AI built with your team, owned by you

ibl.ai's Forward-Deployed Engineers embed with your team to connect HRIS, LMS, case management, ERP, identity, storage, and regulatory systems into a secure, policy-aware memory layer built on the Model Context Protocol (MCP). That memory becomes the backbone for AI agents — workforce coaches, program assistants, and citizen-service tools — running privately in your infrastructure.

This is professional services, billed by the hour (ultra-competitive rates), with clear milestones and artifacts you own.

Start here: where do your users, content, and records already live?

List every system that holds something an agent will need to read. This inventory is the foundation — bring in as many root systems as you want, and each one gets its own connector in the next step.

Put a thin layer on top over MCP — not a complex integration project

Our open-source Ontology builds these connectors — databases (PeopleSoft, Oracle, Snowflake) and REST systems (Canvas, Salesforce, ServiceNow, Workday) alike — and handles the toolbox, schema mapping, and sync. Add as many as you have systems.

Many MCP servers → one unified interface to the outside world

The broker authenticates each request, checks RBAC (deny-by-default), routes the tool call to the right MCP server, filters the response, and logs it. This is what AI Data Unification delivers end to end.

Markdown skill files written by domain experts, not engineers

Each system gets many skills: “advance an admissions application,” “onboard a new employee,” “advance a sales deal,” “open an IT ticket,” “check a claim status.” Bring in as many skills per system as the work requires.

Skills + prompts + instructions + memory

Add as many agents as you want. Each one bundles a set of skills, an instruction prompt, and persistent memory, and inherits the same role-scoped access enforced by the broker.

Your servers, sandboxed — data privacy, code security, no vendor lock-in

Each agent runs in its own sandbox with isolated execution, resource limits, endpoint allowlisting, credential injection, and audit logging — the same security model as the rest of the platform.

Edit and ship without waiting on an engineer or a deployment

The web layer exposes editing and running of skills, agents, and data sources directly in the browser, governed by the same roles and permissions as every layer below it.

A dedicated app per team, embeddable anywhere (LTI & more)

This is what we use Agentic Vibe for: describe the app and assemble it from your existing agents and skills. Bring in as many applications at this layer as you want.

ibl.ai-hosted: we manage the infrastructure. Fastest time to launch, no infrastructure overhead for your IT team, fully managed updates and maintenance; ideal for organizations that want speed.

Customer-hosted: deployed in your environment. Full GitHub repository with the complete platform code, pre-built Docker images ready to deploy, your security perimeter and your control; ideal for regulated industries and data sovereignty.

Both options deliver the same platform: a runtime for creating, managing, deploying and using AI agents across web, mobile, API and MCP. Platform is live, and agents are accessible from day one.

1. We deliver the platform: the full GitHub repository, the complete multitenant platform code, and pre-built Docker images, tested and versioned.

2. Joint development environment: we work alongside your team in a dev or staging environment, where agent configuration, system integration, testing and training happen together.

3. Production, your way: your team can promote to production independently, on your schedule and through your processes, or we manage production for you, as we run production environments for many leading organizations. Access to your production data is never a prerequisite; ibl.ai-hosted deployments include full production management by our team.

Self-serve: your teams build independently. Create agents through the platform UI or API, connect to your data sources directly, leverage the institutional knowledge your team already has, with full API coverage for programmatic agent management.

Collaborative: we work with you to build agents connected to specific data sources, develop MCP servers and custom data integrations, configure SSO and enterprise deployment standards, and build software that makes agents more capable. Agents are live and working, with visible results from day one.

Single sign-on over SAML or OIDC. Data sources: your existing databases and APIs. MCP servers: custom data integrations. Existing tools: CRM, HRIS, ERP, ticketing, LMS, SIS and more.

The platform adapts to your stack; your workflows do not need to change to support agents. Integrated and operational, continuous improvement begins.

Building specific agents: we develop purpose-built agents for your use cases, connected to your data and tuned for your workflows.

Extending platform capabilities: we build new features and integrations that make your agents more powerful, with additional data sources, richer tooling and new interfaces.

Ongoing communication: dedicated channels for collaboration, support and strategic alignment as your needs evolve.

