Skip to main content

​
What stays on your side

These items never leave your device or network:
  • Your source code — the AI assistant reads your repository locally in your IDE.
  • Your prompts — everything you type into the AI assistant stays inside your IDE.
  • The AI-generated draft — the draft is written to a local JSON file in your workspace.
  • The import decision — only a human user imports the approved JSON into the CSQ Cockpit.

​
What the server actually does

The server exposes only two things:
  1. Read-only catalog tools — list your tenant’s services, features, service instances, use-case schema, example, and risk rubric.
  2. Staged guidance prompts — text instructions that tell the AI assistant how to structure the local risk-assessment draft. The main entry prompt is start_usecase_discovery. The flow is advanced through the advance_analyze_btp_usage_flow tool in six explicit stages:
There is no tool to upload, submit, write, or execute anything. The server cannot run commands on your machine or modify data in CSQ.

​
What crosses the wire

No source code, prompts, or generated drafts are transmitted.

​
Read-only proof points you can verify

  1. No write-back tool. The src/tools/ directory contains only read-only tools. There is no submit, upload, import, or write tool.
  2. Local output instruction. The staged prompt (src/prompts/analyzeBtpUsage.ts) explicitly instructs the AI assistant to write the draft to a local JSON file and not import it into CSQ until the user approves.
  3. Sanitized output. Every database response is sanitized before serialization (src/security/sanitizeOutput.ts) to strip control characters and neutralize prompt-injection markers.
  4. Tenant isolation. A token resolves to exactly one tenant database. Cross-tenant requests are rejected before reaching the database.

​
Responsibility split

​
Bottom line

Connecting the CSQ MCP server exposes no source code, no prompts, and no write capability. The only data that crosses the boundary is structured tenant catalog data that you already own. You remain in control of the AI assistant, the generated draft, and the final import decision.