Your own MCP servers, reviewed before agents use them
Connect the remote MCP servers your company already runs or subscribes to. Agents only get the tools a company admin has reviewed and given a risk tier, and every call goes through the same approvals as the built-in integrations.
Add a server
A company admin adds a server on the MCP servers page with its name, its address and how Everdeck signs in. Adding or deleting a server asks you to confirm it's you with your second factor.
- Servers that speak Streamable HTTP, or the older HTTP with server-sent events.
- Addresses must use https. Everdeck checks every address before it connects, so a server can't point it at a private network.
- Sign-in: None, A header, A bearer token and Your OAuth app. With your OAuth app, Everdeck can find the server's sign-in settings from its address, and shows the redirect URI to register.
- Keys, tokens and secrets are encrypted before they're stored, and never shown in full again. Addresses are stored encrypted too, since they can hold a secret.
Every tool is reviewed first
Everdeck reads the server's tool list, up to 200 tools a server. Each new tool waits for review: a company admin approves or rejects it and sets its risk tier.
- Everdeck suggests a tier from what the server says about the tool: tier 0 for read-only tools, tier 4 for destructive ones, and tier 3 when it says nothing. These are the server's claims, so you decide.
- Approve all waiting approves every waiting tool at tier 3 or higher. Approving a tool at a lower tier, or lowering a tier, asks for your second factor.
- What a tool returns is treated as outside content by default: agents use it as information, never as instructions.
- Agents see an approved tool as
mcp_plus the server's key and the tool's name, and only when their charter grants it.
Changes wait for you
Agents always get the definition you approved, never the server's current one. If the server changes an approved tool's description, inputs or hints, the tool waits for review again and the people who manage connections get a notice, unless they've turned those notices off.
- The approved and current versions of a changed tool are shown side by side.
- Before each call, Everdeck checks that the server still offers exactly what you approved.
Health checks and pausing
Everdeck checks each working server every 6 hours. Refused credentials or a blocked address mark it as needing attention straight away; other failures do after 3 in a row. The people who manage connections are told in the app and by email, unless they've turned those notices off.
- Check now reads the tool list again whenever you like.
- Pause a server and its tools don't run; Resume it when it's ready.
Included in every plan
MCP servers and API servers count together towards your plan's server limit.
- Starter
- 2 MCP and API servers
- Growth
- 10 MCP and API servers
- Scale
- Unlimited MCP and API servers
More ways to connect
Your company, always on deck.
Start a 14-day trial. Card first, nothing charged until day 14.