Lead with tangible results: start with concrete agents that can be demonstrated from day one, so stakeholders see working agents immediately, not a black box for months.

Start with specific use cases: define concrete agents early. If the project definition is too broad without specific agents to show, stakeholder buy-in stalls while time goes into invisible infrastructure work.

Adapt to the existing stack: the platform integrates with your current tools and data sources, so your teams do not need to change their workflows to accommodate agents.

Empower your engineers: your team has the institutional knowledge. When your engineers can build agents programmatically and connect them to internal data sources, the value compounds.

The Model Context Protocol is an open standard — originally developed by Anthropic — that defines how AI models connect to external data sources, tools, and services. MCP provides a universal interface between AI agents and your agency systems, replacing brittle custom integrations with standardized, secure connectors.

Think of MCP as USB-C for AI: one protocol, every system. Instead of building a custom integration for each HRIS, LMS, or case management system, MCP gives agents a single, consistent way to read data, call tools, and respect permissions across your entire agency stack.

Agency IT teams maintain dozens of systems — USA Staffing, DCPDS, Cornerstone for Government, ServiceNow, and more. Traditional integration approaches require point-to-point connectors that break with every vendor update. MCP eliminates this fragility by providing a protocol-level contract between AI agents and data sources.

With MCP, your agency gets portable agents that work across any LLM provider (OpenAI, Anthropic, Google, Meta, or air-gapped local models), interchangeable connectors that can be swapped without rewriting agent logic, and built-in security boundaries where every data access goes through policy-aware middleware with federal-grade controls.

Every ibl.ai deployment uses MCP as the core integration protocol. Our Forward-Deployed Engineers build MCP servers for each agency system — HRIS, LMS, case management, ERP, identity providers, and document stores. These MCP servers expose structured tools and resources that agents can discover and invoke at runtime.

The result is a composable agent architecture: a workforce coaching agent can query personnel records from DCPDS, fetch training completions from FedVTE, check certification expirations, and retrieve regulatory guidance — all through MCP — without any custom glue code between systems.

Exposes personnel records, position classifications, clearance levels, service history, and performance ratings as MCP resources.

Agents can query real-time workforce data without direct database access. Field-level classification controls and need-to-know enforcement determine who sees what based on role and clearance.

Provides training catalogs, completion records, mandatory training status, certification tracking, and competency assessments as MCP tools.

Agents can retrieve specific training materials, check compliance deadlines, and access agency-level analytics — all scoped to the requesting user's permissions and clearance level.

Indexes agency documents — directives, regulations, standard operating procedures, policy memoranda — and makes them retrievable via semantic search through MCP.

Agents can cite specific documents with page-level provenance rather than generating answers from training data alone. Classification-aware retrieval ensures CUI/FOUO handling.

Every MCP request carries authentication context — who is asking, what role and clearance they hold, and what need-to-know has been established. Our MCP middleware enforces field-level permissions before data ever reaches the agent.

An employee asking about their own training sees their records; a supervisor querying the same system sees their directorate; an agency admin sees aggregate analytics. Same MCP server, different views.

MCP responses pass through a policy engine that redacts sensitive fields based on configurable rules and data classification levels. Social security numbers, clearance details, and CUI-marked content are masked or excluded from agent context unless explicitly authorized by policy.

Every redaction and classification decision is logged for audit.

Every MCP tool invocation is logged with timestamp, requesting agent, authenticated user, data accessed, and response summary.

These audit trails support NIST 800-53 compliance reviews, NIST 800-53 control assessments, IG audits, and incident response. Logs are stored in your infrastructure and retained per your agency records schedule.

MCP servers run in isolated containers within your GovCloud VPC, on-premises infrastructure, or IL4/IL5 enclaves. No agency data leaves your environment.

Agents interact with MCP servers over internal networks with mTLS encryption. Air-gapped deployment options ensure LLM inference stays within your security boundary.

