01
Starting information
We need a description of the workflow and the systems involved. API documentation, a test environment and input from the system owner help assess feasibility.
02
What we review
We examine API availability, authentication, read and write permissions and the agent’s user role. We also clarify ownership of the server, access management and maintenance.
03
A decision on the next step
The audit may recommend a scoped MCP implementation, improvements to an existing API or a more precise use case. Recommendations follow the actual technical conditions.
04
Separate from implementation
The audit is a defined piece of work. An implementation proposal is prepared from its findings. Price and timing are agreed before the audit starts.