Work from LLM
Through the Forest MCP server, your ops and product teams query live production data and run the Actions your engineers coded, under their own role.
TL;DR
Through the Forest MCP server, your ops and product teams question live production data and run your Forest Actions from the LLM client they already open.
Each AI agent your team runs gets its own service account: an approved role, approval gates that still fire, and every action logged under its name.
Same permissions, same approval gates, same audit trail as the Forest UI. The surface changes; what sits underneath does not.
Every question and every action from an LLM client runs through the Forest MCP server, under the caller's Forest role, with the approval gates your compliance team already set.
Ask in plain language
Your team asks for a metric across the year, every case flagged above a threshold last week, or the full picture of an account before a call.
Your Actions, callable by AI agents
Reads and writes are half of it. The Forest Actions your engineers coded are exposed too, so an AI agent runs real operations, not just queries.
AI agents your team builds
Describe what the AI agent should do in plain language. Your LLM client turns that description into skills that call the Forest MCP server.
An identity for every AI agent
Each AI agent gets its own service account, with a role and teams your compliance team approved. It never signs in to the UI, and its actions carry its name.
The approval gate still fires
Below your thresholds the AI agent acts on its own. Above them a named approver signs first, and the action waits until they do.
Traced to the record
Identity, target, field, timestamp, approver, outcome. Every action lands in the same record-level audit trail as a manual one.


Built for ops and product teams
One answer, not six screens
Your team gets the record, the history and the numbers in a single reply. Forest resolves which of your datasources hold them.
The same rules for humans and AI agents
Every call carries a Forest identity, a person or a service account. Roles apply to each read, each write and each Action, and each one lands in the audit trail.
The client your team already opens
Claude or any MCP-compatible client connects, and none of them changes what your team is allowed to do.
Bring your own client
Frequently asked questions
You still have question ?
Book a conversation with a forest expert
What can my team actually ask for?
Anything inside their permissions: a metric across the year, every case flagged above a threshold last week, what happened on a disputed charge, or a full picture of an account before a call. Nobody needs to know which collection holds the data or which Forest Action to trigger.
Can an AI agent do more than read and write data?
Yes. The Forest Actions your engineers coded are exposed through the MCP server, so an AI agent can trigger a refund, change a status or run any operation your team built. Each one carries the same permissions and approval gates as a person running it in the Forest UI.
How do we give an AI agent its own access?
Create a service account for it in Forest, with the role and teams it needs, and generate an application token. The AI agent connects with that token, sees only what its role allows, and everything it does is logged under its own name.
Do we need a developer to build an AI agent?
No. Your ops or product team describes what the AI agent should do in plain language, and the LLM client turns that description into skills that call the Forest MCP server. Your engineers stay involved on architecture and thresholds, not on writing each AI agent.
Can an AI agent act without anyone approving it?
Only below the thresholds you set. Actions carry approval conditions and named approvers in Forest, so above a threshold the AI agent proposes and a person signs. The Forest back-end enforces the gate; a prompt does not.
Isn't this just an API with a chat window on top?
A raw API gives access. Forest gives governed access on your system of record: every call lands on the same permission model, the same approval gates and the same audit trail as the Forest UI. Building an interface rather than chatting? That is the Gateway API.
So we never open the Forest UI again?
Plenty of teams still do, for case work at volume and for anything that reads better on a screen. What moves to the LLM is the ad-hoc half: the question at standup, the spot-check, the pull before a call. Both surfaces run on the same permissions and the same audit trail.
How do you ensure customer data never leaves our environment?
The Forest back-end runs inside your infrastructure, alongside your databases. Customer data travels to a provider only at the point where its service is called, and the response is logged back to the case. Data stays in your systems of record.

