The data gateway · in your runtime

Embed the data gateway into your agent.

Add governed data access to the agent framework, backend service, or product workflow you already run. Use approved connections, run data work outside the prompt, and keep an audit trail as the work happens.

Controlled · Governed · Contextual access, as code

Three primitives, one import.

Use MarcoPolo from the agent framework, backend service, or product workflow you already run. The SDK gives your code the pieces agents need in production: live access, a managed place to execute data work, and governance that travels with each call.

connectionslive
Caller · your code
svc:agent-42langgraph
sdk · scoped credentials
MarcoPolo gateway

Credentials resolved here · never in your code

approved systems
Salesforcesales_read
Snowflakeanalytics_ro
Postgresapp_read
Jiraissues_read
01

Secure Connections

Call the live systems your tenant has approved: Salesforce, Snowflake, Postgres, HubSpot, files, and internal databases. Credentials stay in MarcoPolo.

Secure connections
workspace · sdklive
# The work runs here, not in the prompt.$ mp.run("slipped_deals.sql")→ salesforce_opportunities  18 rows→ jira_issues               64 rows✓ slipped_deals_joined      14 rows$ mp.preview("result#7c21")# Your code gets 14 rows · not 82.
02

Managed Database Execution Environment

Execute saved queries, scripts, and workspace commands. Keep large outputs as result handles, then preview or compose them when the agent needs the next step.

Governed workspace
auditlive
tenantacmeservice accountsvc:agent-42connectionsalesforceexecutionexec#4f0resultresult#7c21
execution.startsdk

Written as your code runs · not reconstructed after

req#a91csealed to your SIEM
03

Governance & Auditing

Every action keeps tenant, user, service account, connection, execution, and result context attached. The audit trail is created as the work runs.

Trust and governance
Where it sits

The gateway runs where your code runs.

Build with the data gateway as part of your application runtime. Your code chooses the connection, starts the work, handles the result, and keeps governance attached from the first call.

  1. Use approved connections

    Your workflow can start from the connections already provisioned for a tenant, user, service account, or delegated actor.

  2. Run data work outside the prompt

    Queries, scripts, shell commands, joins, previews, and exports happen in the gateway before the model sees the answer.

  3. Carry governance with the call

    Identity, grants, effects, request IDs, executions, results, and errors stay attached to the SDK workflow.

  4. Hand off when useful

    Admins can manage setup in the web app. Assistants can use approved access through MCP. Your SDK workflow does not reimplement either one.

Scenarios

Shipped by teams building agents.

LangGraph agent with admin-managed access

A tenant admin connects Salesforce and Snowflake. A LangGraph workflow uses the SDK to run approved operations, compose result handles, and return a clean answer to the application.

Webapp setupSDK executionshared audit

Embedded customer assistant

A SaaS product acts on behalf of an end user. The agent can use the tenant's approved connections, while every call still carries delegated identity.

SDK delegationgoverned executionweb app review

Assistant fallback through MCP

An analyst asks a follow-up question in an MCP client after the product workflow runs. The same approved connections and saved operations are available there.

SDK workflowMCP assistantsame data gateway
Built in, not bolted on

When the gateway belongs inside the product you are shipping.

Get started
FAQ

What developers ask before they build.

Does the SDK require developers to use MCP?

No. The SDK is for agents and agentic apps built in code. MCP is the assistant-facing surface over the same gateway.

Can a team use the SDK without building connection setup screens?

Yes. The web app can own provisioning, consent, and sharing while the SDK consumes visible connections and approved operations.

Can SDK workflows share audit history with MCP usage?

Yes. SDK workflows and MCP calls create activity against the same identity, connection, execution, result, and audit model.

Build on the data gateway directly.

Embed governed connections, managed data execution, and auditability into the agents you ship.