Stops runaway loops
If an agent sends the same call five times in a minute, Accord stops it before it runs up your bill.
Try it: send the same message six times in the sandbox chat.
An API is what your app can do. MCP lets AI use it.
Give your AI
the right tools.
Turn an API into tools for Claude, Cursor, and other AI assistants. Test what they can do, set the boundaries, and see every call.
Works with any MCP client, including Claude Cursor Visual Studio Code OpenAI Windsurf
Try it herePaste → Test → Connect
1
Try
21 AI tool from cURL
Your key stays out of the tool. You add it once as a secret when you deploy.
7
checks on every call, before anything runs
1,000
free sandbox calls. No card, no signup
4
input formats: cURL, OpenAPI, Swagger and Postman
Live demo
Connect your agent.
See it work in 30 seconds.
Get a real MCP URL in one click. Add it to your agent, ask it something, and watch each call arrive here as Accord checks it.
- Create a sandbox URLOne click. No account needed.
- Add it to your agentClaude Code, Cursor, VS Code or the Claude app.
- Ask it to do somethingEvery call shows up live, with the decision and the time it took.
Pick what your agent should do.
Role-based access. Tools that touch production are filtered out of the agent’s tool list.
No signup. Free for 1,000 calls. Responses are sample data.
What happens on every call
A firewall for AI agents.
Seven checks. Every call.
Explore the sandbox’s seven checks, inspect every decision, and see exactly what comes back.
Your agentAccord checksYour APIAccord trimsYour agent
Each agent sees only its tools
Give a support agent read-only tools. Keep production tools out of its list entirely.
Role-based tool lists, matched by tool name or path.
Risky actions stop for review
Configured risky tools are blocked before execution.
Approval and resume workflows are planned.
Smaller responses, fewer tokens
Links, metadata and fields you do not need are removed before the response reaches the model.
Every receipt shows the real bytes saved on that call.
Private fields never reach the model
Emails, phone numbers or any field you name are replaced first. If that step fails, the response is withheld.
This check fails closed, by design.
Repeat questions answered from cache
Identical read calls come back from the cache, so your API is not hit twice for the same answer.
Exact-match cache, per gateway.
Use cases
Real work for your agents.
With the guardrails built in.
DevOps and IT
Let the agent fix staging. Keep it out of production.
Your agent reads PagerDuty incidents and restarts staging servers on its own. The production restart tool is hidden from it, so it cannot even ask.
Role-based access. Tools that touch production are filtered out of the agent’s tool list.
Customer success
Refund drafts without handing over customer data.
Your agent reads the Zendesk ticket and the Stripe charge, then drafts the refund. Emails and phone numbers are removed before the model sees them.
Private fields removed. Emails, phones and addresses are replaced before the response reaches the model.
HR and onboarding
New hire accounts, approved by a person.
Your agent prepares the Google Workspace account and the Slack invite. Nothing is created until an admin approves it.
Human approval. Every account change is held until a person approves it. Nothing is sent before that.
Data and BI
Ask the same question twice. Pay for it once.
Your agent writes SQL against Snowflake. When it runs the same query again, Accord answers from its cache instead of your warehouse.
Cached repeat queries. Identical queries within five minutes are served from the cache.
Deploy
Ready for your real API?
Deploy your own server.
Your converted tools can run as your own MCP server. Your API key stays on the server, so the agent never sees it.
Vercel
One click. Add your gateway’s manifest URL, your API key and a token for your agent.
Deploy to VercelDocker
Run it anywhere with one command. You need Docker and a gateway id.
curl -sL https://mcp.edenbuilds.me/docker | bash -s -- YOUR_GATEWAY_IDDon’t want to manage servers?
Get a gateway URL Try a hosted sandbox with sample responses. Managed real API hosting is on the roadmap.
How Accord compares
MCP is the socket.
Accord is the circuit breaker.
API gateways were built for apps calling APIs. Automation tools run fixed recipes. Accord is built for agents that decide what to do next, and need limits while they do.
Pricing
Free while you try it.
Fair when you ship it.
The sandbox is free today. The paid plans below are proposed and open after the private beta. We take no payment now.
Sandbox
$0
Available now
- Converter and sandbox chat
- Live MCP gateway URL
- 1,000 calls for 30 days
- All seven checks
- No signup
Pro
$79
Proposed, per month
- Your real API behind the gateway
- 100,000 calls a month
- 7-day audit log
- Custom gateway domain
Enterprise
Let’s talk
Planned, annual
- SSO and identity mapping
- Slack and Teams approvals
- Private data plane
- Log export to Datadog or Splunk
Questions
Straight answers
for CTOs and SREs.
What does Accord do, in plain words?
It turns an API into tools an AI agent can call, then sits between the agent and the API. Every call is checked: is this agent allowed to use this tool, is it stuck in a loop, does a person need to approve it, and which fields should the model never see.
Do I need an account to try it?
No. The converter, the sandbox chat and a live sandbox gateway all work without signing up. Accounts that keep gateways and audit logs for longer are coming. Join the waitlist to get one first.
Does Accord add latency?
A little, and we show you exactly how much. Every receipt records the time Accord spent on the call. Repeated read calls are served from cache, which skips your API entirely. We have not published a latency guarantee yet.
Do you store our API payloads?
The sandbox never calls your API, so there is nothing to store. We keep call receipts for 30 days: tool name, decision, timing and sizes, never response bodies. Servers you deploy yourself send nothing to us. Streaming receipts to Datadog or Splunk is on the roadmap.
How are API keys handled?
Keys never go into the tool definition. The converter removes them when you paste a command. When you deploy your own server, it adds your key to each request on the server, so the agent never sees it.
Is it ready for enterprise production?
Not yet. Accord is a developer preview. The checks run today. SSO, identity mapping, Slack approvals and audit export are on the roadmap. There is no SOC 2 report or SLA yet.
What do sandbox calls return?
Realistic sample data built from the API's own schema. You see the whole flow, including the checks, without connecting a real system.
Your agents, with limits
you set yourself.
Start with one cURL command. Ship with every call checked.