%% Marketing Cloud MCP with controlled helpers: proposed design
%% Proposed design: to be validated for each implementation
flowchart TB
  subgraph z0["Salesforce-hosted"]
    mcemcp["Engagement MCP Server<br/>vendor-run, GA 2 Jun 2026"]
    mce["Engagement tenant<br/>your business units"]
  end
  subgraph z1["Customer-controlled helper (proposed)"]
    helper["Marketing helper server<br/>proposed, read-only"]
    docs["Approved documentation<br/>curated index"]
    parser["Safe parser<br/>parse only, no execution"]
  end
  dev["Marketer or developer<br/>works in an AI client"]
  reviewer["Reviewer<br/>approves saved changes"]
  host["MCP host<br/>AI client"]
  dev -->|"requests"| host
  reviewer -.->|"approve change"| host
  host -->|"user OAuth tool calls"| mcemcp
  host -->|"read-only tool calls"| helper
  mcemcp -->|"scoped API access"| mce
  helper -->|"search"| docs
  helper -->|"validate text"| parser
  classDef salesforce stroke:#125BD8,fill:#e8f0fd
  class mcemcp,mce salesforce
  classDef data stroke:#2f8a3a,fill:#e9f6ea
  class docs data
  classDef ai stroke:#5747AF,fill:#f6f4fd
  class host ai
  classDef integration stroke:#334155,fill:#eef2f6
  class helper integration
  classDef security stroke:#1f2937,fill:#f3f4f6
  class parser security
  classDef people stroke:#125BD8,fill:#ffffff
  class dev,reviewer people