Your AI gets
- The list of tools for that one connection, each labeled with its tier.
- The results of the calls it makes.
- A link to the web app when something needs your approval.
dylr.dev How it works
DylrDev is a hosted MCP server. You connect your contact center platform once, paste one URL into the assistant you already use, and ask in plain English. We run the tool calls, enforce the safety tiers on our server and keep a log of every call.
Create a dedicated API user or key with only the access you want your AI to have, then paste it once. We prove it works with a real read call, encrypt it with its own key and never show it again.
Every connection gets its own MCP URL. Claude and ChatGPT sign in with OAuth. Claude Code, Cursor, Gemini CLI and Copilot in VS Code can use OAuth or a CLI token for that one connection.
"Build me an IVR with business hours." Reads run right away. Writes make your AI client ask you first. Risky actions wait until you approve them in the web app or arm the connection.
For example list_campaigns or publish_flow, to the URL of one connection. A token for one connection cannot reach another.
The token, the organization, your role and your access to that connection. Then the rate caps: 120 calls a minute and 5,000 a day per connection by default.
Read runs. Write runs, and its label tells your AI client to ask you first. Dangerous is refused unless the connection is armed or you approved that exact call.
The credential is decrypted in memory for this one request and sent only to the host you picked at setup. Any other host is refused.
Time, connection, tool, tier, outcome and the AI client's name, with arguments reduced to an approved list of safe fields. Kept 90 days on the Free plan and 1 year on Unlimited, exportable as CSV.
We pass it through and keep nothing of it beyond a short summary such as "returned 25 records".
We host MCP and nothing else
There is no DylrDev chat and no model of our own. Your assistant is the only chat window, so we never see your conversations, only the tool calls it sends.
Owner, admin, member and viewer. Members only reach the connections they are given, and nobody sees credentials.
Turn it on and a dangerous call has to be approved by a different admin or owner than the person whose AI asked.
Every AI token belongs to one person, so every audit row says whose AI acted. Removing someone revokes their tokens at once.