1(self.webpackChunk_N_E=self.webpackChunk_N_E||[]).push([[4355],{1378:(e,t,r)=>{(window.__NEXT_P=window.__NEXT_P||[]).push(["/solutions/own-your-mcp-servers",function(){return r(7635)}])},7635:(e,t,r)=>{"use strict";r.r(t),r.d(t,{default:()=>o});var i=r(7876),s=r(8230),n=r.n(s);let o=function(){return(0,i.jsxs)(i.Fragment,{children:[(0,i.jsx)("div",{className:"sticky top-14 z-10 bg-white border-b border-t border-gray-200 shadow-sm",children:(0,i.jsx)("nav",{className:"max-w-7xl mx-auto px-4 py-3","aria-label":"Breadcrumb",children:(0,i.jsxs)("ol",{className:"flex items-center justify-center text-sm text-gray-600",children:[(0,i.jsx)("li",{children:(0,i.jsx)(n(),{href:"/lumen-fortinet-ibm-solutions",className:"text-sky-800 hover:text-sky-800 focus:outline-none focus:ring-2 focus:ring-sky-800",children:"Solutions"})}),(0,i.jsxs)("li",{children:[(0,i.jsx)("span",{className:"mx-2",children:"/"}),(0,i.jsx)("span",{className:"",children:"Own Your MCP Servers "})]})]})})}),(0,i.jsx)("section",{className:"py-20 relative",children:(0,i.jsxs)("div",{className:"mx-auto max-w-screen-xl px-3 grid items-center gap-14 lg:grid-cols-[1.15fr_0.85fr] max-[820px]:grid-cols-1",children:[(0,i.jsxs)("div",{children:[(0,i.jsx)("div",{className:"mb-[26px] inline-flex items-center gap-2.5","aria-label":"Backflipt",children:(0,i.jsxs)("span",{className:"inline-flex items-center gap-2.5",children:[(0,i.jsx)("img",{className:"h-[34px] w-auto block max-w-full",src:"data:image/png;base64,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
1XBAQQYV9BQIPc6IlhR63OLVYUHkspsnEAkw62ONFo/d99gdJ3rSUKOHgWAAoGhkgHaZD7m8vnutQH0sELB0uUlFAi/ufHj6NFyEdlFfks95cJUfgpZK03UpKwVu99oPCQGAwFqdsDR9t+yRaW9cLNu+kH+bkLdoda4FXSCI5hLIBSLAUvUQdD+ByjwyvWzrkmst/Ltd/PZ3SI66BwcpGZ8AAAAASUVORK5CYII=",alt:"Backflipt logo, agentic AI governance by Backflipt Lumen"}),(0,i.jsx)("span",{className:"text-[23px] font-semibold text-[#131E29] tracking-[-.01em] leading-none",children:"Backflipt"})]})}),(0,i.jsxs)("h1",{className:"text-4xl font-bold text-[#552466]",children:["Bring MCP Home. Own Your MCP Servers. ",(0,i.jsx)("span",{className:"text-[#94C93D]",children:"Govern Every Agent"})," That Uses Them. "]}),(0,i.jsx)("p",{className:"mt-[18px] text-lg",children:"Every app in minutes, no infrastructure to run. That is the hosted MCP pitch, and the price is governance: your application credentials and your agents' actions move to a vendor cloud, outside your identity provider, your policies and your audit log. Lumen POET brings MCP home. The APIs you already have, from SaaS applications or your own API gateway, become precise MCP servers running as a VM in your VPC on AWS or Azure. And every agent call through them is identity-governed: verified against Active Directory, Entra ID or Okta, authorized by policy for that user, group, role and agent, credentialed from your vault by the Lumen POET Credential Broker, and recorded on your audit trail."}),(0,i.jsxs)("div",{className:"mt-[26px]",children:[(0,i.jsx)("a",{className:"inline-block rounded-md px-[30px] py-[13px] text-base font-semibold no-underline transition-colors bg-[#94C93D] text-[#2c3a12] hover:bg-[#a4d651]",href:"https://calendly.com/backflipt/schedule-a-meeting-with-us",children:"Schedule Meeting"}),(0,i.jsx)(n(),{href:"/datasheets/lumen-poet",className:"inline-block rounded-md px-[30px] py-[13px] text-base font-semibold no-underline transition-colors ml-3 border-[1.5px] border-[#552466] text-[#552466] hover:bg-[#552466]/5 max-[820px]:ml-0 max-[820px]:mt-3",children:"Download the Lumen POET Data Sheet"})]}),(0,i.jsxs)("div",{className:"mt-[22px] inline-flex items-center gap-2.5 rounded-md border border-[#d9e1e2] border-l-4 border-l-[#94C93D] bg-white px-4 py-2.5 text-[13.5px] text-[#45525f]",children:[(0,i.jsxs)("svg",{width:"22",height:"22",viewBox:"0 0 22 22","aria-hidden":"true",children:[(0,i.jsx)("rect",{x:"2",y:"4",width:"18",height:"12",rx:"2",fill:"none",stroke:"#552466",strokeWidth:"1.6"}),(0,i.jsx)("path",{d:"M6 19h10M11 16v3",stroke:"#552466",strokeWidth:"1.6"}),(0,i.jsx)("path",{d:"M5 12l3-3 3 2 5-4",fill:"none",stroke:"#94C93D",strokeWidth:"1.8",strokeLinecap:"round",strokeLinejoin:"round"})]}),"Runs as a VM in your VPC on AWS or Azure. Scales as agent demand grows. Deploys with Helm and Terraform."]})]}),(0,i.jsx)("div",{className:"flex items-center justify-center [&_svg]:h-auto [&_svg]:w-full [&_svg]:max-w-[560px]",role:"presentation",children:(0,i.jsxs)("svg",{viewBox:"0 0 560 470",xmlns:"http://www.w3.org/2000/svg",role:"img","aria-labelledby":"heroT heroD",children:[(0,i.jsx)("title",{id:"heroT",children:"Where the application keys live: in the vendor cloud with a hosted MCP service, or in your own vault with Lumen POET"}),(0,i.jsx)("desc",{id:"heroD",children:"Two lanes. Top lane: an AI agent calls a vendor cloud that holds your application keys, then reaches Workday, which sees the vendor. Bottom lane: an AI agent with a short-lived token calls your VPC, where a generated MCP server and the Credential Broker take the key from your vault, then reach Workday, which sees your identity."}),(0,i.jsxs)("defs",{children:[(0,i.jsx)("filter",{id:"cardShadow",x:"-20%",y:"-20%",width:"140%",height:"140%",children:(0,i.jsx)("feDropShadow",{dx:"0",dy:"2",stdDeviation:"6",floodColor:"#552466",floodOpacity:"0.10"})}),(0,i.jsx)("marker",{id:"ah-g",viewBox:"0 0 10 10",refX:"9",refY:"5",markerWidth:"7",markerHeight:"7",orient:"auto",children:(0,i.jsx)("path",{d:"M1 1l8 4-8 4z",fill:"#9aa8b1"})}),(0,i.jsx)("marker",{id:"ah-p",viewBox:"0 0 10 10",refX:"9",refY:"5",markerWidth:"7",markerHeight:"7",orient:"auto",children:(0,i.jsx)("path",{d:"M1 1l8 4-8 4z",fill:"#552466"})})]}),(0,i.jsx)("path",{d:"M280 16 C360 4 440 30 470 84 C498 132 536 168 540 226 C544 286 508 320 500 372 C490 428 430 456 360 462 C300 468 260 444 196 452 C130 460 66 434 44 380 C24 330 42 288 36 238 C30 184 52 130 100 98 C148 66 200 28 280 16 Z",fill:"#f5f0f8"}),(0,i.jsxs)("g",{children:[(0,i.jsx)("path",{d:"M436 60 l3 7.3 7.3 3 -7.3 3 -3 7.3 -3 -7.3 -7.3 -3 7.3 -3 z",fill:"#94C93D"}),(0,i.jsx)("path",{d:"M84 262 l2.4 5.9 5.9 2.4 -5.9 2.4 -2.4 5.9 -2.4 -5.9 -5.9 -2.4 5.9 -2.4 z",fill:"#c9b3d6"}),(0,i.jsx)("path",{d:"M492 330 l3 7.3 7.3 3 -7.3 3 -3 7.3 -3 -7.3 -7.3 -3 7.3 -3 z",fill:"#94C93D"}),(0,i.jsx)("path",{d:"M168 430 l1.9 4.6 4.6 1.9 -4.6 1.9 -1.9 4.6 -1.9 -4.6 -4.6 -1.9 4.6 -1.9 z",fill:"#c9b3d6"})]}),(0,i.jsx)("text",{x:"70",y:"86",fontSize:"10",fontWeight:"600",letterSpacing:"1.6",fill:"#768692",children:"HOSTED MCP SERVICE"}
vendor: 7,966 bytes, line 1
1),(0,i.jsx)("g",{filter:"url(#cardShadow)",children:(0,i.jsx)("rect",{x:"70",y:"98",width:"96",height:"48",rx:"10",fill:"#fff"})}),(0,i.jsx)("text",{x:"118",y:"127",textAnchor:"middle",fontSize:"11",fontWeight:"600",fill:"#131E29",children:"AI agent"}),(0,i.jsx)("path",{d:"M166 122h26",stroke:"#9aa8b1",strokeWidth:"1.6",fill:"none",markerEnd:"url(#ah-g)"}),(0,i.jsx)("rect",{x:"196",y:"92",width:"196",height:"60",rx:"10",fill:"#fdf0ef",stroke:"#F05751",strokeWidth:"1.2",strokeDasharray:"4 3"}),(0,i.jsx)("text",{x:"294",y:"110",textAnchor:"middle",fontSize:"10",fontWeight:"600",fill:"#768692",children:"Vendor cloud"}),(0,i.jsxs)("g",{transform:"translate(240 120)",children:[(0,i.jsx)("circle",{cx:"8",cy:"8",r:"6.5",fill:"none",stroke:"#F05751",strokeWidth:"2"}),(0,i.jsx)("path",{d:"M14 8h26M34 8v6M41 8v5",stroke:"#F05751",strokeWidth:"2",fill:"none"})]}),(0,i.jsx)("text",{x:"298",y:"134",fontSize:"11",fontWeight:"600",fill:"#F05751",children:"your app keys"}),(0,i.jsx)("path",{d:"M392 122h26",stroke:"#9aa8b1",strokeWidth:"1.6",fill:"none",markerEnd:"url(#ah-g)"}),(0,i.jsx)("g",{filter:"url(#cardShadow)",children:(0,i.jsx)("rect",{x:"422",y:"98",width:"96",height:"48",rx:"10",fill:"#fff"})}),(0,i.jsx)("text",{x:"470",y:"119",textAnchor:"middle",fontSize:"11",fontWeight:"600",fill:"#131E29",children:"Workday"}),(0,i.jsx)("text",{x:"470",y:"134",textAnchor:"middle",fontSize:"9",fill:"#768692",children:"sees the vendor"}),(0,i.jsx)("text",{x:"70",y:"216",fontSize:"10",fontWeight:"600",letterSpacing:"1.6",fill:"#552466",children:"LUMEN POET"}),(0,i.jsx)("g",{filter:"url(#cardShadow)",children:(0,i.jsx)("rect",{x:"70",y:"228",width:"96",height:"48",rx:"10",fill:"#fff"})}),(0,i.jsx)("text",{x:"118",y:"249",textAnchor:"middle",fontSize:"11",fontWeight:"600",fill:"#131E29",children:"AI agent"}),(0,i.jsx)("text",{x:"118",y:"264",textAnchor:"middle",fontSize:"9",fill:"#768692",children:"short-lived token"}),(0,i.jsx)("path",{d:"M166 252h26",stroke:"#552466",strokeWidth:"1.6",fill:"none",markerEnd:"url(#ah-p)"}),(0,i.jsx)("rect",{x:"196",y:"204",width:"196",height:"196",rx:"10",fill:"#fff",stroke:"#552466",strokeWidth:"1.2",strokeDasharray:"4 3"}),(0,i.jsx)("text",{x:"294",y:"222",textAnchor:"middle",fontSize:"10",fontWeight:"600",fill:"#552466",children:"Your VPC on AWS or Azure"}),(0,i.jsx)("rect",{x:"210",y:"234",width:"168",height:"36",rx:"8",fill:"#552466"}),(0,i.jsx)("text",{x:"294",y:"256",textAnchor:"middle",fontSize:"11",fontWeight:"600",fill:"#fff",children:"MCP server, generated"}),(0,i.jsx)("path",{d:"M294 270v14",stroke:"#552466",strokeWidth:"1.6",fill:"none",markerEnd:"url(#ah-p)"}),(0,i.jsx)("rect",{x:"210",y:"288",width:"168",height:"36",rx:"8",fill:"#552466"}),(0,i.jsx)("text",{x:"294",y:"310",textAnchor:"middle",fontSize:"11",fontWeight:"600",fill:"#fff",children:"Credential