FULLSIX,
MENTAH logo
BETC Fullsix

MENTAH

The sovereign RAG platform that connects Claude to real agency and client-project context.

5 toolsfixed MCP surface
hybrid RAGdense + sparse
BSO Europedata sovereignty

MENTAH connects Claude (Web, Desktop, Code) to live agency sources - GitLab, Notion, Box - via an MCP (Model Context Protocol) server hosted on BSO in Europe. Consultants get contextualised answers about ongoing projects, source code, specifications and internal references. Confidential data stays on BETC Fullsix infrastructure; Claude accesses it read-only, through role-scoped extracts, for the duration of the session.

Business context

Over 46,000 GitLab chunks and 4,000 Notion chunks indexed in near-real time. MENTAH knows the state of branches, open MRs, Notion specs and Box deliverables - and responds in seconds with cited sources.

Data sovereignty

Confidential documents stay on BSO in Europe. Claude queries MENTAH and receives only the relevant extracts for the duration of the session - never the raw file, never stored at Anthropic. The same principle as a secure reading room.

Fixed surface

5 stable MCP tools. A single write tool (create_merge_request) with a strict allowlist on modifiable file paths. Every call is logged on BSO. The attack surface is kept to a minimum.

The 5 MCP tools

The MENTAH surface is intentionally small and stable. The 5 MCP tools do not change between versions:

  • search - hybrid dense+sparse search (BGE-M3, RRF fusion) across the full agency corpus.
  • list_sources - per-source statistics (GitLab, Notion, Box) to assess indexing coverage.
  • project_context - full context for a project: README, active branches, open MRs, linked Notion pages.
  • propose_fix - retrieval + analysis of an issue by Claude, read-only.
  • create_merge_request - the only write tool. Strict allowlist on permitted paths: sensitive files (.gitlab-ci.yml, Dockerfile*, .env*, *.pem, *.key) are blocked.

Technical architecture

MENTAH runs on a dedicated BSO Kubernetes cluster, namespace betcfullsix-mentah-ai. The ingestion pipeline runs overnight (GitLab at 02:00 UTC, Notion at 03:00 UTC) and feeds a Qdrant collection (mentah_v2) with dense (BGE-M3, 1024 dimensions) and sparse (IDF) vectors. Hybrid search merges both vector types via RRF (Reciprocal Rank Fusion), yielding higher precision than either method alone.

CIO reassurance

  • Data on BSO Europe: no document transits through Anthropic. Claude receives only the contextually relevant extracts, role-scoped, for the duration of the session.
  • Azure AD / Keycloak auth: same credentials as Teams and Outlook. Disabling an AD account immediately cuts MENTAH access.
  • Rights carried by metadata: each indexed chunk carries its roles_allowed. Claude returns only what the user is authorised to see - Qdrant server-side filtering, not Claude-side.
  • Full audit logging: every MCP call is logged on BSO (who, what, when). Write actions are also traced.
  • Anthropic Enterprise option: for projects requiring contractual zero-retention, migrating from Claude Team to Enterprise does not affect MENTAH - only the Anthropic contract changes.
MENTAH architecture - internal technical documentation