All your tools in ChatGPT and Claude. The internal ones too.

SAP, Navision and your databases behind the firewall. Google Ads, Search Console, Stripe and AWS in front of it. One connector for everybody, with SSO, per role permissions and a single audit log.

Start free
Claude

„Which of my accounts has an invoice open longer than 30 days?“

Used open_invoices from ACME ERP

Three accounts have invoices open for more than 30 days:

Accounts with an invoice open longer than 30 days, with the masked IBAN, the open amount and the days overdue.
AccountIBANOpenOverdue
Nordwind Handel GmbHDE•• •••• 4471€ 12.40041 days
Alpen Logistik AGAT•• •••• 0912€ 8.15036 days
Müller & Söhne KGDE•• •••• 3308€ 3.90033 days
read onlyas anna.meieraudit logged
The compliance layer

Four checks between the model and your data.

Every tool call takes the same path, whichever client it came from. Who asked, what they were allowed to see, what left your network, and one log of all of it.

RUNNEROUTBOUND-ONLYAI CLIENTSChatGPTClaudeLangdockOpen WebUISIGNED IN ASj.weber@acme.comYOUR CONNECTORAAcme Groupmcp.acme.comCONNECTEDOne URL · every userloopthinkAUTH · IDENTITY · AUDITOAuth 2.1 endpointYour IdP (OIDC)Per-tool policyAudit logField-level masking · optionalYOUR MCP SERVERSWHEREVER THEY RUNn8n · MakeMicrosoft SQL MCPSelf-builtINTERNAL SYSTEMSNOT REACHABLE FROM THE INTERNETSAP · ERPDynamics · NavisionDatabases & data warehousesInternal APIs · REST over HTTPSSAAS & CLOUDSalesforceHubSpotServiceNowMicrosoft 365JiraGitHub

One URL your users install. OAuth on the outside, your own identity provider on the inside, your server untouched.

  1. 01

    Identify

    OIDC/SSO against your own IdP, including Microsoft Entra. The call runs as the person who made it, never as a shared service account.

  2. 02

    Authorize

    Per-role, per-tool, read or write. Anything not explicitly granted never shows up in the tool list in the first place.

  3. 03

    Mask

    Field-level masking and pseudonymization applied on your side, before the result travels. The model never sees the raw field. Composio, AnythingMCP and both provider tunnels have no field-level masking at all.

  4. 04

    Log

    Who asked, which tool, which records, which fields were masked. One audit trail across every AI client, exportable for review.

One policy, every client. The rules live in the gateway, not in the AI tool. Add a client, and it inherits the same access rules, masking and audit trail. Nothing to re-implement per vendor.

Week one

The answers stop being generic.

Same people, same assistant. The difference is that it can now see your systems, and only the part each person is allowed to see.

Sales

“Which of my accounts has an invoice open longer than 30 days?”

Answered from your ERP, limited to the accounts that person owns.

Service

“Summarize every ticket this customer opened since March.”

Answered from your service desk, with the fields you marked as personal held back.

Operations

“Can we ship the Meyer order this week?”

Answered from your stock and delivery tables, read only.

Getting started

Three ways in.

Connect what you already use

Live in minutes

Google Search Console, Google Ads, Stripe, Airtable, PostHog, GitHub, Supabase, Grafana, an n8n workflow, a Make scenario, or an MCP server built by your own team. Sign in once and it inherits OAuth that Claude and ChatGPT actually accept, one access per person instead of one shared token, and a full audit trail. The server stays where it is, even inside your network.

Free, up to 2 MCP servers

Have us generate it

Same day

You have an OpenAPI spec, a reachable REST API or a SQL database. We turn it into an MCP server: point us at it, name the tools, mark the personal fields. Live the same day.

From €99 per month

Have us build it

Five working days

No spec, an unusual protocol, or nobody with the time. We build the MCP server, name the tools, mask the personal fields and hand it over live. Nothing to pay if we miss the date. Optional on every tier.

€990 once

Systems that are not reachable from outside run behind your own Runner, inside your network. +€199 per month, on any tier.

Internal ERP, nothing exposed: that is a tier, a runner and one connector built for you. What it costs is on the pricing page, where the ladder is kept.

A connector built for you is included from €99 per month, on the Team tier.

First connector live in five working days. If the first tool call isn't live on day five, the setup fee is on us.

Why Loopthink

You could build this. Then you'd run it.

One database, one team, a developer who enjoys this: a weekend gets you an MCP server in a container, a tunnel and a token in a config file. That works, and we won't pretend otherwise.

It stops working when the second system arrives, and again when the second assistant does.

Build it yourself

Two systems × three role profiles = six servers

sap-mcp (sales)container · token · own logsap-mcp (finance)container · token · own logsap-mcp (service)container · token · own logpostgres-mcp (sales)container · token · own logpostgres-mcp (finance)container · token · own logpostgres-mcp (service)container · token · own logOpenAI tunnelAnthropic tunneltunneltunnelthe provider's tunnel where there is one, your own where there isn'tChatGPTClaudeLangdockOpen WebUI

6 containers · 6 tokens · 6 logs · 24 approvals

every server is added and approved in every assistant, one by one

With Loopthink

One connector, four assistants

SAP · ERPYour databasesInternal APIsSalesforce · HubSpot · M365Runneroptional, in your networkAAcme Groupmcp.acme.comCOMPANY SSOidentity · policy · masking · logChatGPTClaudeLangdockOpen WebUI

one identity · one policy · one log

Two systems. Three role profiles, because in an AI client a connector is either on or off and there is no layer underneath it. Four assistants. Two times three is six servers to deploy, patch and log, and six times four is twenty-four registrations to approve, because every server is added to every assistant separately. Five systems on those same three role profiles is fifteen servers and sixty registrations, and one list to work through every time somebody leaves.