Broker"}),(0,i.jsx)("path",{d:"M294 324v14",stroke:"#552466",strokeWidth:"1.6",fill:"none",markerEnd:"url(#ah-p)"}),(0,i.jsx)("rect",{x:"210",y:"342",width:"168",height:"44",rx:"8",fill:"#f5f0f8",stroke:"#c9b3d6",strokeWidth:"1"}),(0,i.jsxs)("g",{transform:"translate(224 355)",children:[(0,i.jsx)("rect",{x:"0",y:"6",width:"14",height:"10",rx:"2",fill:"#552466"}),(0,i.jsx)("path",{d:"M3 6V4a4 4 0 0 1 8 0v2",stroke:"#552466",strokeWidth:"2",fill:"none"})]}),(0,i.jsx)("text",{x:"246",y:"362",fontSize:"10.5",fontWeight:"600",fill:"#552466",children:"Your vault holds the keys"}),(0,i.jsx)("text",{x:"246",y:"376",fontSize:"9",fill:"#768692",children:"every call on your audit trail"}),(0,i.jsx)("path",{d:"M392 252h26",stroke:"#552466",strokeWidth:"1.6",fill:"none",markerEnd:"url(#ah-p)"}),(0,i.jsx)("g",{filter:"url(#cardShadow)",children:(0,i.jsx)("rect",{x:"422",y:"228",width:"96",height:"48",rx:"10",fill:"#fff"})}),(0,i.jsx)("text",{x:"470",y:"249",textAnchor:"middle",fontSize:"11",fontWeight:"600",fill:"#131E29",children:"Workday"}),(0,i.jsx)("text",{x:"470",y:"264",textAnchor:"middle",fontSize:"9",fill:"#768692",children:"sees your identity"})]})})]})}),(0,i.jsx)("section",{className:"pb-16 py-2",id:"ratings",children:(0,i.jsx)("div",{className:"mx-auto max-w-screen-xl px-3",children:(0,i.jsxs)("div",{className:"rounded-[10px] border border-[#d9e1e2] border-l-[6px] border-l-[#552466] bg-white px-[34px] py-8 max-[820px]:px-5 max-[820px]:py-6 [&_h2]:mb-3 [&_.lead]:mb-0",children:[(0,i.jsx)("span",{className:"mb-3 block text-[13px] font-semibold uppercase tracking-[.14em] text-[#552466]",children:"The Question Security Teams Are Asking Right Now"}),(0,i.jsxs)("h2",{className:"text-3xl font-extrabold text-[#552466] mb-4",children:["Stop Rating Third-Party MCP Servers. ",(0,i.jsx)("span",{className:"text-[#94C93D]",children:"Own Them"})]}),(0,i.jsx)("p",{className:"max-w-[840px]",children:"Enterprises adopting hosted MCP servers are asking for security ratings to get comfortable: SOC 2 reports, penetration test letters, vendor questionnaires, third-party risk scores. The review exists for one reason. The server, the token store and the log sit outside your perimeter, so someone else's controls now guard your Workday, ServiceNow or Salesforce access. Move the MCP server inside your perimeter, under the identity governance your applications already have, and the question disappears."}),(0,i.jsxs)("div",{className:"mt-7 grid grid-cols-2 gap-6 max-[820px]:grid-cols-1",children:[(0,i.jsxs)("div",{className:"rounded-[10px] border border-[#d9e1e2] bg-white px-[22px] py-6 [&_h3]:mb-1.5 [&_h3]:text-[17.5px] [&_h3]:font-extrabold [&_h3]:text-[#552466] [&_p]:m-0 [&_p]:text-[14.5px]",children:[(0,i.jsx)("div",{className:"mb-1.5 text-[13px] font-semibold uppercase tracking-[.1em] text-[#F05751]",children:"Today: rating someone else's server"}),(0,i.jsxs)("ul",{className:"list-none m-0 p-0 [&>li]:relative [&>li]:py-1.5 [&>li]:pl-6 [&>li]:text-[15px] [&>li]:text-[#45525f] [&>li]:before:absolute [&>li]:before:left-0.5 [&>li]:before:top-[15px] [&>li]:before:h-2 [&>li]:before:w-2 [&>li]:before:rounded-full [&>li]:before:bg-[#94C93D] [&>li]:before:content-['']",children:[(0,i.jsx)("li",{children:"Vendor questionnaire and SOC 2 review for a service that holds your application keys"}),(0,i.jsx)("li",{children:"A new sub-processor in every DPA behind that endpoint"}),(0,i.jsx)("li",{children:"Evidence for the auditor produced by the vendor, on the vendor's schedule"}),(0,i.jsx)("li",{children:"A rating that is only as current as the vendor's last audit"})]})]}),(0,i.jsxs)("div",{className:"rounded-[10px] border border-[#552466] bg-[rgba(85,36,102,0.04)] px-[22px] py-6 [&_h3]:mb-1.5 [&_h3]:text-[17.5px] [&_h3]:font-extrabold [&_h3]:text-[#552466] [&_p]:m-0 [&_p]:text-[14.5px]",children:[(0,i.jsx)("div",{className:"mb-1.5 text-[13px] font-semibold uppercase tracking-[.1em] text-[#94C93D]",children:"With Lumen POET: nothing to rate"}),(0,i.jsxs)("ul",{className:"list-none m-0 p-0 [&>li]:relative [&>li]:py-1.5 [&>li]:pl-6 [&>li]:text-[15px] [&>li]:text-[#45525f] [&>li]:before:absolute [&>li]:before:left-0.5 [&>li]:before:top-[15px] [&>li]:before:h-2 [&>li]:before:w-2 [&>li]:before:rounded-full [&>li]:before:bg-[#94C93D] [&>li]:before:content-['']",children:[(0,i.jsx)("li",{children:"The MCP server is a VM in your VPC, generated from your own API specification"}),(0,i.jsx)("li",{children:"Credentials stay in your PAM vault, released per call by the Credential Broker"}),(0,i.jsx)("li",{children:"Your identity provider, your WAF, your SIEM and your auditor already cover it"}),(0,i.jsx)("li",{children:"No third party to assess, because no third party is in the path"})]})]})]})]})})}),(0,i.jsx)("section",{className:"bg-[#eef1f2] py-16",id:"who",children:(0,i.jsxs)("div",{className:"mx-auto max-w-screen-xl px-3",children:[(0,i.jsx)("span",{className:"mb-3 block text-[13px] font-semibold uppercase tracking-[.14em] text-[#768692]",children:"Who This Page Is For"}),(0,i.jsx)("h2",{className:"text-3xl font-extrabold text-[#552466] mb-4",children:"One Decision, Four Reader Questions"}
vendor: 10,280 bytes, line 1
1),(0,i.jsxs)("div",{className:"mt-7 grid grid-cols-4 gap-5 max-[980px]:grid-cols-2 max-[560px]:grid-cols-1",children:[(0,i.jsx)("a",{className:"block h-full no-underline text-inherit",href:"#control",children:(0,i.jsxs)("div",{className:"h-full rounded-[10px] border border-[#d9e1e2] bg-white px-[22px] py-6 transition-colors hover:border-[#552466] [&_h3]:mb-1.5 [&_h3]:text-[16.5px] [&_h3]:font-extrabold [&_h3]:text-[#552466] [&_p]:m-0 [&_p]:text-[14.5px]",children:[(0,i.jsx)("div",{className:"mb-1.5 text-[13px] font-semibold uppercase tracking-[.1em] text-[#94C93D]",children:"CISO / CSO"}),(0,i.jsx)("h3",{children:"Can I let agents reach our enterprise applications under the governance we already have?"}),(0,i.jsx)("p",{children:"Yes. The MCP server runs in your VPC, every call is verified by your identity provider and authorized by your policy, and the Credential Broker keeps the credentials in your PAM vault. No standing secret leaves the enterprise."})]})}),(0,i.jsx)("a",{className:"block h-full no-underline text-inherit",href:"#steps",children:(0,i.jsxs)("div",{className:"h-full rounded-[10px] border border-[#d9e1e2] bg-white px-[22px] py-6 transition-colors hover:border-[#552466] [&_h3]:mb-1.5 [&_h3]:text-[16.5px] [&_h3]:font-extrabold [&_h3]:text-[#552466] [&_p]:m-0 [&_p]:text-[14.5px]",children:[(0,i.jsx)("div",{className:"mb-1.5 text-[13px] font-semibold uppercase tracking-[.1em] text-[#94C93D]",children:"CIO"}),(0,i.jsx)("h3",{children:"Does this add a platform to run, or use what we already have?"}),(0,i.jsx)("p",{children:"It uses what you have: your API specifications, your identity provider, your vault, your API gateway. Deployed as a VM with Helm and Terraform on AWS or Azure."})]})}),(0,i.jsx)("a",{className:"block h-full no-underline text-inherit",href:"#gateway",children:(0,i.jsxs)("div",{className:"h-full rounded-[10px] border border-[#d9e1e2] bg-white px-[22px] py-6 transition-colors hover:border-[#552466] [&_h3]:mb-1.5 [&_h3]:text-[16.5px] [&_h3]:font-extrabold [&_h3]:text-[#552466] [&_p]:m-0 [&_p]:text-[14.5px]",children:[(0,i.jsx)("div",{className:"mb-1.5 text-[13px] font-semibold uppercase tracking-[.1em] text-[#94C93D]",children:"Chief AI Officer"}),(0,i.jsx)("h3",{children:"Do I lose the speed the hosted MCP vendors promise?"}),(0,i.jsx)("p",{children:"No. Generation is spec-driven with no code. What you gain is precise tools, your own identity on every call, and a path from pilot to production without re-work."})]})}),(0,i.jsx)("a",{className:"block h-full no-underline text-inherit",href:"#catalog",children:(0,i.jsxs)("div",{className:"h-full rounded-[10px] border border-[#d9e1e2] bg-white px-[22px] py-6 transition-colors hover:border-[#552466] [&_h3]:mb-1.5 [&_h3]:text-[16.5px] [&_h3]:font-extrabold [&_h3]:text-[#552466] [&_p]:m-0 [&_p]:text-[14.5px]",children:[(0,i.jsx)("div",{className:"mb-1.5 text-[13px] font-semibold uppercase tracking-[.1em] text-[#94C93D]",children:"Application Owner"}),(0,i.jsx)("h3",{children:"Who is accountable when an agent changes a record in my system?"}),(0,i.jsx)("p",{children:"You can answer that. Every call is recorded: which agent, which user, which policy, which credential, which tool."})]})})]})]})}),(0,i.jsx)("section",{className:"py-16",id:"pitch",children:(0,i.jsxs)("div",{className:"mx-auto max-w-screen-xl px-3",children:[(0,i.jsx)("span",{className:"mb-3 block text-[13px] font-semibold uppercase tracking-[.14em] text-[#552466]",children:"Business Challenges"}),(0,i.jsxs)("h2",{className:"text-3xl font-extrabold text-[#552466] mb-4",children:["Hosted MCP Servers Are Convenient. They Are Also ",(0,i.jsx)("span",{className:"text-[#F05751]",children:"Someone Else's Cloud"})]}),(0,i.jsx)("p",{className:"max-w-[840px]",children:"Merge Agent Handler, Unified.to, Composio, Pipedream MCP, Zapier MCP, Nango, Arcade and StackOne all sell the same thing: connect your agent to hundreds of apps in minutes, we handle OAuth and tokens, no infrastructure to run. Good products for the problem they solve. For the applications you are accountable for, three things move out of your control."