Your data. Your infrastructure.
Your control.

Your operational data stays where it is.

The MCP Gateway runs on your infrastructure and queries your existing REST API in real time. Pilot, aircraft, flight, and maintenance data is not migrated into a replacement platform.

UAVCrew never connects directly to your database. A declarative manifest maps controlled agent requests to the endpoints you already operate.

Every request earns its own access.

Each request uses a short-lived RS256 delegation token specifying the exact entity types and operations authorized for that task. Tokens expire after 30 minutes; there are no standing agent credentials.

Agents propose. Your team authorizes.

Agents may read within their assigned scope. A requested write is intercepted and presented as an Action Card showing the exact record, change, and rationale.

Nothing changes in your system until an authorized operator explicitly approves it.

Your data is not training material.

Operational data is never used to train AI models. Providers receive only the minimum context required for a specific request, processed in real time and excluded from model-improvement datasets.

Every decision leaves a trace.

Requests carry agent identity through the X-Agent header. Messages, tool activity, proposals, and approval decisions remain available for compliance review.

Your team can establish who requested what, which evidence was used, and who authorized the final action.