Celigo Ships MCP Tool Controls for Agent Access

Celigo announced the platform on October 20

Celigo announced on October 20, 2026, that it launched MCP tool management through a new platform, Celigo MCP Management, according to a Business Wire release datelined from the Gartner IT Symposium/Xpo.

Siliconangle reported on October 20, 2026, that the platform lets IT and security teams govern how AI assistants and agents act on enterprise systems. Celigo made the platform generally available on Oct. 20, TokenPost reported on October 21, 2026.

TokenPost said the platform gives businesses a way to limit which tools AI assistants and agents can use and to trace their actions to verified users. Celigo Chief Product Officer Matt Graney said Celigo MCP Management "gives IT a single governed path to lock down agents and keep them within their respective domains," Siliconangle reported.

The gateway sets access rules tool by tool

The platform's gateway applies access rules to individual tools on MCP servers built by Celigo and other vendors, TokenPost reported. It also records which tools ran, giving administrators a record of activity tied to the user behind each request, according to TokenPost.

TokenPost said that tool-level control lets a company permit a specific action without opening every tool available on the same server.

Graney said every call traces back to a real person, Siliconangle reported. He added that access is approved one tool at a time and that the platform runs the tools and controls them, so teams can see which system the AI has touched.

Companies can also build tools for particular tasks from Celigo's more than 1,000 app connections, including connections to systems that lack their own MCP servers, TokenPost reported.

MCP gives agents a standard route into business systems

MCP has become a standard for connecting AI assistants and agents to business systems and services, Siliconangle reported. Anthropic open-sourced the Model Context Protocol in 2024, Siliconangle said, and TokenPost put the date at November 2024. Siliconangle noted that it is often described as a USB-C port for AI.

Siliconangle listed examples of the work involved: looking up customer information in a customer management system, checking invoices in an enterprise resource planning system, updating an order status in a parcel tracking system, or working through a ticket on a service desk. Work that used to fall to integration specialists can now be completed autonomously by agents such as Claude, ChatGPT, Copilot and Cursor, the outlet said.

Siliconangle reported that AI agents can act autonomously and provide a great deal of power, but can also hallucinate, making mistakes as they work with little supervision, and can be hijacked by malicious actors.

"AI assistants and agents are a new class of actors in the enterprise and the old model of shared credentials and broad access was never designed for them," Graney said, according to Siliconangle.

A server registry is due in November

Celigo plans to make its MCP Registry available in November, TokenPost reported. The registry is designed to show which servers an organization uses, which AI assistants and agents connect to them, and who has access, according to TokenPost.

"Enterprises need to know who is behind every AI request, what it is authorized to do and what actions it has taken," Graney said, TokenPost reported.

TokenPost's article also pointed to Harvey's MCP policy engine for legal workflows as another approach to controlling access to those tools. Siliconangle said the centralized control enables broad, granular management of AI assistants and agents across the enterprise.

Tron's take

That is my reading of the news, not a reported result. Celigo framed this launch for enterprises, and it arrived at the Gartner IT Symposium/Xpo. Most small and mid-sized businesses do not need a new gateway this week. They do benefit from knowing what shipped, so they can time adoption on purpose instead of reacting to a launch.

The detail that matters most to a smaller company is the risk Siliconangle described. Agents such as Claude, ChatGPT, Copilot and Cursor can already work through business systems, and Graney called shared credentials the old model. A business whose staff connect assistants to its customer records, invoicing or service desk has that exposure whether or not it buys from Celigo.

The registry is a November plan, not a shipped feature, so any buying decision that depends on it rests on a vendor promise for now.

I would inventory which assistants connect to which systems, and who approved each connection, before judging any vendor's tool. XL.net sells managed IT and security assessments, and that inventory is the kind of work an assessment covers. I would also ask Celigo about pricing, plan tiers and whether the November registry arrives on schedule.

Earlier site coverage of Nvidia's open agent guardrails points to other vendors building agent controls too. Waiting a quarter to see how these products mature is a defensible choice.