Inventory: HRIS (e.g., USA Staffing, DCPDS, Workday Government), LMS (Cornerstone for Government, Percipio, FedVTE, AgLearn), Case Management (ServiceNow Gov, Salesforce Government Cloud), ERP/Finance (SAP S/4HANA Public Sector, Oracle Federal Financials), Identity (PIV/CAC via Entra/Okta for Government), Storage (GovCloud S3/DISA/SharePoint Gov).

Schemas & Contracts: personnel records, training completions, certifications, clearance levels, compliance status, regulatory metadata. Policy & Governance: classification fields, need-to-know scopes, retention schedules, redaction maps, authorization flows.

We build production-grade MCP servers for every agency system in your stack. Each server exposes typed tools and resources following the MCP specification, with built-in schema validation, error handling, rate limiting, and observability.

Servers are containerized and deployed via Terraform or Kubernetes manifests you own — in GovCloud, on-prem, or IL4/IL5 enclaves.

MCP-based Connectors: secure adapters that normalize read/write paths across systems. Per-User Memory Graph: knowledge graph + vector index for contextual retrieval (training content, certifications, compliance deadlines, regulatory guidance).

Guardrails Engine: RBAC, field-level permissions, data classification enforcement, need-to-know controls, audit trails. Sync & Freshness: event bus/CDC, backfills, idempotent jobs, conflict resolution, replay.

Workforce Coach: citable Q&A grounded in training content, regulations, and agency policies via MCP. Program Assistant: compliance tracking, reporting roll-ups, mandate deadline monitoring, status briefings.

Citizen Service Agent: eligibility lookups, case status, program guidance with provenance. Model Hub: OpenAI, Gemini, Anthropic, Llama, or local/NPU — hot-swappable per policy/cost, air-gap compatible.

We embed with your teams to map how work actually flows—not how org charts say it should. Every handoff, approval step, data lookup, and decision point is documented.

This reveals automation opportunities that generic AI tools miss.

We identify where staff spend time on repetitive, rule-based tasks that agents can handle.

Common findings: answering the same policy questions, manual data entry across HRIS and financial systems, routing FOIA requests, and generating routine compliance reports.

Each potential automation is scored on impact (time saved, error reduction), feasibility (data availability, system access), and risk (classification sensitivity, NIST 800-53 compliance requirements).

High-impact, low-risk workflows deploy first.

We plan deployment in phases—starting with internal-facing agents that assist program staff, then expanding to interagency and citizen-facing agents as confidence builds.

Each phase has defined success criteria and security reviews before proceeding.

Your knowledge base is architected with strict read/write separation. Agents that answer questions read from curated, validated knowledge stores. Agents that update knowledge write through approval workflows with human review.

This separation prevents hallucinated content from contaminating your agency's authoritative knowledge.

We work with your subject-matter experts to catalog and ingest agency knowledge—policy directives, regulatory guidance, SOPs, training materials, and institutional decisions.

Each knowledge source is tagged with provenance, classification level, freshness dates, and authority levels.

Knowledge bases are version-controlled like code. Every update is tracked, reversible, and auditable.

When directives change, OMB guidance updates, or new regulations take effect, knowledge updates flow through your existing governance process before agents surface them.

Agents retrieve from multiple knowledge stores simultaneously—your training content, HR policies, regulatory databases, and program documentation—ranked by relevance, authority, and classification level.

Need-to-know enforcement at every layer.

Each agent is designed like a new hire with a specific position description. It has defined responsibilities, access to specific systems, knowledge boundaries, clearance-aware access controls, and escalation protocols.

An acquisition agent knows procurement workflows. A HR agent knows OPM qualification standards. They do not bleed into each other's domains.

Agents are equipped with discrete skills—query DCPDS, draft a correspondence, generate a status report, schedule a review, look up a regulation.

Skills are composable: agents chain them to handle multi-step workflows that previously required multiple staff and manual handoffs.

Every agent knows its limits. When a question falls outside its defined competence—especially anything involving classification, legal authority, or congressional sensitivity—it escalates to the right human.

Escalation paths are configured per role, per office, per classification level.

Just like human hires, agents get reviewed. We build evaluation frameworks that measure accuracy, response quality, escalation appropriateness, and mission impact.

Underperforming agents get retrained or restructured.

