Epic AI®
IntegrationsPricingSecurityAboutInstall free

Chariot MCP™

Sovereign.
Secure.
Governed.

Chariot MCP™ is a self-hosted gateway that connects your AI to the systems your company runs on. It sits between the AI your team already uses and your data, so your AI can do real work while access, credentials and the audit trail stay on your own infrastructure.

Install freePricing

Version 3.1.2 · 1,815 integrations · 27,156 tools · Elastic License 2.0

Sovereign

Sovereign = self-hosted. Not a SaaS. It runs on your infrastructure, not ours.

Secure

Secure = verified before it is trusted, and narrowed before it is shown.

Governed

Governed = every action has a rule before it runs and a record after.

Where it sits

One server between your AI and everything it needs to reach.

Your AI client
Claude Desktop, Cursor, ChatGPT Enterprise, Codex CLI.
Chariot — on your infrastructure
Access control, credential vault, approval tiers, audit trail.
Your systems
1,815 integrations and your own internal APIs.
For the CTO

Sovereign

Where does it run, and who controls it?

Sovereign means self-hosted. Chariot is not a SaaS.

It runs where you run it.

  • Runs on your own infrastructure. There is no Chariot control plane to depend on.
  • Works fully air-gapped. In connected mode the only Epic AI® server it contacts is the license host.
  • Works with the AI clients you already use: Claude Desktop, Cursor, ChatGPT Enterprise, Codex CLI.
  • 1,815 integrations and 27,156 tools in the current release, plus your own internal APIs through discovery.
  • Source available under the Elastic License 2.0. Free for one user.

A hosted gateway puts your traffic, credentials and logs in someone else’s cloud. Chariot does not: access control, credentials and the audit trail stay on your infrastructure.

For the CISO

Secure

What can it touch, and can I prove it?

Secure means nothing is trusted until it is verified.

Verified before it is trusted. Narrowed before it is shown.

  • The integration catalog is signed with Ed25519 and verified when it loads. A catalog that does not match the production key built into the package is refused. One hardening step remains open: custody of the production signing private key in AWS KMS.
  • Single sign-on with SAML or OIDC, SCIM provisioning, and role-based access.
  • A person’s AI is never shown the tool definitions of an integration their role does not allow.
  • Credentials sit in an AES-256-GCM vault with a key derived per tenant.
  • Report a vulnerability to security@epic-ai.io. The source is readable, so you can check the claims.
For the compliance officer and the CFO

Governed

Who approved that, and what does it cost?

Governed means every action has a rule before it runs and a record after.

Rules before action. Evidence after.

  • For compliance: every tool call is classified auto, escalate or approve, and a tool with no rule requires approval.
  • Every dispatched action is written to a hash-chained, append-only audit trail. Altering or removing a record breaks the chain, so tampering is detectable.
  • An export-ready trail for reviewers and auditors, held on your own infrastructure.
  • For the CFO: cost you can forecast. Seat packs, not metered usage, and one user is free.

What Chariot is not

Not a model.

Chariot does not host, train or fine-tune an LLM. You point it at the one you already use.

Not a hosted service.

There is no Chariot control plane. It runs where you run it; your audit records and credentials stay inside your network.

Not another chat window.

You keep using your AI client. Chariot is the layer behind it.

Install

Install it. Then talk to your AI.

Or ask your AI to install it
Read https://epic-ai.io/install.md and install Chariot MCP by following it.
Or run it yourself
npx @epicai/chariot

One user is free, with full functionality. When your team needs multi-user sign-on, you buy seats for the same deployment. See pricing or browse the 1,815 integrations.