A few weeks ago I posted here about an assistant on top of a client's ERP. The best feedback I got was about permissions and writes: map each key to what that person may see, and keep the approval outside the model. This is what came out of that. It's called Puente ("bridge" in Spanish), and it's a product of my consultancy, Cuenta Norte. 🌉 The product Puente is a remote MCP server. Each person adds it to their own Claude app as a custom connector, on the phone, the web or the desktop (I've also tested it from ChatGPT). No terminal, no install, no new app to learn. Packaging was my big question when I joined, and this is my current answer: the screen is the Claude app they already have. Connecting to the system is not the interesting part. Odoo has an API, an in-house ERP has one too. Puente adds the three things nobody ships with it: 1. Scope per person. It knows who is calling and what that person may see. A sales rep reaches their own customers and orders. The owner reads everyone's but changes only his own. It's decided once, in one place, and a call that arrives without a real identity sees nothing. 2. A brake on writes. The model never writes. It proposes, the person gets a card inside the chat showing exactly what will change, and only the person approves. Each approval works once, and on one installation it also asks for a PIN. 3. Memory and a log. The company's context lives in folders by role, ICM-style, so what someone teaches the assistant stays with the role when the person leaves. Anything shared goes through the same brake as a write. And every call is recorded: who, what, when. 🏗️ One product, two installations The product is the core: identity, brake, card, log, context. It doesn't know any client exists. An installation is what belongs to one client: the adapter to their system, their context, their deployment. One codebase, a core plus one folder per client, and a test goes red if one client's folder reaches into another's. Today there are two installations on the same core: