Connected MCP Servers and IntuBu

Status: Built in. Let IntuBu’s AI employees use tools from your other systems — GitHub, Notion, Linear, Slack, or your own MCP server.

How it works

Register a server, discover its tools, and class each one — read, external write, or money-moving — before it can be called. Reads run during a task; writes are deferred to apply and shown to the approver as "will call X.Y with …". Tool descriptions and results pass an injection screen, credentials stay in the vault, and private-network URLs are refused.

Why it matters

A tool a server describes as "look up an order" may do anything. Trusting the classification to an administrator rather than to the server is the difference between a connector and a hole.

What moves

tool