Build it yourselfWith Loopthink
What you deployOne server per system, per role profile, per assistantOne connector, on your own domain
Who the target system seesOne service account, the same for everyoneThe person who asked
Who can use which toolAnyone who has the connectorOnly the tools their role grants, at server level and at tool level
Someone leavesRevoke in every system and every clientOne switch in your identity provider
Who keeps it runningYour team, from now onUs

Who does the work

Nobody at your company writes code for this. You point us at a system, name the tools in your own words and mark the personal fields. That is configuration, not development.

It carries your name, not ours. Your people don't install “Loopthink”. They install your company's connector, on your own domain, with your logo, sitting in the same list as every other connector in Claude and ChatGPT. Rolled out once, for everyone.

Build it yourself if you have a platform team that wants to own an internal MCP gateway. Done properly, that means per-user OAuth, role resolution against your identity provider, policy per tool, masking on the way back and one audit trail across every assistant. At that point you are not building a connector, you are building a product. You can also have it on Friday.

Why Loopthink

How this compares.

LoopthinkMicrosoft SQL MCP ServerAnythingMCPComposioAnthropic MCP Tunnels
Reaches systems not exposed to the internetYesNoNot documentedEnterprise onlyYes, but not in claude.ai
Field-level masking before the model sees dataYesNoNoNoNo
Runs as the person who askedYesPartlyNot documentedPartlyNo
One audit trail across Claude and ChatGPTYesPer serverPer gatewayTunnel events only
Your own connector domain and logoYesNoNo
Somebody builds it for youYes, €990NoNoNoNo
Entry priceFree, then from €39Free€19FreeFree, research preview

Connecting a single database, and you have a developer team? Microsoft's SQL MCP Server is free, production-ready and runs on-premises. It is the right choice, and we don't compete with it. We govern it, alongside everything else you connect.

Looking at a specific gateway? Row by row, with sources: Composio alternative · MintMCP alternative · MCP Manager alternative · AnythingMCP alternative

Technical Whitepaper

Governing MCP Access to Enterprise Systems

Gateway architecture, field-level masking, and deployment topologies, written for architects, security engineers and CISOs. Deliberately explicit about what a gateway does not solve.

  • Compliance mapped to controls. GDPR, EU AI Act, DORA and BSI C5 requirements against concrete technical and organizational controls.
  • Vendor-neutral. The same policies across models and cloud providers, without locking governance into a single hyperscaler.

Credentials stay in the Runner, inside your network. Hosted in the EU, or deployed entirely on your own infrastructure for air-gapped and highest-regulation environments.

40%+ of agentic AI projects will be cancelled by 2027, on weak governance and unclear ROI. Gartner.

FAQ

The questions that come up before the pilot.

Who in our company has to add the connector?
On Claude Team and Enterprise plans, only an Owner can add a custom connector. We hand you a prefilled link you can forward, plus a one-page note for your security team. On Free, Pro and Max you can add it yourself.
Can't we just build our own MCP server?
For one reachable database, yes, and the open source servers are good. What doesn't come with them is per-user identity into the target system, permissions at tool level, field masking, one audit trail across assistants, and somebody who patches it. That is the part we sell, and an existing MCP server keeps working: point it at us and it inherits all of it.
Do we need developers?
No. You connect a documented API yourself, or we build the connector for €990 in five working days. Naming the tools, setting the role matrix and marking personal fields is configuration, not development. What you do need is somebody who can decide which role sees what.
Where do our system credentials live?
In the Runner, inside your network. The gateway never needs to see them.
How many tools will our people get?
A curated set, typically under fifteen tools per connected system, named in your own business language, read-only by default. What one person sees is smaller again, because they only ever get the tools their role grants, not the catalogue. Read and write are always separate tools, and we deliberately do not expose every table.
What happens after the five days?
The connector is yours and running. You are on your monthly plan, and you can add systems yourself or book our team by the day.
Do we need a Claude or ChatGPT contract?
Yes, on their side. We govern the access, we don't resell the assistant.
What does Loopthink not solve?
Bad data stays bad data, and a governed connector is not a data warehouse. The whitepaper is deliberately explicit about the limits.
Get a demo

See your systems answer in Claude.

Tell us which systems you run and who should be able to ask. We connect a system like yours, mask the sensitive fields and follow a request through the gateway.

  • Thirty minutes, no slides: a system like yours, live in Claude and ChatGPT
  • For CTOs, IT and application leads, and the people who own the systems
  • Your details stay in the EU

By submitting you agree to be contacted about Loopthink, and to us evaluating where your enquiry came from to measure our campaigns. No spam, ever.

Your teams already use AI. Give them one connector.

Yours, branded and governed, with your internal systems behind it and nothing exposed to the internet.