Model Context Protocol server for Schoolyi

Why IT cares about MCP

Teachers and admins will experiment with AI clients. Without an official integration path, they export CSVs into unknown tools. MCP gives IT a supported bridge: configure which tools an AI client may call, test connections in staging, and rely on the same role matrix as the web app.

How MCP works in plain terms

Model Context Protocol defines how an AI assistant discovers and invokes tools - list today’s defaulters, fetch timetable for a class, look up a help article. The Schoolyi MCP server exposes a curated tool set. The AI client runs on a user machine or approved vendor cloud; each call carries that user’s authorization.

• Tools map to existing permission checks
• No broader access than the interactive app
• Configuration UI in AI Tools workspace
• Built-in connection test before enabling production

Setup workflow for admins

Enable MCP in settings, generate credentials, and scope which tools are exposed. Run the test harness against sandbox data. Document which staff roles may connect clients. Revoke tokens when pilots end - same discipline as API keys.

Audit and policy alignment

MCP calls log like other authenticated actions. Your acceptable-use policy should cover which clients are approved - corporate Copilot vs personal ChatGPT plugins. DPO review parallels API integration review.

MCP vs full API

Use MCP when an AI assistant needs contextual, conversational access with guardrails. Use direct API for batch ETL, custom portals, and integrations that do not involve LLM clients. Many schools run both with separate credentials.

Security expectations

Rotate credentials on schedule. Never share admin tokens in shared drives. Prefer SSO-linked user sessions where client software supports OAuth-style flows. Report misconfigured exposed endpoints through the security contact.

Pilot before campus-wide rollout

Start with IT and one business office lead - fee inquiry tools, docs search - before exposing timetable or roster tools broadly. Gather friction logs; expand tool exposure deliberately.