}),(0,i.jsxs)("div",{className:"mt-7 grid grid-cols-3 gap-6 max-[980px]:grid-cols-1 [&_h3]:text-[17.5px] [&_h3]:font-extrabold [&_h3]:text-[#552466] [&_h3]:mb-1.5",children:[(0,i.jsxs)("div",{className:"rounded-[10px] border border-[#d9e1e2] bg-white px-[22px] py-6 [&_h3]:mb-1.5 [&_h3]:text-[17.5px] [&_h3]:font-extrabold [&_h3]:text-[#552466] [&_p]:m-0 [&_p]:text-[14.5px]",children:[(0,i.jsx)("div",{className:"mb-1.5 text-[13px] font-semibold uppercase tracking-[.1em] text-[#94C93D]",children:"The keys"}),(0,i.jsx)("h3",{children:"Your credentials sit in their token store"}),(0,i.jsx)("p",{children:"Your Workday, ServiceNow or Salesforce token lives in the vendor cloud under a vendor user ID, protected by the vendor's controls and the vendor's incident response."})]}),(0,i.jsxs)("div",{className:"rounded-[10px] border border-[#d9e1e2] bg-white px-[22px] py-6 [&_h3]:mb-1.5 [&_h3]:text-[17.5px] [&_h3]:font-extrabold [&_h3]:text-[#552466] [&_p]:m-0 [&_p]:text-[14.5px]",children:[(0,i.jsx)("div",{className:"mb-1.5 text-[13px] font-semibold uppercase tracking-[.1em] text-[#94C93D]",children:"The identity"}),(0,i.jsx)("h3",{children:"Your application sees the vendor, not you"}),(0,i.jsx)("p",{children:"The agent is identified by a vendor key. Your IAM, PAM and SIEM see one outbound integration, not the agent, the person or the policy behind the call."})]}),(0,i.jsxs)("div",{className:"rounded-[10px] border border-[#d9e1e2] bg-white px-[22px] py-6 [&_h3]:mb-1.5 [&_h3]:text-[17.5px] [&_h3]:font-extrabold [&_h3]:text-[#552466] [&_p]:m-0 [&_p]:text-[14.5px]",children:[(0,i.jsx)("div",{className:"mb-1.5 text-[13px] font-semibold uppercase tracking-[.1em] text-[#94C93D]",children:"The record"}),(0,i.jsx)("h3",{children:"The audit trail is theirs"}),(0,i.jsx)("p",{children:"Policy is the vendor's rules and the log is the vendor's dashboard. When an auditor asks who changed the record, the answer is in someone else's system."})]})]})]})}),(0,i.jsx)("section",{className:"bg-[rgba(85,36,102,0.05)] py-16",id:"saas",children:(0,i.jsxs)("div",{className:"mx-auto max-w-screen-xl px-3",children:[(0,i.jsx)("span",{className:"mb-3 block text-[13px] font-semibold uppercase tracking-[.14em] text-[#552466]",children:"The Lumen POET Answer"}),(0,i.jsxs)("h2",{className:"text-3xl font-extrabold text-[#552466] mb-4",children:["Your SaaS Applications Already Publish APIs. Turn Them Into ",(0,i.jsx)("span",{className:"text-[#94C93D]",children:"Your Own MCP Servers"})]}),(0,i.jsx)("p",{className:"max-w-[840px]",children:"Workday, ServiceNow, Salesforce, SAP, Microsoft 365, Slack and Jira all publish their APIs today, with OpenAPI or Swagger specifications your teams can download. A hosted MCP vendor wraps those same APIs in its cloud and holds your tokens. Lumen POET does it in your VPC: it turns the specification into a precise MCP server, and the Lumen POET Credential Broker authenticates every agent call against your Active Directory, Entra ID or Okta before swapping in the application credential from your vault."}),(0,i.jsxs)("div",{className:"mt-7 [&_svg]:block [&_svg]:h-auto [&_svg]:w-full",role:"presentation",children:[(0,i.jsxs)("svg",{viewBox:"0 0 1000 330",xmlns:"http://www.w3.org/2000/svg",role:"img","aria-labelledby":"sT sD",children:[(0,i.jsx)("title",{id:"sT",children:"SaaS APIs as your own MCP servers, authenticated with Entra ID or Okta"}),(0,i.jsx)("desc",{id:"sD",children:"An AI agent authenticates with Active Directory, Entra ID or Okta and calls MCP servers generated by Lumen POET inside your VPC. The Credential Broker verifies the enterprise token and swaps it for the application credential from your vault. The MCP servers call the published APIs of Workday, ServiceNow and Salesforce in their own clouds."}),(0,i.jsxs)("defs",{children:[(0,i.jsx)("marker",{id:"s-g",viewBox:"0 0 10 10",refX:"9",refY:"5",markerWidth:"8",markerHeight:"8",orient:"auto",children:(0,i.jsx)("path",{d:"M1 1l8 4-8 4z",fill:"#9aa8b1"})}),(0,i.jsx)("marker",{id:"s-p",viewBox:"0 0 10 10",refX:"9",refY:"5",markerWidth:"8",markerHeight:"8",orient:"auto",children:(0,i.jsx)("path",{d:"M1 1l8 4-8 4z",fill:"#552466"})})]}),(0,i.jsxs)("g",{children:[(0,i.jsx)("path",{d:"M700 300 l2.4 5.9 5.9 2.4 -5.9 2.4 -2.4 5.9 -2.4 -5.9 -5.9 -2.4 5.9 -2.4 z",fill:"#94C93D"}),(0,i.jsx)("path",{d:"M40 40 l1.8 4.4 4.4 1.8 -4.4 1.8 -1.8 4.4 -1.8 -4.4 -4.4 -1.8 4.4 -1.8 z",fill:"#c9b3d6"})]}),(0,i.jsx)("rect",{x:"20",y:"16",width:"700",height:"298",rx:"14",fill:"#f6f7f8"}),(0,i.jsx)("text",{x:"370",y:"44",textAnchor:"middle",fontSize:"10",fontWeight:"600",letterSpacing:"1.6",fill:"#768692",children:"YOUR VPC ON AWS OR AZURE"}),(0,i.jsx)("rect",{x:"750",y:"16",width:"230",height:"298",rx:"14",fill:"#fff",stroke:"#d9cfe0",strokeWidth:"1.4",strokeDasharray:"5 4"}),(0,i.jsx)("text",{x:"865",y:"44",textAnchor:"middle",fontSize:"10",fontWeight:"600",letterSpacing:"1.6",fill:"#768692",children:"SAAS CLOUDS"}),(0,i.jsx)("rect",{x:"50",y:"118",width:"150",height:"72",rx:"12",fill:"#fff",stroke:"#d9cfe0",strokeWidth:"1.4"}),(0,i.jsx)("text",{x:"125",y:"148",textAnchor:"middle",fontSize:"13",fontWeight:"600",fill:"#131E29",children:"AI agent"}),(0,i.jsx)("text",{x:"125",y:"168",textAnchor:"middle",fontSize:"11",fill:"#768692",children:"short-lived enterprise token"}),(0,i.jsx)("rect",{x:"50",y:"232",width:"150",height:"56",rx:"12",fill:"#fff",stroke:"#d9cfe0",strokeWidth:"1.4"}),(0,i.jsx)("text",{x:"125",y:"256",textAnchor:"middle",fontSize:"13",fontWeight:"600",fill:"#131E29",children:"AD, Entra ID, Okta"}),(0,i.jsx)("text",{x:"125",y:"274",textAnchor:"middle",fontSize:"11",fill:"#768692",children:"issues and verifies tokens"}),(0,i.jsx)("path",{d:"M125 232v-42",stroke:"#9aa8b1",strokeWidth:"1.6",fill:"none",markerEnd:"url(#s-g)"}),(0,i.jsx)("path",{d:"M200 154h50",stroke:"#552466",strokeWidth:"1.6",fill:"none",markerEnd:"url(#s-p)"}),(0,i.jsx)("rect",{x:"260",y:"118",width:"190",height:"72",rx:"12",fill:"#552466"}),(0,i.jsx)("text",{x:"355",y:"148",textAnchor:"middle",fontSize:"13",fontWeight:"600",fill:"#fff",children:"Lumen POET Credential Broker"}),(0,i.jsx)("text",{x:"355",y:"168",textAnchor:"middle",fontSize:"11",fill:"#e
16d9ec",children:"verify with your IdP, swap, record"}),(0,i.jsx)("path",{d:"M300 190v42",stroke:"#552466",strokeWidth:"1.6",fill:"none",markerEnd:"url(#s-p)"}),(0,i.jsx)("path",{d:"M410 190v42",stroke:"#552466",strokeWidth:"1.6",fill:"none",markerEnd:"url(#s-p)"}),(0,i.jsx)("rect",{x:"230",y:"240",width:"130",height:"48",rx:"12",fill:"#fff",stroke:"#d9cfe0",strokeWidth:"1.4"}),(0,i.jsx)("text",{x:"295",y:"260",textAnchor:"middle",fontSize:"12",fontWeight:"600",fill:"#131E29",children:"Your PAM vault"}),(0,i.jsx)("text",{x:"295",y:"276",textAnchor:"middle",fontSize:"10",fill:"#768692",children:"SaaS credentials"}),(0,i.jsx)("rect",{x:"370",y:"240",width:"130",height:"48",rx:"12",fill:"#fff",stroke:"#94C93D",strokeWidth:"1.6"}),(0,i.jsx)("text",{x:"435",y:"260",textAnchor:"middle",fontSize:"12",fontWeight:"600",fill:"#131E29",children:"Your audit trail"}),(0,i.jsx)("text",{x:"435",y:"276",textAnchor:"middle",fontSize:"10",fill:"#768692",children:"every call"}),(0,i.jsx)("path",{d:"M450 154h40",stroke:"#552466",strokeWidth:"1.6",fill:"none"}),(0,i.jsx)("path",{d:"M490 154v-58h30M490 154h30M490 154v58h30",stroke:"#552466",strokeWidth:"1.6",fill:"none"}),(0,i.jsx)("rect",{x:"520",y:"76",width:"170",height:"40",rx:"10",fill:"#552466"}),(0,i.jsx)("text",{x:"605",y:"101",textAnchor:"middle",fontSize:"12",fontWeight:"600",fill:"#fff",children:"Workday MCP server"}),(0,i.jsx)("rect",{x:"520",y:"134",width:"170",height:"40",rx:"10",fill:"#552466"}),(0,i.jsx)("text",{x:"605",y:"159",textAnchor:"middle",fontSize:"12",fontWeight:"600",fill:"#fff",children:"ServiceNow MCP server"}),(0,i.jsx)("rect",{x:"520",y:"192",width:"170",height:"40",rx:"10",fill:"#552466"}),(0,i.jsx)("text",{x:"605",y:"217",textAnchor:"middle",fontSize:"12",fontWeight:"600",fill:"#fff",children:"Salesforce MCP server"}),(0,i.jsx)("text",{x:"605",y:"262",textAnchor:"middle",fontSize:"10",fill:"#768692",children:"generated by Lumen POET from the"}),(0,i.jsx)("text",{x:"605",y:"276",textAnchor:"middle",fontSize:"10",fill:"#768692",children:"published API specification, no code"}),(0,i.jsx)("path",{d:"M690 96h80",stroke:"#9aa8b1",strokeWidth:"1.6",fill:"none",markerEnd:"url(#s-g)"}),(0,i.jsx)("path",{d:"M690 154h80",stroke:"#9aa8b1",strokeWidth:"1.6",fill:"none",markerEnd:"url(#s-g)"}),(0,i.jsx)("path",{d:"M690 212h80",stroke:"#9aa8b1",strokeWidth:"1.6",fill:"none",markerEnd:"url(#s-g)"}),(0,i.jsx)("rect",{x:"780",y:"76",width:"170",height:"40",rx:"10",fill:"#fff",stroke:"#d9cfe0",strokeWidth:"1.4"}),(0,i.jsx)("text",{x:"865",y:"101",textAnchor:"middle",fontSize:"12",fontWeight:"600",fill:"#131E29",children:"Workday API"}),(0,i.jsx)("rect",{x:"780",y:"134",width:"170",height:"40",rx:"10",fill:"#fff",stroke:"#d9cfe0",strokeWidth:"1.4"}),(0,i.jsx)("text",{x:"865",y:"159",textAnchor:"middle",fontSize:"12",fontWeight:"600",fill:"#131E29",children:"ServiceNow API"}),(0,i.jsx)("rect",{x:"780",y:"192",width:"170",height:"40",rx:"10",fill:"#fff",stroke:"#d9cfe0",strokeWidth:"1.4"}),(0,i.jsx)("text",{x:"865",y:"217",textAnchor:"middle",fontSize:"12",fontWeight:"600",fill:"#131E29",children:"Salesforce API"}),(0,i.jsx)("text",{x:"865",y:"262",textAnchor:"middle",fontSize:"10",fill:"#768692",children:"see the credential your"}),(0,i.jsx)("text",{x:"865",y:"276",textAnchor:"middle",fontSize:"10",fill:"#768692",children:"admin issued, nothing else"})]}),(0,i.jsx)("p",{className:"mt-3 text-sm italic text-[#768692]",children:"The SaaS APIs you are entitled to today, served as your own MCP servers. The agent is a user of your identity provider; the SaaS application sees only the credential your admin issued."