls. The ones below are also in AIONDATA’s integration library, so the team that sets up the pilot already knows the system; the full catalogue lists all 294.

What mcpbizapps does not do yet

  • Only SAP Business ByDesign connects in the console today. Every other app in the catalogue is set up for your team during a guided pilot, so a NetSuite or Salesforce pilot starts with a conversation, not a sign-up form.
  • No SOC 2 or ISO 27001 report yet. Data-handling details, the architecture and a threat model are shared for your security review during a pilot.
  • Hosting is in the United States only. Data residency elsewhere, customer-managed encryption keys, private network links and dedicated instances are roadmap items you can ask for.
  • No self-serve trial. The pilot replaces it because the ByDesign side needs your administrator to create an integration user and enable a few web services.
  • Single sign-on with Microsoft Entra ID, Okta or Google is planned as an add-on; sign-in by work email and one-time code is included today.
  • One app per pack. A request that has to combine several systems under one rule is still custom work, which AIONDATA builds separately.

The security page keeps the “what is not claimed” list current, and the FAQ answers the setup questions.

Read live. Not kept. Always logged.

The data-handling facts as published, in one table.

ItemHow it is handled
Business dataRead live from the app when the assistant asks, returned, and not stored.
ConversationsPrompts and replies stay in the assistant. Only tool requests reach the gateway.
Prepared changesEncrypted while pending: at most 10 minutes for a confirmation, 24 hours for an approval, then deleted.
CredentialsOne dedicated integration user per app connection; its password is encrypted in AWS Secrets Manager and never shown again.
Sign-inWork email and a six-digit code valid for ten minutes. No passwords to steal or reuse.
Audit logWho, which tool, which connection, the result and the time. Kept one year by default, exportable to CSV.
OffboardingDeactivating a person refuses every assistant they connected on its next request; removing a connection deletes its credentials.
RegionAWS, United States (N. Virginia)

How the pilot works, and what it costs

There is no price list. mcpbizapps is a subscription priced by team size and needs such as single sign-on, and the quote follows a guided pilot on your own system.

  1. 1A thirty-minute demo on sample data, using the questions your team asks every week.
  2. 2Agree the team, the questions to test and the success criteria.
  3. 3Your app administrator and the mcpbizapps team connect the system with one integration user and a tested connection.
  4. 4Five to ten people use it for two to four weeks; then you review the audit log and the results together and receive a quote.

The pilot includes the app connection, the tools for that app, roles, approval rules, the audit log with CSV export, access for every invited person on Claude, ChatGPT and Copilot Studio, onboarding and a results review. Current terms are on the pricing page.

mcpbizapps or a custom MCP server?

AIONDATA sells both, which is the honest reason this table exists. We recommend the subscription when it fits and a custom MCP server when it does not; the MCP server status page shows what each vendor ships today.

SituationmcpbizappsCustom server by AIONDATA
SAP Business ByDesign look-ups and sales orders this quarterConnects today with 24 tools; pilot in two to four weeksAdds little unless you need tools beyond those
An app in the catalogue that is not live yetSet up for your team during the guided pilotWhen you want it on your infrastructure, under your rules
A system on-premises or behind a private networkNot today: hosted in AWS US, no private links yetRuns inside your network under your identity rules
One request that spans several systemsOne app per pack todayOne tool that combines systems with consistent rules
Data residency outside the US, or a SOC 2 report for procurementRoadmap items; ask during the pilotDeployed into your own AWS, Azure or GCP region
Rules such as credit limits, posting periods or payroll logicApproval by amount and currency; roles per toolEncodes the rules themselves in each tool

For SAP and ERP partners

Implementation and support partners for ERP, accounting, HR and CRM applications bring mcpbizapps to the customers they already serve: they prepare the app side, help the customer choose roles and approval rules, and run the two-to-four-week pilot against agreed success criteria. Customers get answers from their ERP inside the assistant they already use; IT gets a control point it can sign off; the partner avoids maintaining custom code per customer. The partner page explains the programme and how to start a first pilot.

mcpbizapps questions

What is mcpbizapps?

mcpbizapps is a governed MCP gateway made by AIONDATA. It lets Claude, ChatGPT, Microsoft Copilot Studio and other MCP clients work with the business apps a company runs, such as SAP Business ByDesign, with role-based tools, a preview before every change, approval rules and a full audit trail. 294 apps are listed; ByDesign connects today and the rest are set up in a guided pilot.

What is an MCP gateway, and how is it different from an MCP server?

An MCP server exposes one system’s data and actions as tools an assistant can call. A gateway puts one control point in front of every such connection: who may use which tool, what gets previewed, who approves and what is logged, the same for every app and every assistant. mcpbizapps publishes a short guide to MCP servers for ERP teams that covers the distinction.

Which AI assistants does it work with?

Claude on plans that support custom connectors, ChatGPT on Business, Enterprise and Edu plans with custom connectors, agents built in Microsoft Copilot Studio, and any other client that supports remote MCP servers with OAuth sign-in. Each person adds one connector URL to their assistant and signs in with their work email.

Can the assistant change data in our ERP without a person checking?

No. Every change is prepared as a preview and needs the person’s confirmation. Above the amount your admin sets, a second person has to approve it, and nobody can approve their own request. Admins can also turn each kind of change off and keep look-ups only.

Does mcpbizapps store our business data?

No. Figures are read live from the app, returned to the assistant and not stored, and conversations never pass through the gateway. The one exception is a prepared change waiting for a decision, which is kept encrypted for at most ten minutes (confirmation) or twenty-four hours (approval) and then deleted. The security page lists everything that is stored.

Where is it hosted, and is there a SOC 2 or ISO 27001 report?

It runs on AWS in the United States (N. Virginia). There is no SOC 2 or ISO 27001 report yet; security documentation, data-handling details and the architecture are shared during a pilot, and dedicated instances per customer are planned.

What can the assistant do in SAP Business ByDesign today?

24 tools: find customers, suppliers, sales orders, purchase orders and projects; open items, delivery status, receivables and payables aging, supplier invoice and payment status, stock levels and project budget against actual; and four previewed changes that prepare and create a sales order or change a customer’s contact details. Ten tools use ByDesign’s standard services and fourteen need a service your administrator enables once, during the pilot.

How much does it cost, and is there a free trial?

It is a subscription priced by team size and needs such as single sign-on, quoted once the pilot scope is agreed. There is no self-serve trial; the two to four weeks guided pilot takes its place because the app side needs your administrator. Booking a demo is the starting point.

Should we subscribe to mcpbizapps or have AIONDATA build a custom MCP server?

Subscribe when your app is in the catalogue, cloud-hosted access is acceptable and the published controls fit your rules. Build when the system is on-premises, a request must span several systems, you need data residency outside the US, or your business rules go beyond approval by amount. AIONDATA does both, so the route is chosen in one conversation; our MCP server development page explains the custom side.

Do you work with SAP and ERP partners?

Yes. Implementation and support partners for ERP, accounting, HR and CRM applications prepare the app side, help the customer set roles and approval rules, and run the pilot; the commercial model is agreed with each partner. The partner page explains the programme.

See it with your own questions

Bring the questions your team asks every week. The demo shows an assistant looking up and preparing work in a business app, with the approval and the audit entry.

All AIONDATA products