The enterprise MCP gateway that becomes your company brain
AnythingMCP Enterprise is the layer between your AI assistants and every system you run: SAP, databases behind your VPN, legacy SOAP services, your own APIs. On top of that gateway it keeps your company's memory, skills and map of its systems, on your servers or in Frankfurt. Copilot today, Claude tomorrow: every assistant connects to the same layer, through your single sign-on.
Priced on request · quote within 1 business day · Cloud or self-hosted
- SSO
- SCIM 2.0
- RBAC
- AES-256-GCM
- Audit log
- workspaces on AnythingMCP Cloud
- 9,000+
- workspaces on AnythingMCP Cloud
- AI tool calls last month
- 1M+
- AI tool calls last month
- downloads
- 200,000+
- downloads
- ready-made connectors
- 510+
- ready-made connectors
Any AI assistant
Today · Copilot
What did we agree with Weber GmbH about payment?
SEPA direct debit, invoices in German. From company memory, approved in March.
SAP
Salesforce
SharePoint
PostgreSQL+ 500 more connectors · REST, SOAP, GraphQL, SQL
One gateway to every system you run
What AnythingMCP has always done, at company scale: instead of one MCP server per system, one governed endpoint for all of them, from SAP to the SOAP service nobody wants to touch.
510+ ready-made connectors
SAP, Microsoft Dynamics, Salesforce, ServiceNow, DATEV and hundreds more, installed in minutes.
Legacy and on-prem
SOAP/WSDL services become tools automatically. MSSQL, Oracle, SAP HANA and PostgreSQL with read-only scoping, even behind your VPN.
Your own APIs, without code
Import an OpenAPI, WSDL or GraphQL description of an internal API and it becomes tools your assistants can call.
One endpoint, one policy
Every system behind one MCP URL, with the same sign-in, roles, per-tool permissions and audit log.
Connected through one endpoint
- SAP S/4HANA
SAP Business One
Dynamics 365- Salesforce
ServiceNow
Workday
Microsoft Teams- SharePoint
Jira
DATEV
Oracle
MSSQL
https://mcp.your-company.com/mcpone MCP endpoint for every systemHow the brain gets to know your company
First it maps your systems, then it learns how your people work, then it keeps what they decide. Every step stays in your database.
Knowledge graph
How do your systems connect?
Maps the entities your connectors share, so an agent links a customer in the CRM to their orders in the ERP without being told.
AI skills
How does your company work?
Procedures your agents follow: written by hand, generated by AI, or learned from real requests and fixed errors, then approved by an admin.
Company memory
What does your company know?
Facts, preferences and notes saved from any AI client and found again in any other, for one person or for the whole company.
Change the assistant. Keep the brain.
AI assistants change every few months. What your company knows should not have to move with them.
Knowledge kept inside one assistant
- Memory and instructions sit in one vendor's account.
- Switching assistant means starting again from nothing.
- Every team ends up with its own copy, and none of them agree.
A company brain you own
- Memory, skills and the map of your systems live in your database.
- Claude, ChatGPT, Copilot, Cursor and Gemini connect to the same brain.
- Change provider on Monday. Nothing to migrate, nothing lost.
Works with any assistant that connects to remote MCP servers
Claude
ChatGPT
Copilot
Cursor
Gemini
Every question passes your rules first
From sign-in to the audit log, each step runs in your AnythingMCP, against your directory and your database.
- 1
Sign-in
Through your identity provider, with single sign-on.
OIDC
- 2
Role
Decides which tools and folders this person's assistant sees.
role: Finance
- 3
Brain
Adds the memory, skills and system routes the question needs.
memory · skills · graph
- 4
Connector
Calls your system with encrypted credentials the model never sees.
AES-256-GCM
- 5
Audit
The call is recorded in your own database.
tool_invocations
The knowledge stays where your data already is
Memory, skills, the graph and the audit log live in your workspace's PostgreSQL: on AnythingMCP Cloud in Frankfurt, or on your own servers.
Your PostgreSQL
Memory is searched with PostgreSQL full text. No vector database, no embedding provider, no extra service.