})]}),(0,i.jsxs)("div",{className:"mt-7 grid grid-cols-3 gap-6 max-[980px]:grid-cols-1 [&_h3]:text-[17.5px] [&_h3]:font-extrabold [&_h3]:text-[#552466] [&_h3]:mb-1.5",children:[(0,i.jsxs)("div",{children:[(0,i.jsx)("div",{className:"mb-2.5 text-[44px] font-bold leading-none text-[#94C93D]",children:"1"}),(0,i.jsx)("h3",{children:"Import the SaaS API"}),(0,i.jsx)("p",{children:"Download the OpenAPI or Swagger specification from Workday, ServiceNow, Salesforce, SAP or any SaaS vendor. POET inventories every operation, parameter and auth definition. Curate the schema for AI: keep the operations agents need, drop the rest, and rewrite the descriptions so an agent reads them the way your team does. The API is never changed."})]}),(0,i.jsxs)("div",{children:[(0,i.jsx)("div",{className:"mb-2.5 text-[44px] font-bold leading-none text-[#94C93D]",children:"2"}),(0,i.jsx)("h3",{children:"Connect Your Identity and Vault"}),(0,i.jsx)("p",{children:"Point the Credential Broker at Active Directory, Entra ID or Okta so every agent call is verified against the same directory your users sign in with. Load the SaaS credentials into your PAM vault and map which access policies, b
1y user, group, role and agent, may use them."})]}),(0,i.jsxs)("div",{children:[(0,i.jsx)("div",{className:"mb-2.5 text-[44px] font-bold leading-none text-[#94C93D]",children:"3"}),(0,i.jsx)("h3",{children:"Generate and Deploy in Your VPC"}),(0,i.jsx)("p",{children:"POET generates the MCP server with no code. Helm and Terraform place it as a VM in your AWS or Azure environment, behind your WAF, scaling as agent demand grows. The agent presents an enterprise token, the broker swaps it at call time, and the call lands on your audit trail."})]})]}),(0,i.jsxs)("div",{className:"mt-7 grid grid-cols-3 gap-6 max-[980px]:grid-cols-1 [&_h3]:text-[17.5px] [&_h3]:font-extrabold [&_h3]:text-[#552466] [&_h3]:mb-1.5",children:[(0,i.jsxs)("div",{className:"rounded-[10px] border border-[#d9e1e2] bg-white px-[22px] py-6 [&_h3]:mb-1.5 [&_h3]:text-[17.5px] [&_h3]:font-extrabold [&_h3]:text-[#552466] [&_p]:m-0 [&_p]:text-[14.5px]",children:[(0,i.jsx)("h3",{children:"Same Identity as Your Users"}),(0,i.jsx)("p",{children:"Conditional access, MFA policy, group membership and leaver processes in Entra ID or Okta now apply to agents. No vendor user ID, no parallel directory."})]}),(0,i.jsxs)("div",{className:"rounded-[10px] border border-[#d9e1e2] bg-white px-[22px] py-6 [&_h3]:mb-1.5 [&_h3]:text-[17.5px] [&_h3]:font-extrabold [&_h3]:text-[#552466] [&_p]:m-0 [&_p]:text-[14.5px]",children:[(0,i.jsx)("h3",{children:"The SaaS Token Never Leaves"}),(0,i.jsx)("p",{children:"The Workday or ServiceNow credential is issued by your admin, stored in your vault and released per call by the broker. No hosted vendor holds a copy."})]}),(0,i.jsxs)("div",{className:"rounded-[10px] border border-[#d9e1e2] bg-white px-[22px] py-6 [&_h3]:mb-1.5 [&_h3]:text-[17.5px] [&_h3]:font-extrabold [&_h3]:text-[#552466] [&_p]:m-0 [&_p]:text-[14.5px]",children:[(0,i.jsx)("h3",{children:"Curated Tools per Application"}),(0,i.jsx)("p",{children:"Salesforce exposes hundreds of operations. Your agent sees the twelve it should use, named and described for the task, with everything else out of reach."})]})]})]})}),(0,i.jsx)("section",{className:"bg-[#eef1f2] py-16",id:"gateway",children:(0,i.jsxs)("div",{className:"mx-auto max-w-screen-xl px-3",children:[(0,i.jsx)("span",{className:"mb-3 block text-[13px] font-semibold uppercase tracking-[.14em] text-[#552466]",children:"The Lumen POET Answer"}),(0,i.jsxs)("h2",{className:"text-3xl font-extrabold text-[#552466] mb-4",children:["And Your Own Microservices Behind the API Gateway Become ",(0,i.jsx)("span",{className:"text-[#94C93D]",children:"Agent-Ready Too"})]}),(0,i.jsx)("p",{className:"max-w-[840px]",children:"Most enterprises have spent years putting microservices and applications behind Kong, Apigee, AWS API Gateway or MuleSoft, each one described by an OpenAPI, Swagger or RAML specification. The same three steps apply. Lumen POET reads those specifications, lets your admin curate the schema for AI, and generates precise MCP servers your agents can consume, without touching the API or the gateway. The catalog you built for applications becomes the catalog for agents."}),(0,i.jsxs)("div",{className:"mt-7 [&_svg]:block [&_svg]:h-auto [&_svg]:w-full",role:"presentation",children:[(0,i.jsxs)("svg",{viewBox:"0 0 1000 300",xmlns:"http://www.w3.org/2000/svg",role:"img","aria-labelledby":"gT gD",children:[(0,i.jsx)("title",{id:"gT",children:"From API gateway to MCP servers with Lumen POET"}),(0,i.jsx)("desc",{id:"gD",children:"Microservices and applications sit behind your API gateway, which publishes API specifications. Lumen POET imports the specifications, curates them for AI, and generates MCP servers in your VPC. AI agents consume the MCP servers."}),(0,i.jsxs)("defs",{children:[(0,i.jsx)("marker",{id:"g-g",viewBox:"0 0 10 10",refX:"9",refY:"5",markerWidth:"8",markerHeight:"8",orient:"auto",children:(0,i.jsx)("path",{d:"M1 1l8 4-8 4z",fill:"#9aa8b1"})}),(0,i.jsx)("marker",{id:"g-p",viewBox:"0 0 10 10",refX:"9",refY:"5",markerWidth:"8",markerHeight:"8",orient:"auto",children:(0,i.jsx)("path",{d:"M1 1l8 4-8 4z",fill:"#552466"})})]}),(0,i.jsxs)("g",{children:[(0,i.jsx)("path",{d:"M960 40 l2.4 5.9 5.9 2.4 -5.9 2.4 -2.4 5.9 -2.4 -5.9 -5.9 -2.4 5.9 -2.4 z",fill:"#94C93D"}),(0,i.jsx)("path",{d:"M40 270 l1.8 4.4 4.4 1.8 -4.4 1.8 -1.8 4.4 -1.8 -4.4 -4.4 -1.8 4.4 -1.8 z",fill:"#c9b3d6"})]}),(0,i.jsx)("rect",{x:"20",y:"16",width:"960",height:"268",rx:"14",fill:"#f6f7f8"}),(0,i.jsx)("text",{x:"500",y:"44",textAnchor:"middle",fontSize:"10",fontWeight:"600",letterSpacing:"1.6",fill:"#768692",children:"YOUR VPC ON AWS OR AZURE"}),(0,i.jsx)("rect",{x:"50",y:"72",width:"130",height:"40",rx:"10",fill:"#fff",stroke:"#d9cfe0",strokeWidth:"1.4"}),(0,i.jsx)("text",{x:"115",y:"97",textAnchor:"middle",fontSize:"12",fontWeight:"600",fill:"#131E29",children:"Microservice"}),(0,i.jsx)("rect",{x:"50",y:"124",width:"130",height:"40",rx:"10",fill:"#fff",stroke:"#d9cfe0",strokeWidth:"1.4"}),(0,i.jsx)("text",{x:"115",y:"149",textAnchor:"middle",fontSize:"12",fontWeight:"600",fill:"#131E29",children:"Microservice"}),(0,i.jsx)("rect",{x:"50",y:"176",width:"130",height:"40",rx:"10",fill:"#fff",stroke:"#d9cfe0",strokeWidth:"1.4"}),(0,i.jsx)("text",{x:"115",y:"201",textAnchor:"middle",fontSize:"12",fontWeight:"600",fill:"#131E29",children:"Application"}),(0,i.jsx)("path",{d:"M180 92h30v52h30",stroke:"#9aa8b1",strokeWidth:"1.6",fill:"none",markerEnd:"url(#g-g)"}),(0,i.jsx)("path",{d:"M180 144h60",stroke:"#9aa8b1",strokeWidth:"1.6",fill:"none",markerEnd:"url(#g-g)"}),(0,i.jsx)("path",{d:"M180 196h30v-52h30",stroke:"#9aa8b1",strokeWidth:"1.6",fill:"none"}),(0,i.jsx)("rect",{x:"250",y:"104",width:"170",height:"80",rx:"12",fill:"#fff",stroke:"#d9cfe0",strokeWidth:"1.4"}),(0,i.jsx)("text",{x:"335",y:"134",textAnchor:"middle",fontSize:"13",fontWeight:"600",fill:"#131E29",children:"Your API gateway"}),(0,i.jsx)("text",{x:"335",y:"152",textAnchor:"middle",fontSize:"11",fill:"#768692",children:"Kong, Apigee, AWS, MuleSoft"}),(0,i.jsx)("text",{x:"335",y:"168",textAnchor:"middle",fontSize:"11",fill:"#768692",children:"publishes API specifications"}),(0,i.jsx)("path",{d:"M420 144h50",stroke:"#552466",strokeWidth:"1.6",fill:"none",markerEnd:"url(#g-p)"}),(0,i.jsx)("rect",{x:"405",y:"196",width:"60",height:"22",rx:"11",fill:"#fff",stroke:"#c9b3d6",
