Nexus Enterprise

Part of the Nexus network, Enterprise is a high-security Slack agent that uses live workspace RAG and MCP to autonomously audit external guest access and instantly provision secure sub-workspaces.

Comment

Inspiration

Corporate IT and Security teams are overwhelmed. Between monitoring external guest access across hundreds of channels and manually provisioning secure sub-workspaces for contractors, compliance is incredibly tedious. We were inspired to build an autonomous agent that acts as a 24/7 security overseer, allowing admins to automate strict compliance checks and infrastructure provisioning directly from Slack.

What it does

Nexus Enterprise is a strict, high-security AI agent operating within the Nexus Agent Network.

  1. Compliance Auditing (Slack RAG): When an admin asks to run a compliance check, the agent dynamically queries the Slack Web API to read recent channel history across the workspace. It injects this real, live context into the LLM to identify external guests and potential security policy violations.
  2. Infrastructure Automation: Using the Model Context Protocol (MCP), Nexus Enterprise can execute complex backend workflows. For example, it can instantly trigger a script to provision a brand-new, isolated Slack workspace with strict security policies applied by default for a new contractor team.

How we built it

We built Nexus Enterprise using a robust, 100% cloud-native architecture designed for massive scale.

  • Slack Integration: Built on the @slack/bolt framework running in Socket Mode to securely route Slack events without opening inbound firewall ports.
  • The Brain: Powered by the Inception LLM (mercury-2). We engineered a highly specific system prompt tailored for corporate compliance, security auditing, and workspace administration.
  • The Backend: We implemented an official Model Context Protocol (MCP) SDK Server hosted on Railway. This server exposes our high-level enterprise tools (like run_compliance_check and provision_workspace) securely to the Slack agent.
  • The Command Center: A real-time admin dashboard built with Next.js and hosted on Vercel. It uses Server-Sent Events (SSE) to monitor when the agent executes compliance tools in real-time, providing an auditable trail of actions.

Challenges we ran into

When building an enterprise tool, security and reliability are paramount. One of our biggest challenges was ensuring our MCP server could handle concurrent connections securely. When multiple agents in the Nexus network attempted to trigger tools simultaneously, the server crashed. We had to rewrite the MCP initialization flow to dynamically instantiate isolated server instances per SSE client stream.

Accomplishments that we're proud of

We are incredibly proud of our Slack RAG (Retrieval-Augmented Generation) integration. The agent doesn't just hallucinate compliance issues—it actively filters through public channels to find real conversations involving external guests. Combining that capability with the power to execute real commands via MCP feels like the future of IT management.

What we learned

We learned the profound impact of the Model Context Protocol. Standardizing the connection between LLMs and sensitive corporate tools (like workspace provisioning scripts) significantly reduces the complexity of building secure enterprise agents.

What's next for Nexus Enterprise

We plan to expand Nexus Enterprise's MCP toolkit to include automated identity provider (IdP) integration (e.g., Okta, Azure AD), allowing the agent to automatically revoke access tokens based on anomalous Slack behavior.

Built With

  • enterprise
  • mcp
  • model-context-protocol
  • next.js
  • node.js
  • railway
  • security
  • slack
  • slack-api
  • vercel
Share this project:

Updates