Names, not values
The knowledge graph stores entity and field names, never the data behind them.
Your model, or none
The graph works without an AI key. Its optional AI passes use your own OpenAI, Anthropic or OpenRouter key, or a local model through Ollama or LM Studio.
Frankfurt or on-prem
AnythingMCP Cloud runs in Frankfurt, Germany. Self-hosted, only the licence check leaves your network.
security event log
- MEMORY_ACCESS_CHANGED
- MEMORY_SETTINGS_CHANGED
- MEMORY_ERASED
- LEARNING_CHANGED
- KNOWLEDGE_FOLDER_ACCESS_CHANGED
Ready for your security review
The questions IT and procurement ask before they sign, answered by what the product does today.
Single sign-on
Entra ID, Google, Okta, Auth0, GitHub or any OIDC provider. Require SSO turns passwords off for the whole workspace.
SCIM provisioning
Entra ID adds, moves and removes people. A leaver loses access and their MCP API keys at once.
Roles from your directory
Directory groups become AnythingMCP roles at every sign-in, down to which tools each role may call.
Permissions per tool
Read, write or off, per connector and per tool. An assistant only sees what its user may use.
Full audit trail
Every tool call, every access change and every erasure, recorded in your own database.
Encryption at rest
API keys, OAuth tokens and connector variables are encrypted with AES-256-GCM. The model never sees them.
Your choice of deployment
Our Cloud in Frankfurt, a dedicated instance run for you alone, or self-hosted with Docker or Helm, even behind your VPN.
Contractual SLA
Dedicated support with the SLA in the contract, and Enterprise chats routed straight to the Enterprise team.
Single sign-on and SCIM run self-hosted or on a dedicated instance, not on the shared Cloud.
What changes from Team to Enterprise
Team covers up to three people. Enterprise is for the whole company, on our Cloud or on your servers.
Enterprise · Cloud
- Users
- Unlimited
- Connectors and MCP servers
- Unlimited
- Knowledge graph and AI skills
- Included
- Company and personal memory
- Included
- Folders limited to roles
- Included
- Single sign-on, role sync, Require SSO
- On a dedicated instance
- SCIM provisioning (Entra ID)
- On a dedicated instance
- Support
- Dedicated, with a contractual SLA
- Billing
- Annual invoice, custom payment terms
Enterprise · self-hosted
- Users
- Unlimited
- Connectors and MCP servers
- Unlimited
- Knowledge graph and AI skills
- Included
- Company and personal memory
- Included
- Folders limited to roles
- Included
- Single sign-on, role sync, Require SSO
- Included
- SCIM provisioning (Entra ID)
- Included
- Support
- Dedicated, with a contractual SLA
- Billing
- Annual invoice, custom payment terms
Team
- Users
- Up to 3
- Connectors and MCP servers
- 15 connectors, 10 servers
- Knowledge graph and AI skills
- Included
- Company and personal memory
- Not included
- Folders limited to roles
- Not included
- Single sign-on, role sync, Require SSO
- Not included
- SCIM provisioning (Entra ID)
- Not included
- Support
- Billing
- Monthly or yearly, by card
A dedicated instance is AnythingMCP Cloud run for your company alone, which is what makes single sign-on and SCIM possible there.
If the licence lapses, nothing widens
Existing users keep signing in, an enforced single sign-on stays enforced, SCIM keeps removing leavers, folder limits keep applying and stored memory is kept. Only new Enterprise settings wait for a licence.
Contractual SLA
Dedicated support, with Enterprise chats routed straight to the Enterprise team
Annual invoicing and custom payment terms
Volume pricing for committed usage
A DPA, and EU hosting in Frankfurt
A quote within one business day
Say it once. Every assistant knows it.
What someone tells Claude today is there in ChatGPT, Copilot and Cursor tomorrow: for them alone, or for the whole company once it is approved.
My memory
One person's preferences, such as “answer me in Italian, numbers as tables”. Only they can read it, admins included.
Company memory
Knowledge for everyone. What an AI client proposes waits under To review until an admin or editor approves it.
Information, never orders
Memory reaches the assistant as information written by people, not as instructions. Anything that looks like a password, token or key is refused.