1strokeWidth:"1.2"}),(0,i.jsx)("text",{x:"435",y:"211",textAnchor:"middle",fontSize:"9",fontWeight:"600",fill:"#45525f",children:"OpenAPI"}),(0,i.jsx)("rect",{x:"405",y:"224",width:"60",height:"22",rx:"11",fill:"#fff",stroke:"#c9b3d6",strokeWidth:"1.2"}),(0,i.jsx)("text",{x:"435",y:"239",textAnchor:"middle",fontSize:"9",fontWeight:"600",fill:"#45525f",children:"Swagger"}),(0,i.jsx)("rect",{x:"405",y:"252",width:"60",height:"22",rx:"11",fill:"#fff",stroke:"#c9b3d6",strokeWidth:"1.2"}),(0,i.jsx)("text",{x:"435",y:"267",textAnchor:"middle",fontSize:"9",fontWeight:"600",fill:"#45525f",children:"RAML"}),(0,i.jsx)("rect",{x:"480",y:"104",width:"190",height:"80",rx:"12",fill:"#552466"}),(0,i.jsx)("text",{x:"575",y:"132",textAnchor:"middle",fontSize:"13",fontWeight:"600",fill:"#fff",children:"Lumen POET"}),(0,i.jsx)("text",{x:"575",y:"150",textAnchor:"middle",fontSize:"11",fill:"#e6d9ec",children:"import, curate for AI, generate"}),(0,i.jsx)("text",{x:"575",y:"166",textAnchor:"middle",fontSize:"11",fill:"#e6d9ec",children:"no code, API unchanged"}),(0,i.jsx)("path",{d:"M670 144h50",stroke:"#552466",strokeWidth:"1.6",fill:"none",markerEnd:"url(#g-p)"}),(0,i.jsx)("rect",{x:"730",y:"72",width:"140",height:"40",rx:"10",fill:"#552466"}),(0,i.jsx)("text",{x:"800",y:"97",textAnchor:"middle",fontSize:"12",fontWeight:"600",fill:"#fff",children:"MCP server"}),(0,i.jsx)("rect",{x:"730",y:"124",width:"140",height:"40",rx:"10",fill:"#552466"}),(0,i.jsx)("text",{x:"800",y:"149",textAnchor:"middle",fontSize:"12",fontWeight:"600",fill:"#fff",children:"MCP server"}),(0,i.jsx)("rect",{x:"730",y:"176",width:"140",height:"40",rx:"10",fill:"#552466"}),(0,i.jsx)("text",{x:"800",y:"201",textAnchor:"middle",fontSize:"12",fontWeight:"600",fill:"#fff",children:"MCP server"}),(0,i.jsx)("path",{d:"M720 144h10M730 144v0",stroke:"#552466",strokeWidth:"1.6",fill:"none"}),(0,i.jsx)("path",{d:"M720 144v-52h10M720 144v52h10",stroke:"#552466",strokeWidth:"1.6",fill:"none"}),(0,i.jsx)("rect",{x:"890",y:"104",width:"80",height:"80",rx:"12",fill:"#fff",stroke:"#d9cfe0",strokeWidth:"1.4"}),(0,i.jsx)("text",{x:"930",y:"140",textAnchor:"middle",fontSize:"12",fontWeight:"600",fill:"#131E29",children:"AI agents"}),(0,i.jsx)("text",{x:"930",y:"156",textAnchor:"middle",fontSize:"10",fill:"#768692",children:"consume"}),(0,i.jsx)("path",{d:"M870 92h10v52h10M870 144h20M870 196h10v-52h10",stroke:"#9aa8b1",strokeWidth:"1.6",fill:"none",markerEnd:"url(#g-g)"})]}),(0,i.jsx)("p",{className:"mt-3 text-sm italic text-[#768692]",children:"The API estate behind your gateway becomes the MCP estate for your agents. Curated tools only, in your VPC, with the API and the gateway unchanged."})]}),(0,i.jsxs)("div",{className:"mt-7 grid grid-cols-3 gap-6 max-[980px]:grid-cols-1 [&_h3]:text-[17.5px] [&_h3]:font-extrabold [&_h3]:text-[#552466] [&_h3]:mb-1.5",children:[(0,i.jsxs)("div",{className:"rounded-[10px] border border-[#d9e1e2] bg-white px-[22px] py-6 [&_h3]:mb-1.5 [&_h3]:text-[17.5px] [&_h3]:font-extrabold [&_h3]:text-[#552466] [&_p]:m-0 [&_p]:text-[14.5px]",children:[(0,i.jsx)("h3",{children:"Every API Becomes Agent-Ready"}),(0,i.jsx)("p",{children:"The microservices you exposed for applications and partners are the same services agents need. POET turns each specification into a precise MCP server with only the operations you keep."})]}),(0,i.jsxs)("div",{className:"rounded-[10px] border border-[#d9e1e2] bg-white px-[22px] py-6 [&_h3]:mb-1.5 [&_h3]:text-[17.5px] [&_h3]:font-extrabold [&_h3]:text-[#552466] [&_p]:m-0 [&_p]:text-[14.5px]",children:[(0,i.jsx)("h3",{children:"The Gateway Stays in Charge"}),(0,i.jsx)("p",{children:"Generated MCP servers call through the gateway you already operate, so rate limits, routing, observability and API policies still apply. Nothing is bypassed."})]}),(0,i.jsxs)("div",{className:"rounded-[10px] border border-[#d9e1e2] bg-white px-[22px] py-6 [&_h3]:mb-1.5 [&_h3]:text-[17.5px] [&_h3]:font-extrabold [&_h3]:text-[#552466] [&_p]:m-0 [&_p]:text-[14.5px]",children:[(0,i.jsx)("h3",{children:"One Estate, Not a Vendor Catalog"}),(0,i.jsx)("p",{children:"Instead of a vendor's generic connectors, agents consume your own governed catalog: the APIs your teams built, named and described the way your agents should reason about them."})]})]})]})}),(0,i.jsx)("section",{className:"py-16",id:"catalog",children:(0,i.jsxs)("div",{className:"mx-auto max-w-screen-xl px-3",children:[(0,i.jsx)("span",{className:"mb-3 block text-[13px] font-semibold uppercase tracking-[.14em] text-[#552466]",children:"MCP Servers by Industry"}),(0,i.jsxs)("h2",{className:"text-3xl font-extrabold text-[#552466] mb-4",children:["MCP Servers You Can Generate Today, for the Applications ",(0,i.jsx)("span",{className:"text-[#94C93D]",children:"Your Industry Runs On"})]}),(0,i.jsx)("p",{className:"max-w-[840px]",children:"Every application below publishes a REST API with an OpenAPI, Swagger, OData or FHIR specification, or exposes one through its licensed developer portal. That specification is the input Lumen POET needs. Point POET at it, curate the operations, and you have your own MCP server for that application, in your VPC, authenticated by your identity provider. No hosted MCP server, no vend
1or connector, no third party to rate."}),(0,i.jsx)("div",{className:"mt-7 overflow-x-auto",children:(0,i.jsxs)("table",{className:"w-full min-w-[860px] border-collapse border border-[#d9e1e2] bg-white text-[15.5px] [&_td]:border-b [&_td]:border-[#d9e1e2] [&_td]:px-[18px] [&_td]:py-[15px] [&_td]:text-left [&_td]:align-top [&_th]:border-b [&_th]:border-[#d9e1e2] [&_th]:bg-[#253746] [&_th]:px-[18px] [&_th]:py-[15px] [&_th]:text-left [&_th]:align-top [&_th]:text-[15px] [&_th]:font-semibold [&_th]:text-white [&_tr:nth-child(even)_td]:bg-[#eef1f2] [&_td:first-child]:w-[16%] [&_td:first-child]:whitespace-nowrap [&_td:first-child]:font-semibold [&_td:first-child]:text-[#552466]",children:[(0,i.jsx)("thead",{children:(0,i.jsxs)("tr",{children:[(0,i.jsx)("th",{children:"Industry"}),(0,i.jsx)("th",{children:"Applications you can generate MCP servers for"}),(0,i.jsx)("th",{children:"API specification"}),(0,i.jsx)("th",{children:"Typical agent tasks"})]})}),(0,i.jsxs)("tbody",{children:[(0,i.jsxs)("tr",{children:[(0,i.jsx)("td",{children:"Financial services"}),(0,i.jsx)("td",{children:"Temenos Transact, Finastra (FusionFabric.cloud), Fiserv (Developer Studio), FIS (Code Connect), Jack Henry (jXchange, Banno), Mambu, Thought Machine Vault, nCino, Q2, Plaid, Stripe, Adyen, Visa Developer, Mastercard Developers, LSEG Data Platform, SWIFT"}),(0,i.jsx)("td",{children:"OpenAPI and REST; partner developer portals for core banking"}),(0,i.jsx)("td",{children:"Account and balance lookup, payment initiation and status, KYC and onboarding steps, loan origination tasks, transaction dispute handling, market data retrieval"})]}),(0,i.jsxs)("tr",{children:[(0,i.jsx)("td",{children:"Insurance"}),(0,i.jsx)("td",{children:"Guidewire (PolicyCenter, ClaimCenter, BillingCenter, InsuranceNow), Duck Creek (Policy, Billing, Claims), Majesco, Sapiens, EIS, Applied Epic, Vertafore (AMS360, Sagitta), Verisk, CCC Intelligent Solutions, LexisNexis Risk"}),(0,i.jsx)("td",{children:"OpenAPI and REST (Guidewire Cloud API, Duck Creek Anywhere); licensed developer portals"}),(0,i.jsx)("td",{children:"Quote and submission intake, first notice of loss, claim status and notes, policy change and endorsement, billing inquiry, producer and policyholder lookup"})]}),(0,i.jsxs)("tr",{children:[(0,i.jsx)("td",{children:"Retail and commerce"}),(0,i.jsx)("td",{children:"Shopify, Salesforce Commerce Cloud, commercetools, Adobe Commerce (Magento), SAP Commerce Cloud, BigCommerce, Manhattan Active, Blue Yonder, Oracle Retail, Square, Toast, Klaviyo, NCR Voyix, Lightspeed"}),(0,i.jsx)("td",{children:"OpenAPI, REST and GraphQL"}),(0,i.jsx)("td",{children:"Order lookup and status, inventory and availability, returns and refunds, product catalog updates, promotion setup, customer profile and loyalty"})]}),(0,i.jsxs)("tr",{children:[(0,i.jsx)("td",{children:"Healthcare and life sciences"}),(0,i.jsx)("td",{children:"Epic (FHIR R4), Oracle Health (Cerner) FHIR, athenahealth, Veeva Vault, Availity, Optum and Change Healthcare APIs, Salesforce Health Cloud"}),(0,i.jsx)("td",{children:"FHIR, OpenAPI and REST"}),(0,i.jsx)("td",{children:"Patient and encounter lookup, scheduling, eligibility and prior authorization status, claim status, document retrieval, regulated content workflows"})]}),(0,i.jsxs)("tr",{children:[(0,i.jsx)("td",{children:"Enterprise, every industry"}),(0,i.jsx)("td",{children:"Workday, ServiceNow, Salesforce, SAP S/4HANA, Oracle Fusion Cloud, Microsoft 365 (Graph), Atlassian Jira and Confluence, Slack, Zendesk, HubSpot, NetSuite, Coupa, DocuSign, Okta, Microsoft Entra ID, GitHub, Box, Snowflake, Databricks"}),(0,i.jsx)("td",{children:"OpenAPI, OData (SAP) and REST"}),(0,i.jsx)("td",{children:"HR and payroll inquiries, incident and change tickets, CRM updates, purchase orders and invoices, document and signature workflows, identity and access requests, data queries"})]})]})]})}),(0,i.jsx)("p",{className:"mt-3 text-sm italic text-[#768692]",children:"Applications listed publish REST APIs with machine-readable specifications, some through licensed developer portals that require a customer or partner account, which an enterprise running the application already holds. Lumen POET imports OpenAPI, Swagger and RAML; OData and FHIR services are imported through their published OpenAPI descriptions. This list is not exhaustive: any application with a REST API specification qualifies, including your own microservices behind the API gateway."}),(0,i.jsxs)("div",{className:"mt-7 grid grid-cols-3 gap-6 max-[980px]:grid-cols-1 [&_h3]:text-[17.5px] [&_h3]:font-extrabold [&_h3]:text-[#552466] [&_h3]:mb-1.5",children:[(0,i.jsxs)("div",{className:"rounded-[10px] border border-[#d9e1e2] bg-white px-[22px] py-6 [&_h3]:mb-1.5 [&_h3]:text-[17.5px] [&_h3]:font-extrabold [&_h3]:text-[#552466] [&_p]:m-0 [&_p]:text-[14.5px]",children:[(0,i.jsx)("h3",{children:"One Server per Application, Curated"}),(0,i.jsx)("p",{children:"Each MCP server exposes only the operations you kept. Guidewire has hundreds of endpoints; your claims agent sees first notice of loss, claim status and notes, and nothing else."})]}),(0,i.jsxs)("div",{className:"rounded-[10px] border border-[#d9e1e2] bg-white px-[22px] py-6 [&_h3]:mb-1.5 [&_h3]:text-[17.5px] [&_h3]:font-extrabold [&_h3]:text-[#552466] [&_p]:m-0 [&_p]:text-[14.5px]",children:[(0,i.jsx)("h3",{children:"One Identity Across All of Them"}),(0,i.jsx)("p",{children:"Every server sits behind the same Credential Broker, so an agent working across Workday, ServiceNow and Salesforce is one identity in Entra ID or Okta with one policy set and one audit trail."})]}),(0,i.jsxs)("div",{className:"rounded-[10px] border border-[#d9e1e2] bg-white px-[22px] py-6 [&_h3]:mb-1.5 [&_h3]:text-[17.5px] [&_h3]:font-extrabold [&_h3]:text-[#552466] [&_p]:m-0 [&_p]:text-[14.5px]",children:[(0,i.jsx)("h3",{children:"Add the Next One in Days"}),(0,i.jsx)("p",{children:"The next application is another specification import, not another vendor review. No new sub-processor, no new security rating, no new token store."})]})]})]})}),(0,i.jsx)("section",{className:"bg-[#eef1f2] py-16",id:"steps",children:(0,i.jsxs)("div",{className:"mx-auto max-w-screen-xl px-3",children:[(0,i.jsx)("span",{className:"mb-3 block text-[13px] font-semibold uppercase tracking-[.14em] text-[#552466]",children:"How It Works"}),(0,i.jsxs)("h2",{className:"text-3xl font-extrabold text-[#552466] mb-4",children:["Inside Your VPC: How Every Agent Call Is ",(0,i.jsx)("span",{className:"text-[#94C93D]",children:"Governed"})]}),(0,i.jsx)("p",{className:"max-w-[840px]",children:"Whether the MCP server fronts a S
