05 / Build with Agents · Governance · Compliance
Claude Code, Cursor, your own agents. Governed by your policy.
The MCP server, REST APIs, and SDKs let any compliant tool consume the firm's curated graph. Identity, authorization, and audit flow through every call.
Atlas exposes the firm's curated graph through one open surface. A documented REST API, a GraphQL endpoint, webhooks, TypeScript and Python SDKs, and an MCP server that any MCP-compatible model or coding agent can call.
That means a partner can ask Claude Code to scaffold a conflicts assistant, point it at the Atlas MCP server, and have a working tool against the firm's own graph within a working day. Cursor and Copilot do the same. So do the firm's own engineers.
Governance is not bolted on. Every MCP tool call carries the calling user's identity. The graph runtime enforces the firm's ACLs and ethical walls per call. Every call is logged. Every model invocation is policy-routed.
The tool surface
- MCP server for Claude, Cursor, Copilot, any MCP-aware agent.
- REST API with an OpenAPI 3.1 spec.
- GraphQL endpoint generated from the firm's ontology.
- Webhooks for graph mutations, new entities, librarian decisions.
- SDKs in TypeScript, Python, .NET.
# MCP client manifest, AtlasAI server entry
{
"name": "atlas-graph",
"transport": "https",
"endpoint": "https://<tenant>.atlas.firm.com/mcp",
"auth": "oauth_pkce",
"tools": [
"graph.lookup_entity",
"graph.traverse",
"graph.retrieve_documents",
"graph.tabular_extract",
"graph.citation"
]
}
Authentication
OAuth 2.1 with PKCE. Per-user tokens carry the user's identity into the graph runtime. ACL and ethical-wall enforcement applies at every tool call.
Authorization
Source ACLs honored at retrieval. Ethical walls enforced at the graph layer. Policy hooks evaluated per read.
Model routing
Firm policy controls which models can be called for which purposes. Routing decisions are audited. Default deny on any model outside the firm's allow list.
Audit
Every MCP call logged with calling user, tool, arguments, returned facts, citations. Flows to firm SIEM in CEF / JSON.
Token economics
MCP tools return retrieval results, not entire documents. Model context windows stay small. ~95% lower token spend versus dump-the-DMS-into-context patterns.