Risks to understand
The vendor runs the MCP server, not Invert. Know these risks before you add a server:
- Assist sends data to the vendor. Tool inputs can contain data from your chats and from Invert, for example a run name. Read-only tools also get these inputs.
- Tool results can contain instructions. Text in the product, such as a document, can tell Assist to put your data into a tool call or a link. Any person who can write in that product can add such text.
- The vendor can change the tools after you add the server.
- Approved tools that change data act as each user, with that user's permissions.
Invert limits these risks. Assist uses only the vendors in the table below, and each user signs in with their own account. Tools that change data stay blocked until an admin approves them, and automations never get them. Code that Assist runs has no internet access. Assist shows images from other sites as links.
Add only vendors that you trust and have an agreement with. Approve tools that change data only when you need them. After you reload a server's tools, check them again.
Before you start
- You need the Admin role in Invert.
- Assist must be enabled for your organization.
- Assist works only with MCP servers from the vendors below. To use another vendor, contact Invert support and ask us to add it.
| Vendor | MCP server host |
|---|---|
| Benchling | <your-tenant>.mcp.benchling.com |
| Article Galaxy | mcp.articlegalaxy.com |
| Microsoft Work IQ (Microsoft 365) | workiq.svc.cloud.microsoft |
For Microsoft 365, follow Connect Microsoft 365 to Assist (Work IQ) instead. It has steps your Microsoft admin must do first.
Step 1: Add the server
- In Invert, go to Settings → MCP servers and click Add server.
- Keep Other MCP server selected.
- Enter the MCP server URL and a Display name. Invert fills in the Server key from the display name.
- Leave Client ID and Client secret empty, unless the vendor tells you to register a client with them first. In that case, enter the client ID and secret from the vendor.
- Click Add server.
The sign-in window for the vendor opens. When you sign in, Invert loads the server's tools.
Step 2: Check the tools
Each tool on the server row has a status. Invert sets it from what the server says about the tool:
- Approved: the server says the tool only reads data. Assist can use it.
- Blocked: the server says the tool can change or delete data. Assist can't use it.
- Not approved: the server does not say if the tool is read-only. Assist can't use it.
To change a status, click Approve or Block next to the tool. To approve, you must add a note. When you approve a tool, Assist can call it in sessions for every connected user in your organization. Automations never get tools that can change data.
Step 3: Other users connect their account
You are already connected, because you signed in when you added the server. Every other user does this:
- In Invert, go to Settings → Preferences.
- Under Connected accounts, click Connect next to the server.
- Sign in to the vendor's product.
Assist can now use the approved tools in that user's sessions.