1aaS API or one of your own microservices, every call follows the same path. The agent presents a short-lived token from your identity provider. The Lumen POET Credential Broker verifies it, applies the access policy for that user, group, role and agent, takes the application credential from your PAM vault, records the call, and passes it to the generated MCP server. No standing secret ever sits in the agent."}),(0,i.jsxs)("div",{className:"mt-7 [&_svg]:block [&_svg]:h-auto [&_svg]:w-full",role:"presentation",children:[(0,i.jsxs)("svg",{viewBox:"0 0 1000 330",xmlns:"http://www.w3.org/2000/svg",role:"img","aria-labelledby":"fT fD",children:[(0,i.jsx)("title",{id:"fT",children:"Lumen POET and the Credential Broker in your VPC"}),(0,i.jsx)("desc",{id:"fD",children:"Inside your VPC on AWS or Azure: an AI agent with a short-lived enterprise token calls the Lumen POET Credential Broker, which verifies with your identity provider, takes the application credential from your PAM vault, writes an audit record, and passes the call to the generated MCP server, which reaches your application with the API unchanged."}),(0,i.jsxs)("defs",{children:[(0,i.jsx)("marker",{id:"f-g",viewBox:"0 0 10 10",refX:"9",refY:"5",markerWidth:"8",markerHeight:"8",orient:"auto",children:(0,i.jsx)("path",{d:"M1 1l8 4-8 4z",fill:"#9aa8b1"})}),(0,i.jsx)("marker",{id:"f-p",viewBox:"0 0 10 10",refX:"9",refY:"5",markerWidth:"8",markerHeight:"8",orient:"auto",children:(0,i.jsx)("path",{d:"M1 1l8 4-8 4z",fill:"#552466"})})]}),(0,i.jsxs)("g",{children:[(0,i.jsx)("path",{d:"M958 40 l2.4 5.9 5.9 2.4 -5.9 2.4 -2.4 5.9 -2.4 -5.9 -5.9 -2.4 5.9 -2.4 z",fill:"#94C93D"}),(0,i.jsx)("path",{d:"M40 300 l1.8 4.4 4.4 1.8 -4.4 1.8 -1.8 4.4 -1.8 -4.4 -4.4 -1.8 4.4 -1.8 z",fill:"#c9b3d6"})]}),(0,i.jsx)("rect",{x:"20",y:"16",width:"960",height:"298",rx:"14",fill:"#f6f7f8"}),(0,i.jsx)("text",{x:"500",y:"44",textAnchor:"middle",fontSize:"10",fontWeight:"600",letterSpacing:"1.6",fill:"#768692",children:"YOUR VPC ON AWS OR AZURE \xb7 VM, HELM AND TERRAFORM \xb7 ALONGSIDE KONG, APIGEE, AWS API GATEWAY, MULESOFT"}),(0,i.jsx)("rect",{x:"50",y:"76",width:"180",height:"72",rx:"12",fill:"#fff",stroke:"#d9cfe0",strokeWidth:"1.4"}),(0,i.jsx)("text",{x:"140",y:"106",textAnchor:"middle",fontSize:"13",fontWeight:"600",fill:"#131E29",children:"AI agent"}),(0,i.jsx)("text",{x:"140",y:"126",textAnchor:"middle",fontSize:"11",fill:"#768692",children:"short-lived enterprise token"}),(0,i.jsx)("rect",{x:"290",y:"76",width:"200",height:"72",rx:"12",fill:"#552466"}),(0,i.jsx)("text",{x:"390",y:"106",textAnchor:"middle",fontSize:"13",fontWeight:"600",fill:"#fff",children:"Lumen POET Credential Broker"}),(0,i.jsx)("text",{x:"390",y:"126",textAnchor:"middle",fontSize:"11",fill:"#e6d9ec",children:"verify, decide, swap, record"}),(0,i.jsx)("rect",{x:"550",y:"76",width:"200",height:"72",rx:"12",fill:"#552466"}),(0,i.jsx)("text",{x:"650",y:"106",textAnchor:"middle",fontSize:"13",fontWeight:"600",fill:"#fff",children:"MCP server, generated by POET"}),(0,i.jsx)("text",{x:"650",y:"126",textAnchor:"middle",fontSize:"11",fill:"#e6d9ec",children:"curated tools only, no code"}),(0,i.jsx)("rect",{x:"810",y:"76",width:"150",height:"72",rx:"12",fill:"#fff",stroke:"#d9cfe0",strokeWidth:"1.4"}),(0,i.jsx)("text",{x:"885",y:"106",textAnchor:"middle",fontSize:"13",fontWeight:"600",fill:"#131E29",children:"Your application"}),(0,i.jsx)("text",{x:"885",y:"126",textAnchor:"middle",fontSize:"11",fill:"#768692",children:"API unchanged"}),(0,i.jsx)("rect",{x:"230",y:"212",width:"150",height:"66",rx:"12",fill:"#fff",stroke:"#d9cfe0",strokeWidth:"1.4"}),(0,i.jsx)("text",{x:"305",y:"240",textAnchor:"middle",fontSize:"13",fontWeight:"600",fill:"#131E29",children:"Your IdP"}),(0,i.jsx)("text",{x:"305",y:"259",textAnchor:"middle",fontSize:"11",fill:"#768692",children:"token verification"}),(0,i.jsx)("rect",{x:"400",y:"212",width:"150",height:"66",rx:"12",fill:"#fff",stroke:"#d9cfe0",strokeWidth:"1.4"}),(0,i.jsx)("text",{x:"475",y:"240",textAnchor:"middle",fontSize:"13",fontWeight:"600",fill:"#131E29",children:"Your PAM vault"}),(0,i.jsx)("text",{x:"475",y:"259",textAnchor:"middle",fontSize:"11",fill:"#768692",children:"application credentials"}),(0,i.jsx)("rect",{x:"570",y:"212",width:"180",height:"66",rx:"12",fill:"#fff",stroke:"#94C93D",strokeWidth:"1.6"}),(0,i.jsx)("text",{x:"660",y:"240",textAnchor:"middle",fontSize:"13",fontWeight:"600",fill:"#131E29",children:"Your audit trail"}),(0,i.jsx)("text",{x:"660",y:"259",textAnchor:"middle",fontSize:"11",fill:"#768692",children:"agent, user, policy, credential, tool"}),(0,i.jsx)("path",{d:"M230 112h50",stroke:"#9aa8b1",strokeWidth:"1.6",fill:"none",markerEnd:"url(#f-g)"}),(0,i.jsx)("path",{d:"M490 112h50",stroke:"#552466",strokeWidth:"1.6",fill:"none",markerEnd:"url(#f-p)"}),(0,i.jsx)("path",{d:"M750 112h50",stroke:"#552466",strokeWidth:"1.6",fill:"none",markerEnd:"url(#f-p)"}),(0,i.jsx)("path",{d:"M330 148v54",stroke:"#552466",strokeWidth:"1.6",fill:"none",markerEnd:"url(#f-p)"}),(0,i.jsx)("path",{d:"M450 148v54",stroke:"#552466",strokeWidth:"1.6",fill:"none",markerEnd:"url(#f-p)"}),(0,i.jsx)("path",{d:"M650 148v54",stroke:"#552466",strokeWidth:"1.6",fill:"none",markerEnd:"url(#f-p)"})]}),(0,i.jsx)("p",{className:"mt-3 text-sm italic text-[#768692]",children:"Lumen POET with the Credential Broker. The same identity provider, vault and audit trail that govern people now govern the agent. Add Lumen A2A Gateway in front for intent-level authorization."})]})]})}),(0,i.jsx)("section",{className:"py-16",id:"control",children:(0,i.jsxs)("div",{className:"mx-auto max-w-screen-xl px-3",children:[(0,i.jsx)("span",{className:"mb-3 block text-[13px] font-semibold uppercase tracking-[.14em] text-[#552466]",children:"Benefits"}),(0,i.jsxs)("h2",{className:"text-3xl font-extrabold text-[#552466] mb-4",children:["The Control Comes Back to the ",(0,i.jsx)("span",{className:"text-[#94C93D]",children:"Enterprise"})]}),(0,i.jsx)("p",{className:"max-w-[840px]",children:"Owning the MCP server changes who answers the hard questions. Three angles, in plain terms."}),(0,i.jsxs)("div",{className:"mt-7 grid grid-cols-3 gap-6 max-[980px]:grid-cols-1 [&_h3]:text-[17.5px] [&_h3]:font-extrabold [&_h3]:text-[#552466] [&_h3]:mb-1.5",id:"value",children:[(0,i.jsxs)("div",{className:"rounded-[10px] border border-[#d9e1e2] bg-white px-[22px] py-6 [&_h3]:mb-1.5 [&_h3]:text-[17.5px] [&_h3]:font-extrabold [&_h3]:text-[#552466] [&_p]:m-0 [&_p]:text-[14.5px]",children:[(0,i.jsx)("span",{className:"my-0.5 mb-3.5 inline-block rounded-full bg-[#552466]/[.08] px-3 py-1 text-[12.5px] font-semibold tracking-[.02em] text-[#552466]",children:"Security"}),(0,i.jsxs)("ul",{className:"list-none m-0 p-0 [&>li]:relative [&>li]:py-1.5 [&>li]:pl-6 [&>li]:text-[15px] [&>li]:text-[#45525f] [&>li]:before:absolute [&>li]:before:left-0.5 [&>li]:before:top-[15px] [&>li]:before:h-2 [&>li]:before:w-2 [&>li]:before:rounded-full [&>li]:before:bg-[#94C93D] [&>li]:before:content-['']",children:[(0,i.jsxs)("li",{children:[(0,i.jsx)("strong",{children:"The password comes out of the agent."})," A compromised agent, a prompt injection or a leaked config file exposes nothing permanent."]}),(0,i.jsxs)("li",{children:[(0,i.jsx)("strong",{children:"One less place to breach."})," No third-party token store holds a copy of your Workday or ServiceNow access."]}),(0,i.jsxs)("li",{children:[(0,i.jsx)("strong",{children:"Agents see only curated tools."})," Generated servers expose the operations you kept, not the hundreds a raw specification contains."]}),(0,i.jsxs)("li",{children:[(0,i.jsx)("strong",{children:"Least access, per call."})," The broker decides on user, group, role and agent before any credential is released."]