150 karma · joined April 3, 2016
Advantages over our normal API: - Much easier to provide LLM-specific explanations and descriptions to all of the tools and parameters - None of our clients know what a CLI is - We re-use our MCP for our own platform's agent which gives it a neatly defined list - It handles the full OAuth flow in the application
I'll admit though it is VERY similar to a REST API, and I could see them merging at some point.
Currently doing a different startup, but certainly an idea for a future one.
- They could no longer read your data
- Additional redundancy (as you only need 2 to be available)
- Compared to other secure storage apps which rely on a master password, which if you forget, you are screwed, you could still use all the usual account recovery methods.
My clients demand one, so there is one.
- Schedule time for it
- Understand that I will have slip ups and that's okay
- Make it hard to do the bad things (in this case, I have domain blockers to stop me redditing, I move my phone to another room etc.)
- Make it enjoyable. For me it's finding a particular energetic DJ set and just bopping along while I do the focused work.
And so on.
Your product seems great for actually doing the spirit of these frameworks (reducing risk, improving controls and processes etc.). However from what I've seen the reality of these audits is it's a box ticking exercise for everyone involved, and so improving the efficiency there tends to be the goal. How do you position yourself in that?
Also hope this doesn't come off too critical, it's just something I've been through recently and love seeing new things! I'd definitely add a vanta/drata comparison to your website though as that is inevitable.
The rise of smart accessories (especially watches) should tell you that a lot of people don't want to disconnect