Erasable, person by person
Admins can erase someone's personal memory without reading it. Removing a person from the workspace deletes it.
Claude · MondayRemember: Weber GmbH pays by SEPA direct debit and wants its invoices in German.
memory_saveproposed to company memoryWeber GmbH pays by SEPA direct debit. Invoices in German.about: customer
ChatGPT · two weeks laterWrite the cover email for Weber GmbH's March invoice.
memory_search1 fact foundDone, in German, and it says the amount is collected by SEPA direct debit, as agreed.
Who can know what, decided by you
Memory access is set person by person, and folders of skills and memory can be limited to roles. Both follow your directory once single sign-on is on.
Memory, person by person
Pick an access level
- Search company memory
- Keep a personal memory
- Propose to company memory
Tools their AI client sees
- memory_search
- memory_save(scope: "organization")
- memory_forget
Folders, role by role
- SalesVisible to: Sales
- Quotes2 skills · 9 facts
- Price lists1 skill · 4 facts
- FinanceVisible to: Finance
- Payment runs3 skills · 6 facts
- Dunning2 skills · 3 facts
- CompanyVisible to: Everyone
- Holidays and closures0 skills · 5 facts
- Product names1 skill · 14 facts
Workspace admins see every folder
With Enterprise an admin limits a folder to roles, including roles synced from your identity provider. For everyone else it does not exist: not in the dashboard, not in search, not in what the assistant is told.
- The limit holds on every path: skills_list, skill_get, prompts, memory_search and kg_how_to_obtain.
- If the licence lapses, limits already set stay in force. Access never widens on its own.
Your directory decides who reaches which tools
Single sign-on with Entra ID, Google, Okta, Auth0, GitHub or any OIDC provider. SCIM from Entra ID adds and removes people without anyone signing in, and directory groups become AnythingMCP roles.
Joins
Added to the Sales group in Entra ID. SCIM creates the account, and role sync grants the Sales role with its tools.
SCIM POST /Usersrole: Sales
Moves
Moved to Finance. At the next sign-in the role follows the group: CRM tools out, ERP tools in.
group: Financerole: Finance
Leaves
Disabled in the directory. Workspace access and MCP API keys go with it, at once.
active: falsemcp_api_keys: revoked
- Require single sign-on turns off passwords for the whole workspace.
- Ten single-use recovery codes, so nobody is locked out.
- Every role change, access change and erasure in the security event log.
In production at KOCH Freiburg GmbH: self-hosted, with its ERP and other internal systems connected to Claude and Entra ID single sign-on.
When you don't need Enterprise
One person, or a team of up to three, with a handful of connectors: Starter or Team covers it, with a 7-day free trial on Cloud. You can move up later without starting over.
See Starter and TeamQuestions about Enterprise
What happens to the brain if we switch AI assistant?
Nothing. Memory, skills and the knowledge graph live in your AnythingMCP, not in the assistant. Connect the new assistant to the same MCP server and it finds the same knowledge, within each person's access.
Which AI clients can use the memory?
Any client connected to an MCP server of your workspace: Claude, ChatGPT, Copilot, Cursor and others. A fact saved in one is found in all of them, within each person's access level.
Where is the memory stored?
In your workspace's PostgreSQL database: on AnythingMCP Cloud in Frankfurt, or on your own servers. Search runs in PostgreSQL itself, with no embedding provider. Each item records who saved it and from which client.
Can we use single sign-on on AnythingMCP Cloud?
Not on the shared Cloud. Single sign-on, role sync and SCIM run on self-hosted instances and on dedicated instances we run for one company. Memory, folder limits, unlimited users and the SLA are available either way.
How is Enterprise priced?
On request, by the number of people and the deployment you choose. Tell us both and you get a quote within one business day, invoiced yearly.
Can the AI write to company memory on its own?
Only if you want it to. By default, what an AI client proposes waits under To review until an admin or editor approves it. You can switch to saving automatically, and admins and editors can edit or delete any company item.
Tell us how your company works
How many people, which identity provider, Cloud or your own servers. We reply with a quote within one business day.