})]})]}),(0,i.jsxs)("div",{className:"rounded-[10px] border border-[#d9e1e2] bg-white px-[22px] py-6 [&_h3]:mb-1.5 [&_h3]:text-[17.5px] [&_h3]:font-extrabold [&_h3]:text-[#552466] [&_p]:m-0 [&_p]:text-[14.5px]",children:[(0,i.jsx)("span",{className:"my-0.5 mb-3.5 inline-block rounded-full bg-[#552466]/[.08] px-3 py-1 text-[12.5px] font-semibold tracking-[.02em] text-[#552466]",children:"Compliance and Audit"}),(0,i.jsxs)("ul",{className:"list-none m-0 p-0 [&>li]:relative [&>li]:py-1.5 [&>li]:pl-6 [&>li]:text-[15px] [&>li]:text-[#45525f] [&>li]:before:absolute [&>li]:before:left-0.5 [&>li]:before:top-[15px] [&>li]:before:h-2 [&>li]:before:w-2 [&>li]:before:rounded-full [&>li]:before:bg-[#94C93D] [&>li]:before:content-['']",children:[(0,i.jsxs)("li",{children:[(0,i.jsx)("strong",{children:"Full audit trail, in your systems."})," Every call is recorded: which agent, which user, which policy, which credential, which tool. Answer the auditor from your own logs."]}),(0,i.jsxs)("li",{children:[(0,i.jsx)("strong",{children:"Same controls as people."})," Joiner, mover and leaver processes and access reviews apply to agents, with no parallel user store at a vendor."]}),(0,i.jsxs)("li",{children:[(0,i.jsx)("strong",{children:"No new sub-processor."})," Regulated application data never transits a vendor cloud, so there is one fewer party in the DPA conversation."]}),(0,i.jsxs)("li",{children:[(0,i.jsx)("strong",{children:"Legacy applications included."})," The broker bridges the enterprise token to applications that never had OAuth."]})]})]}),(0,i.jsxs)("div",{className:"rounded-[10px] border border-[#d9e1e2] bg-white px-[22px] py-6 [&_h3]:mb-1.5 [&_h3]:text-[17.5px] [&_h3]:font-extrabold [&_h3]:text-[#552466] [&_p]:m-0 [&_p]:text-[14.5px]",children:[(0,i.jsx)("span",{className:"my-0.5 mb-3.5 inline-block rounded-full bg-[#552466]/[.08] px-3 py-1 text-[12.5px] font-semibold tracking-[.02em] text-[#552466]",children:"Cost"}),(0,i.jsxs)("ul",{className:"list-none m-0 p-0 [&>li]:relative [&>li]:py-1.5 [&>li]:pl-6 [&>li]:text-[15px] [&>li]:text-[#45525f] [&>li]:before:absolute [&>li]:before:left-0.5 [&>li]:before:top-[15px] [&>li]:before:h-2 [&>li]:before:w-2 [&>li]:before:rounded-full [&>li]:before:bg-[#94C93D] [&>li]:before:content-['']",children:[(0,i.jsxs)("li",{children:[(0,i.jsx)("strong",{children:"No per-call metering."})," Hosted MCP is usually priced on tool calls or connected users, and agents make many calls. Your own servers run on a yearly license and scale in your cloud."]}),(0,i.jsxs)("li",{children:[(0,i.jsx)("strong",{children:"No duplicate tooling."})," You already pay for an identity provider, a vault, an API gateway and a SIEM. Lumen uses them instead of replacing them."]}),(0,i.jsxs)("li",{children:[(0,i.jsx)("strong",{children:"No re-work."})," No agent is re-coded and no application authorization is reworked when you move from pilot to production."]}),(0,i.jsxs)("li",{children:[(0,i.jsx)("strong",{children:"Lower cost of an incident."})," A leaked short-lived token expires. A leaked stored token has to be found, rotated and explained."]})]})]})]})]})}),(0,i.jsx)("section",{className:"bg-[#eef1f2] py-16",id:"growing",children:(0,i.jsxs)("div",{className:"mx-auto max-w-screen-xl px-3",children:[(0,i.jsx)("span",{className:"mb-3 block text-[13px] font-semibold uppercase tracking-[.14em] text-[#552466]",children:"Growing With You"}),(0,i.jsx)("h2",{className:"text-3xl font-extrabold text-[#552466] mb-4",children:"Start With One Server. Grow Into a Governed Agent Estate."}),(0,i.jsx)("p",{className:"max-w-[840px]",children:"The first MCP server is the beginning. The same platform adds the pieces an enterprise needs as agents multiply."}),(0,i.jsxs)("div",{className:"mt-7 grid grid-cols-3 gap-6 max-[980px]:grid-cols-1 [&_h3]:text-[17.5px] [&_h3]:font-extrabold [&_h3]:text-[#552466] [&_h3]:mb-1.5",children:[(0,i.jsxs)("div",{className:"rounded-[10px] border border-[#d9e1e2] bg-white px-[22px] py-6 [&_h3]:mb-1.5 [&_h3]:text-[17.5px] [&_h3]:font-extrabold [&_h3]:text-[#552466] [&_p]:m-0 [&_p]:text-[14.5px]",children:[(0,i.jsx)("h3",{children:"Lumen POET Credential Broker"}),(0,i.jsx)("p",{children:"The add-on that front-ends generated MCP servers and A2A agents as the policy decision and enforcement point for credentials. Access policies by user, group, role and agent, vault-held credentials, token exchange on every call."})]}),(0,i.jsxs)("div",{className:"rounded-[10px] border border-[#d9e1e2] bg-white px-[22px] py-6 [&_h3]:mb-1.5 [&_h3]:text-[17.5px] [&_h3]:font-extrabold [&_h3]:text-[#552466] [&_p]:m-0 [&_p]:text-[14.5px]",children:[(0,i.jsx)("h3",{children:"A2A Agents, Generated"}),(0,i.jsx)("p",{children:"From the same curated schema, POET generates complete A2A agents with out-of-box prompts and agent cards. They run immediately and every prompt stays editable as behavior is tuned."})]}),(0,i.jsxs)("div",{className:"rounded-[10px] border border-[#d9e1e2] bg-white px-[22px] py-6 [&_h3]:mb-1.5 [&_h3]:text-[17.5px] [&_h3]:font-extrabold [&_h3]:text-[#552466] [&_p]:m-0 [&_p]:text-[14.5px]",children:[(0,i.jsx)("h3",{children:"Lumen A2A Gateway"}),(0,i.jsx)("p",{children:"Front the whole estate with intent-level runtime authorization: PeerGroups define which agents may reach which services, and Smart Policies hold each interaction inside its declared task scope."})]}),(0,i.jsxs)("div",{className:"rounded-[10px] border border-[#d9e1e2] bg-white px-[22px] py-6 [&_h3]:mb-1.5 [&_h3]:text-[17.5px] [&_h3]:font-extrabold [&_h3]:text-[#552466] [&_p]:m-0 [&_p]:text-[14.5px]",children:[(0,i.jsx)("h3",{children:"Legacy Application Bridge"}),(0,i.jsx)("p",{children:"Applications that never had OAuth get the same model. The broker honors your short-lived, work-bound enterprise token and extends it to legacy access, so the secure AI methodology reaches the systems that hold the most sensitive data."})]}),(0,i.jsxs)("div",{className:"rounded-[10px] border border-[#d9e1e2] bg-white px-[22px] py-6 [&_h3]:mb-1.5 [&_h3]:text-[17.5px] [&_h3]:font-extrabold [&_h3]:text-[#552466] [&_p]:m-0 [&_p]:text-[14.5px]",children:[(0,i.jsx)("h3",{children:"Hyperscaler and Gateway Fit"}),(0,i.jsx)("p",{children:"Runs as a VM on AWS or Azure and scales with demand. Coexists with Kong, Apigee, AWS API Gateway and MuleSoft, so existing API management investments stay in place."})]}),(0,i.jsxs)("div",{className:"rounded-[10px] border border-[#d9e1e2] bg-white px-[22px] py-6 [&_h3]:mb-1.5 [&_h3]:text-[17.5px] [&_h3]:font-extrabold [&_h3]:text-[#552466] [&_p]:m-0 [&_p]:text-[14.5px]",children:[(0,i.jsx)("h3",{children:"Security Fabric Integration"}),(0,i.jsx)("p",{children:"Deploys inline or over ICAP with Fortinet, behind FortiWeb, and feeds enterprise security tools with the AI traffic they could not see before. No forklift, no re-architecture."})]})]}),(0,i.jsxs)("div",{className:"mt-8 rounded-[10px] bg-[#2e1240] px-[30px] py-[26px] text-white [&_p]:m-0 [&_p]:max-w-[74ch] [&_p]:text-[17px] [&_p]:font-semibold",children:[(0,i.jsx)("div",{className:"mb-1.5 text-[13px] font-semibold uppercase tracking-[.14em] text-[#94C93D]",children:"The Backflipt Difference"}),(0,i.jsx)("p",{children:"No agent is re-coded. No application authorization is reworked. Enterprises scale AI on the identity and security investments they already have."})]})]})}),(0,i.jsx)("section",{className:"py-16",id:"fair",children:(0,i.jsxs)("div",{className:"mx-auto max-w-screen-xl px-3",children:[(0,i.jsx)("span",{className:"mb-3 block text-[13px] font-semibold uppercase tracking-[.14em] text-[#768692]",children:"A Fair Comparison"}),(0,i.jsx)("h2",{className:"text-3xl font-extrabold text-[#552466] mb-4",children:"When a Hosted MCP Service Is the Right Choice"}),(0,i.jsxs)("div",{className:"mt-7 grid grid-cols-2 gap-6 max-[820px]:grid-cols-1",children:[(0,i.jsx)("div",{className:"rounded-[10px] border border-[#d9e1e2] bg-white px-[22px] py-6 [&_h3]:mb-1.5 [&_h3]:text-[17.5px] [&_h3]:font-extrabold [&_h3]:text-[#552466] [&_p]:m-0 [&_p]:text-[14.5px]",children:(0,i.jsxs)("ul",{className:"list-none m-0 p-0 [&>li]:relative [&>li]:py-1.5 [&>li]:pl-6 [&>li]:text-[15px] [&>li]:text-[#45525f] [&>li]:before:absolute [&>li]:before:left-0.5 [&>li]:before:top-[15px] [&>li]:before:h-2 [&>li]:before:w-2 [&>li]:before:rounded-full [&>li]:before:bg-[#94C93D] [&>li]:before:content-['']",children:[(0,i.jsx)("li",{children:"Prototyping and evaluation, where the goal is to see what an agent can do this afternoon"}),(0,i.jsx)("li",{children:"SaaS tools with no compliance exposure, where the data already lives outside the perimeter"}),(0,i.jsx)("li",{children:"Teams with no identity provid
