MCP by ITEON
first Polish B2B company with a production server
Anthropic's open standard for securely connecting AI agents with business systems. We have been running it in production since 2025, with DCR authorization, attestation and a full audit trail.
What MCP is
A standard interface between AI and your business
Model Context Protocol is an open standard developed by Anthropic. It allows AI agents (Claude, ChatGPT, your own) to safely use tools and data inside your systems, without ad-hoc integrations.
Standardization
One protocol instead of dozens of custom adapters. Every MCP-speaking AI client uses your tools.
Security by design
Dynamic Client Registration (DCR) with OAuth 2.1. Every integration authorized, every call logged.
Granular permissions
Each tool has its own scope. An AI client gets exactly what it needs. Nothing more.
Open source
No vendor lock-in. SDKs in TypeScript, Python, Go. You can run your own MCP server on any stack.
Dual-MCP
Two servers, two contexts
Marketing MCP (public catalog for AI search agents) and Platform MCP (authorized B2B access). Both running in production, each optimized for its own use case.
Public
Marketing MCP
For AI crawlers (Claude.ai, ChatGPT, Perplexity) and discovery agents. Public catalog: services, portfolio, blog, sectors, technologies, contact.
- Auth
- No authentication
- Hosting
- Cloudflare Worker (edge)
- Rate limit
- 60 req/min per IP
10 read-only tools
- company.info
- services.list / .get
- sectors.list
- portfolio.list / .get
- technologies.list
- blog.search / .get
- contact.channels
Sample call (curl)
# 1. Discover (server.json)
curl https://mcp.iteon.pl/.well-known/mcp
# 2. tools/list
curl -X POST https://mcp.iteon.pl/ \
-H "Content-Type: application/json" \
-d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'
# 3. tools/call services.list
curl -X POST https://mcp.iteon.pl/ \
-H "Content-Type: application/json" \
-d '{
"jsonrpc":"2.0","id":2,"method":"tools/call",
"params":{"name":"services.list","arguments":{"language":"pl"}}
}'Authorized B2B
Platform MCP
For authorized B2B agents acting on behalf of a customer organization. Access to tenant data: projects, briefs, profile.
- Auth
- OAuth 2.1 + PKCE + DPoP + DCR
- Hosting
- Azure Container App
- Rate limit
- 3-axis Redis (client + org + tool)
8 tenant-aware tools
- org.profile
- projects.list / .get
- briefs.create
- methodology.lookup
- case_studies.find_relevant
- expert_match.find
- stack.health_audit
Discovery (curl)
# Discovery endpoint dla autoryzowanego B2B agenta
curl https://api.iteon.pl/.well-known/oauth-protected-resource
curl https://iteon.pl/.well-known/mcp/public.jsonProduction tools
What we expose over MCP
Six production tools available to authorized AI clients. Each one with full OpenAPI documentation and access control.
projects.listList of ITEON projects with filters by industry, technology and period. Returns metadata and links to case studies.
projects.getDetails for a single project, full description, technologies, business results, ITEON's role.
briefs.createCreate a preliminary project brief from a conversation with an AI agent. Lands as a lead in our CRM.
case_studies.find_relevantSemantic search across case studies matched to the client's business problem. Backed by pgvector + embeddings.
expert_match.findMatch an ITEON expert to a project scope (stack, industry, role). Returns availability and a budget estimate.
stack.health_auditPreliminary technology stack audit for the client. Identifies legacy components, security gaps, modernization roadmap.
Live endpoint
Dynamic Client Registration
Public DCR endpoint for authorized integration with our MCP. Compliant with RFC 7591 (DCR), RFC 9728 (Protected Resource Metadata) and the MCP Authorization specification.
Protected Resource Metadata (RFC 9728)
https://api.iteon.pl/.well-known/oauth-protected-resourceAuthorization Server Metadata (RFC 8414)
https://api.iteon.pl/.well-known/oauth-authorization-serverMCP public catalog
https://api.iteon.pl/.well-known/mcp/publicNote
Registration is publicly accessible. Tool activation requires manual organization verification (KYB).
Client registration example
# 1. Discover Protected Resource Metadata (RFC 9728)
curl https://api.iteon.pl/.well-known/oauth-protected-resource
# 2. Discover Authorization Server Metadata (RFC 8414)
curl https://api.iteon.pl/.well-known/oauth-authorization-server
# 3. Register client (RFC 7591 Dynamic Client Registration)
curl -X POST https://api.iteon.pl/mcp/register \
-H "Content-Type: application/json" \
-d '{
"client_name": "My AI Agent",
"redirect_uris": ["https://my-agent.example/callback"],
"grant_types": ["authorization_code", "refresh_token"],
"token_endpoint_auth_method": "none",
"scope": "projects:read:org briefs:write:org methodology:read:public"
}'Architecture
How it works
Full authorization and tool invocation flow. Every step audited and permission-checked.
AI Agent
Claude / ChatGPT / Custom
DCR Registration
OAuth 2.1 + PKCE
Authorization
Scope-based access
MCP Server
Tool registry + audit
Business systems
CRM, DB, APIs
Use cases
What you can build with MCP
Internal copilot for sales
Claude or ChatGPT queries your portfolio, matches a case study, generates a proposal, all powered by your production data.
AI assistant for customers
Your customers talk to an AI that can access their account, billing, project status, all through MCP.
Onboarding automation
An AI agent walks a new client through setup, using our tools to create users, roles, projects.
Cross-system orchestration
Multiple applications expose their MCP servers. One AI agent orchestrates workflows across all systems in the organization.
Want to integrate your product with our MCP?
Let's talk about authorization, tool scopes and the business case. For AI vendors and agent providers we offer dedicated rollout support.
Have a problem that's holding your business back?
Let's talk specifics. No jargon, no obligations. Let's see if and how technology can help your business grow.