sutura deployment
Light / dark
Point at a part, or move to it with Tab, to show its connections.
sutura deployment
How the user, the agent, the gateways, the identity providers, the data systems and the semantics layer connect to sutura.
Access request portal · data marketplace · Architecture component
Access request portal
data marketplace
User · person · Architecture component
User
person
Chat interface / agent · MCP client · Architecture component
Chat interface / agent
MCP client
MCP gateway (optional) · passes the caller token · Architecture component
MCP gateway (optional)
passes the caller token
AI gateway · routes model calls · AI
AI gateway
routes model calls
Model providers · language models · AI
Model providers
language models
Entra ID · OIDC issuer · Identity
Entra ID
OIDC issuer
Keycloak · OIDC issuer, token exchange · Identity
Keycloak
OIDC issuer, token exchange
GCP IAM · workload identity pool · Identity
GCP IAM
workload identity pool
sutura · MCP server, verifies the caller, runs each query · Architecture component
sutura
MCP server, verifies the caller, runs each query
ClickHouse · data system · Data systems
ClickHouse
data system
BigQuery · data system, via GCP IAM · Data systems
BigQuery
data system, via GCP IAM
PostgreSQL · data system · Data systems
PostgreSQL
data system
Oracle · data system · Data systems
Oracle
data system
DataHub · holds the definitions · Semantics
DataHub
holds the definitions
Cube · serves the metrics · Semantics
Cube
serves the metrics
BI tools · dashboards · Architecture component
BI tools
dashboards
APIs · applications · Architecture component
APIs
applications
asks
model calls
model calls
MCP
MCP, caller token
MCP, caller token
sign in
key set
token exchange
pool, then mapped service account
grants roles
grants
grants
grants
SQL as the caller
SQL as the caller
SQL as a shared service user
SQL as the caller
definitions
definitions
metrics
metrics
metrics
Identity
Data systems
Semantics
AI
Legend
Frontend
Backend
Database
Security
External