1er, no vault and no IAM function to plug into"}),(0,i.jsx)("li",{children:"Embedded agent products, where each of your customers connects their own accounts"})]})}),(0,i.jsxs)("div",{className:"rounded-[10px] border border-[#d9e1e2] bg-white px-[22px] py-6 [&_h3]:mb-1.5 [&_h3]:text-[17.5px] [&_h3]:font-extrabold [&_h3]:text-[#552466] [&_p]:m-0 [&_p]:text-[14.5px]",children:[(0,i.jsx)("h3",{children:"And When It Is Not"}),(0,i.jsx)("p",{children:'The moment the application is a system of record for people, money or customers, the question changes from "does it connect" to "who authorized this, with which identity, and can we prove it". Hosted MCP answers with the vendor\'s records. Lumen POET answers with yours. That is where the server belongs in your network.'})]})]})]})}),(0,i.jsx)("section",{id:"faq",className:"bg-[#EEF1F2] py-16\r\n\n [&_details]:border-b\r\n\n [&_details]:border-[#D9E1E2]\r\n\n [&_details[open]_summary]:after:content-['â']\r\n\n [&_summary]:relative\r\n\n [&_summary]:cursor-pointer\r\n\n [&_summary]:list-none\r\n\n [&_summary]:py-6\r\n\n [&_summary]:pr-10\r\n\n [&_summary]:text-[17px]\r\n\n [&_summary]:font-semibold\r\n\n [&_summary]:leading-[1.5]\r\n\n [&_summary]:text-[#552466]\r\n\n [&_summary]:after:absolute\r\n\n [&_summary]:after:right-4\r\n\n [&_summary]:after:top-1/2\r\n\n [&_summary]:after:-translate-y-1/2\r\n\n [&_summary]:after:text-[30px]\r\n\n [&_summary]:after:leading-none\r\n\n [&_summary]:after:font-semibold\r\n\n [&_summary]:after:text-[#94C93D]\r\n\n [&_summary]:after:content-['+']\r\n\n [&_summary::-webkit-details-marker]:hidden\r\n\n [&_details_p]:max-w-[980px]\r\n\n [&_details_p]:pb-6\r\n\n [&_details_p]:text-[16px]\r\n\n [&_details_p]:leading-6\r\n\n [&_details_p]:text-[#4B5C6D]",children:(0,i.jsx)("div",{className:"mx-auto max-w-[1280px] px-6",children:(0,i.jsxs)("div",{className:"max-w-[1200px]",children:[(0,i.jsx)("span",{className:"mb-4 block text-[13px] font-semibold uppercase tracking-[0.18em] text-[#552466]",children:"FAQ"}),(0,i.jsx)("h2",{className:"mb-8 text-[34px] font-bold leading-tight text-[#552466]",children:"Questions Teams Ask About Hosted MCP Servers and Owning Their Own"}),(0,i.jsxs)("details",{children:[(0,i.jsx)("summary",{children:"Can Lumen POET create an MCP server for Workday, ServiceNow or Salesforce?"}),(0,i.jsx)("p",{children:"Yes. Each of these applications publishes a REST API with an OpenAPI or Swagger specification. Lumen POET imports the specification, lets your administrator curate the operations for AI, and generates a precise MCP server for that application in your VPC. The Lumen POET Credential Broker authenticates every agent call against Active Directory, Entra ID or Okta and swaps in the application credential from your PAM vault."})]}),(0,i.jsxs)("details",{children:[(0,i.jsx)("summary",{children:"What is the difference between a hosted MCP server and owning your own?"}),(0,i.jsx)("p",{children:"A hosted MCP server runs in a vendor cloud. The vendor stores your application tokens, identifies your agent with a vendor key and user ID, and keeps the logs. Owning your MCP server with Lumen POET means the server runs as a VM in your VPC on AWS or Azure, the credentials stay in your vault, the agent is a user of your identity provider, and every call is on your audit trail."})]}),(0,i.jsxs)("details",{children:[(0,i.jsx)("summary",{children:"Do I still need a security rating or vendor risk assessment for my MCP servers?"}),(0,i.jsx)("p",{children:"Not for an MCP server you own. Security ratings for hosted MCP servers exist because the server, the token store and the log sit outside your perimeter. When the MCP server runs inside your VPC, generated from your own API specification and governed by your Credential Broker, your existing controls, evidence and auditor already cover it. There is no third party in the path to assess."})]}),(0,i.jsxs)("details",{children:[(0,i.jsx)("summary",{children:"Which industries and applications does Lumen POET support?"}),(0,i.jsx)("p",{children:"Any application with a REST API specification. On this page we list common targets in financial services (Temenos, Finastra, Fiserv, FIS, Jack Henry, Mambu), insurance (Guidewire, Duck Creek, Majesco, Applied Epic, Vertafore), retail (Shopify, Salesforce Commerce Cloud, commercetools, Adobe Commerce), healthcare (Epic FHIR, Oracle Health, Veeva Vault) and cross-industry enterprise applications (Workday, ServiceNow, Salesforce, SAP S/4HANA, Oracle Fusion, Microsoft 365, Jira, Slack). Your own microservices behind Kong, Apigee, AWS API Gateway or MuleSoft qual
1ify the same way."})]}),(0,i.jsxs)("details",{children:[(0,i.jsx)("summary",{children:"How does authentication work for a Lumen POET MCP server?"}),(0,i.jsx)("p",{children:"The AI agent presents a short-lived token from your enterprise identity provider (Active Directory, Entra ID or Okta). The Lumen POET Credential Broker verifies the token, evaluates the access policy for that user, group, role and agent, and exchanges it for the application credential held in your PAM vault. The agent never holds a permanent secret, and the application sees only the credential your administrator issued."})]}),(0,i.jsxs)("details",{children:[(0,i.jsx)("summary",{children:"Where does Lumen POET run and how does it scale?"}),(0,i.jsx)("p",{children:"Lumen POET runs as a VM in your VPC on AWS or Azure and scales as agent demand grows. Generated MCP servers deploy with Helm and Terraform and coexist with Kong, Apigee, AWS API Gateway and MuleSoft, so existing API management stays in place."})]}),(0,i.jsxs)("details",{children:[(0,i.jsx)("summary",{children:"Does creating an MCP server with Lumen POET require code or changes to the application?"}),(0,i.jsx)("p",{children:"No. Generation is specification-driven end to end. The API and the application are never modified, and no agent is re-coded. Your administrator curates the agent-facing schema in the POET interface and generates the server."})]})]})})}),(0,i.jsx)("section",{className:"bg-[rgba(85,36,102,0.05)] py-16 text-center [&_h2]:mb-2.5 [&_p]:mx-auto [&_p]:mb-[26px] [&_p]:max-w-[700px]",id:"next-steps",children:(0,i.jsxs)("div",{className:"mx-auto max-w-screen-xl px-3",children:[(0,i.jsx)("h2",{className:"text-3xl font-extrabold text-[#552466] mb-4",children:"Keep the Convenience. Keep the Keys."}),(0,i.jsx)("p",{children:"Bring one governed application under Lumen POET in a proof of concept: generate the MCP server from your specification, deploy it in your VPC, and watch the first agent call arrive with your identity, your vault credential and your audit record."}),(0,i.jsx)("a",{className:"inline-block rounded-md px-[30px] py-[13px] text-base font-semibold no-underline transition-colors bg-[#94C93D] text-[#2c3a12] hover:bg-[#a4d651]",href:"https://calendly.com/backflipt/schedule-a-meeting-with-us",children:"Schedule Meeting"}),(0,i.jsx)(n(),{href:"/datasheets/lumen-poet",className:"inline-block rounded-md px-[30px] py-[13px] text-base font-semibold no-underline transition-colors ml-3 border-[1.5px] border-[#552466] text-[#552466] hover:bg-[#552466]/5 max-[820px]:ml-0 max-[820px]:mt-3",children:"Download the Lumen POET Data Sheet"})]})}),(0,i.jsx)("section",{className:"pt-16 mt-2 border-t border-t-[#d9e1e2] [&_p]:max-w-[1000px] [&_p]:text-[13px] [&_p]:leading-[2] [&_p]:text-[#768692] [&_strong]:text-[#45525f]",children:(0,i.jsx)("div",{className:"mx-auto max-w-screen-xl px-3",children:(0,i.jsxs)("p",{children:[(0,i.jsx)("strong",{children:"Topics:"})," #MCP \xb7 #MCPServer \xb7 #MCPSecurity \xb7 #ModelContextProtocol \xb7 #HostedMCP \xb7 #SelfHostedMCP \xb7 #AgenticAI \xb7 #AIAgents \xb7 #AISecurity \xb7 #AIGovernance \xb7 #ZeroTrust \xb7 #NonHumanIdentity \xb7 #NHI \xb7 #EphemeralCredentials \xb7 #ZeroStandingPrivileges \xb7 #PAM \xb7 #CredentialBroker \xb7 #TokenExchange \xb7 #OpenAPI \xb7 #AWS \xb7 #Azure \xb7 #Workday \xb7 #ServiceNow \xb7 #Salesforce \xb7 #AuditTrail \xb7 #Compliance \xb7 #TrustNoAgent \xb7 #Backflipt \xb7 #LumenPOET \xb7 #WorkdayMCP \xb7 #ServiceNowMCP \xb7 #SalesforceMCP \xb7 #SAPMCP \xb7 #GuidewireMCP \xb7 #TemenosMCP \xb7 #ShopifyMCP \xb7 #EpicFHIR \xb7 #Okta \xb7 #EntraID"]})})}),(0,i.jsx)("section",{className:"py-16 [&_h3]:mb-2.5 [&_h3]:text-[#552466] [&_p]:text-[14.5px] [&_a]:font-semibold [&_a]:text-[#552466] [&_a]:no-underline hover:[&_a]:underline",children:(0,i.jsx)("div",{className:"mx-auto max-w-screen-xl px-3",children:(0,i.jsxs)("div",{className:"grid grid-cols-2 gap-10 max-[980px]:grid-cols-1",children:[(0,i.jsxs)("div",{children:[(0,i.jsx)("h3",{className:"text-xl font-extrabold text-[#552466] mb-4",children:"About Backflipt"}),(0,i.jsxs)("p",{children:["Backflipt, a brand name of Xenovus, Inc., is an enterprise softw
1are company headquartered in Santa Clara, California. Backflipt builds the Lumen product line for securing and governing AI agents in regulated enterprises: the Lumen A2A Gateway, an inline policy decision-and-enforcement point for agent-to-agent and MCP traffic, and Lumen POET, a no-code platform for transforming APIs into governed MCP servers and A2A agents and brokering ephemeral credentials. Founder-funded since 2013, Backflipt has production deployments in regulated Fortune 500 environments. For more information, visit ",(0,i.jsx)("a",{href:"https://www.backflipt.com",children:"backflipt.com"}),"."]})]}),(0,i.jsxs)("div",{children:[(0,i.jsx)("h3",{className:"text-xl font-extrabold text-[#552466] mb-4",children:"About Lumen POET"}),(0,i.jsx)("p",{children:"Lumen POET imports OpenAPI, Swagger or RAML, lets administrators curate the schema for AI, and generates precise MCP servers and complete A2A agents with no code and without changing the underlying API. Generated services deploy as a VM in the customer VPC on AWS or Azure with Helm and Terraform and coexist with the API gateways already in production. The Lumen POET Credential Broker add-on keeps standing secrets in the vault and out of agents. Backflipt, Lumen, Lumen A2A Gateway and Lumen POET are trademarks of Xenovus, Inc."})]})]})})})]})}}},e=>{e.O(0,[8230,636,6593,8792],()=>e(e.s=1378)),_N_E=e.O()}]);
Line numbers count LF bytes from the start of the resource, as the search results do. Vendor segments are library code the classifier recognised; they are stored but not indexed. Bytes are shown as Latin1 characters, one per byte.