Tenant scoped
Every fleet query uses the authenticated owner partition. Personal tokens expire, can be revoked immediately and are stored only as SHA-256 digests.
Give agentic users governed, tenant-scoped access to edge devices, approved releases, model provenance and live service health—without exposing plant actuation or secrets.
https://mcp.indagate.ai/mcp
Every fleet query uses the authenticated owner partition. Personal tokens expire, can be revoked immediately and are stored only as SHA-256 digests.
Fifteen tools expose context, not control. There are no PLC writes, shell execution, release approvals, deployments, enrolments or secret retrieval.
Tool calls record tenant, actor, scopes, tool, request hash, result, runtime region and trace ID with a defined retention window.
The first release deliberately keeps the capability boundary narrow. Tool schemas reject unknown fields, release results never include download credentials, and all tools declare read-only annotations.
fleet.list_devicesFleet health, hardware, runtime and heartbeat.
fleet.get_deviceOne device, telemetry, model manifest and OTA state.
fleet.get_summaryDevice, OTA, alert and outbound-delivery health.
release.list_approvedChecksum-published release metadata.
model.list_provenanceIdentity, digest, runtime and execution location.
status.get_hosted_servicesInfrastructure and real-model canary state.
integration.listMatter, TTN and signed connections without credentials.
iot.list_devicesDiscovered tenant IoT endpoints.
iot.list_recent_eventsNormalized events for a tenant-owned integration.
monitor.listMetric and determination monitors with live state.
alert.list_recentActive subjects and retained state transitions.
determination.list_recentBounded VLM/VLA operational determinations.
webhook.list_outboundOutbound subscriptions without secrets.
webhook.list_deliveriesThirty-day signed delivery history without payloads.
docs.get_pageCanonical deployment and safety guidance.
Indagate MCP results are operational context. They are not evidence that a physical action occurred and do not replace PLC logic, safety relays, interlocks, emergency stops, machine guarding, site procedures or accountable human approval.
The npm stdio adapter shown here is a release candidate pending registry publication. Its command shape is documented now so client configuration can be reviewed in advance.
{
"mcpServers": {
"oddessy": {
"command": "npx",
"args": ["--yes", "@oddessy-io/mcp"],
"env": { "ODDESSY_API_TOKEN": "${ODDESSY_API_TOKEN}" }
}
}
}