AI Data Unification connects PeopleSoft, Workday, ServiceNow, Salesforce, Snowflake, and case-management systems into a single ontology — a structured representation of your organization that agents can reason over.

It has two layers: a semantic layer (the nouns — entities, attributes, relationships) and an operational layer (the verbs — actions, functions, permissions). Together they become the single source of truth every agent reads from.

Model an entity once and the tenth agent costs a fraction of the first, because it inherits the same definitions, the same data, and the same governance.

The implementation is open source at github.com/iblai/ontology — MIT-licensed, Python 3.11+, 163 passing tests. ibl.ai is family-owned and operated from New York, NY: a long-term partner, not a vendor that ships a license and disappears.

Entity types model the real-world objects in your organization — constituents, cases, programs, benefits, and employees. Attributes capture their characteristics, and relationships define how they connect. A constituent opens a case; a case belongs to a program; a determination is an action with rules.

This is the shared vocabulary your domain experts already use, made machine-readable so agents reason over the same reality your people do.

Actions define the permissible changes an agent can make. Functions encode logic. Permissions govern who — human or agent — can do what.

Agents inherit the same permissions as the users they serve, so they can only act within your existing rules. Every action is captured as data, so audit trails are built in, not bolted on.

Databases connect through the Google MCP Toolbox; REST-based systems connect through custom MCP servers, defined in tools.yaml. For public-sector agencies, that means PeopleSoft, Workday, ServiceNow, Salesforce, Snowflake, and case-management systems.

Source credentials never leave your network. Each inbound connector has isolated credential scope, with secrets encrypted at rest.

Data is synced into three layers: text memories in Markdown, a Postgres cache, and vector embeddings for semantic search.

The unified graph stays fresh on a schedule you control.

The unified layer exposes itself as a single MCP server over HTTPS, behind your firewall and identity provider.

Any authorized runtime — ibl.ai, Claude, Cursor, or your own apps — connects to it, and results are scoped to the caller's identity.

Version 1 is read-only by design. Before provisioning, a seven-test safety suite verifies that every write attempt is denied; if any write succeeds, provisioning halts and emits remediation SQL.

Agents can read your systems — they cannot mutate them.

Foundations: how AI agents work (retrieval, citations, guardrails), data classification, and responsible government use. Mission Patterns: workforce coaching, mandatory training, certification prep, and knowledge management.

Toolkits: prompt frameworks, "do/don't" libraries, agency policy language, and end-user guidelines. Hands-On Labs: build a training coach, configure knowledge bases from agency SOPs, test citations, and set classification-aware guardrails.

Program Makeovers: co-design training sequences, certification curricula, and AI-supported workflows for workforce development. Mission-Specific Clinics: acquisition workforce training, cybersecurity awareness, leadership development programs, and citizen-service improvement.

Prompt & Policy Reviews: refine prompts for classification-appropriate content, set boundaries for sensitive information, and add transparency language aligned to agency directives.

federal-security-aware workflows; dataset scoping, data classification controls, and role-based access. Information security: classification boundaries, CUI handling, and audit trail requirements.

Accessibility by Design: Section 508 practices, captioning, alt text, and inclusive prompt patterns for diverse federal workforce.

We actively monitor OpenClaw's security advisories and apply patches before they reach your production environment.

Our team tracks CVEs, validates fixes, and manages updates on a schedule aligned with your agency's change management and ATO process.

Deploy agents with granular permissions tied to your identity provider and clearance levels. Agents enforce need-to-know and classification boundaries.

All access controls enforced at the infrastructure level via PIV/CAC integration.

Every agent action, tool invocation, and data access is logged to your SIEM or logging infrastructure.

NIST 800-53 aligned by design, with NIST 800-53 controls, configurable retention policies, and export formats for agency review.

Agents run in isolated network segments with strict egress controls. Mission data never leaves your perimeter.

Integration with agency systems uses mTLS, service mesh architectures, and classification-aware routing.

Hardened input pipelines prevent prompt injection, data exfiltration, and unauthorized tool execution.

Multi-layer validation ensures agents only perform sanctioned operations within your security boundary.