# Aevah

Aevah is a master data management platform and an MCP-compatible tool host for enterprise agents.

## Capabilities

Aevah is a master data management platform. Capabilities: multi-source ingestion and linkage; matching and deduplication; survivorship and golden-record creation; stewardship and clerical review; merge, split, detach and unmerge; data quality rules, execution and dashboards; visual hierarchy management; reference data management; source-to-target mapping with automatic suggestions; outbound publication to downstream consumers; and AI-assisted operations. Governed changes create new versions rather than overwriting, so prior state stays retrievable and comparable.

## Agent integration

Aevah is an MCP-compatible tool host for enterprise agents. Every capability is published as a versioned, schema-bound, permission-scoped tool in one of three classes: read, propose, and execute. The tool list is filtered to the caller's permissions, so a tool you are not entitled to invoke does not appear. Agents operate in one of two contexts, never combined: delegated on behalf of a person, bound to that person's session and never exceeding their permissions; or as a service agent principal with a named human owner and administrator-assigned permissions. When a step needs a human decision, tools return an interactive review surface rather than raw data. Breaking changes publish a new tool version; existing versions are never altered.

Every call is authorized, classified, and audited, and every governed change creates a new version rather than overwriting prior state.

## MCP Apps

When an agent reaches a decision only a person should make, Aevah hands back a usable interface rather than a wall of JSON. An agent proposing a merge returns a review surface showing the candidate records side by side, which attribute value wins and why, and approve or reject controls — rendered directly in the agent's own environment. The person decides on real evidence, in context, and the decision is captured in the audit trail. The interface is a rendering surface, never an authority: every approval is reauthorized against the approver's permissions before anything changes, and the surface never receives values the viewer is not cleared to see. Review surfaces cover merge and match review, survivorship explanation, data quality triage, mapping suggestion review, and generic proposal approval.

## Security posture

Authentication is delegated to the customer's identity provider — OpenID Connect with Microsoft Entra ID, SAML federation, and OAuth 2.1 for programmatic access. Aevah never stores credentials. Authority is resolved at execution, so revoked permissions take effect immediately. Data carries a four-tier classification — Public, Internal, Confidential, Restricted — with an independent PII flag; Restricted content cannot leave the platform boundary, and values a caller may not see cannot influence any result they can see. Every customer runs a discrete instance at its own URL: self-hosted, Aevah-managed in a customer-selected region, or sovereign and air-gapped. There is no shared data plane between customers. Aevah personnel hold no standing access to customer data; support access is customer-approved, time-boxed, scoped and audited. Audit records are immutable and cannot be altered or deleted, including by administrators. Aevah is designed against ISO/IEC 27001, NIST SP 800-53 AC-16, SOC 2 CC6, and PCI-DSS classification requirements.

## WebMCP tools

- search_documentation: Search Aevah product and developer documentation.
- get_platform_capabilities: Return the public capability summary.
- get_agent_integration_details: Return the public agent integration summary.
- get_security_posture: Return the public security posture summary.
- prepare_demo_request: Pre-fill the local preparation form for visitor review. It never submits or sends anything.

All website tools are read or prepare only. Consequential actions require a human click.

## Main pages

- Platform: https://www.aevah.com/platform
- Agent-Ready Platform: https://www.aevah.com/platform/agents
- Security & Trust: https://www.aevah.com/trust
- Developers: https://www.aevah.com/developers
- Aevah MCP surface: https://www.aevah.com/developers/mcp-surface
- MCP connection: https://www.aevah.com/developers/mcp-connection
- Contact and booking: https://www.aevah.com/contact

## MCP connection

Licensed customers receive administrator-issued connection details for their own Aevah instance. The public website does not reveal customer endpoints or the exact location of licensed discovery metadata.