Bidirectional integration: from FlexPortals to other systems and back

FlexPortals can connect not only to other systems, but can also expose its own capabilities in a controlled way to external systems, including AI agents. For us, integration does not mean a single interface: it means purpose-built connectivity to external systems and controlled access to FlexPortals data and business capabilities.

In practice this means we can connect to SAP, webshops, tax authority flows and custom customer systems through XML, JSON, CSV, XLSX and other formats or protocols, while FlexPortals data and business actions can also be opened through GraphQL, MCP and custom API endpoints.

Two-way enterprise integration environment with connected systems and AI connection points
An integration layer that works both inbound and outbound

An integration layer that works both inbound and outbound

FlexPortals can connect to external enterprise systems, data sources and authority platforms, while also publishing its own capabilities in a controlled form. The direction always follows the workflow: sometimes we receive data, sometimes we pass on data or trigger actions.

Connection to existing systems

FlexPortals can be integrated with other enterprise solutions such as SAP, webshops, tax authority connections or custom customer systems. The goal is not only data exchange, but alignment of the full business process.

Each integration can be tailored to the operating need: periodic synchronization, event-driven handoff or a live operational connection between systems.

Flexible format handling

Connectivity is not limited to one technology. XML, JSON, CSV, XLSX and other industry- or partner-specific formats can all be handled, depending on the structure and transfer method supported on the other side.

This is especially important in environments where partners, customers or authorities all expect different interfaces.

Data exchange aligned to workflows

We do not only move records between systems, we map the whole process: where the data originates, where validation happens, which system owns the step and how FlexPortals should react.

That keeps integration from becoming a technical add-on and turns it into a transparent, maintainable layer embedded in daily operations.

Controlled exposure of FlexPortals capabilities

Controlled exposure of FlexPortals capabilities

Our current development direction supports not only integration into FlexPortals, but the safe publication of its own data, queries and business actions toward AI systems and external applications.

GraphQL

We made the full data set available without breaking the FlexPortals permission model at operation, object and data level. We do not open a parallel access channel, but a query layer built on the existing authorization logic.

It can be configured in detail what is available through GraphQL: which objects can be published, which fields are visible and under what naming. Native Flex object and field names do not have to be exposed.

Virtual fields can also be created to aggregate values from multiple data points or related objects. Queries can be cached, invalidation rules can be configured, and a GraphQL query can even be mapped to a simple API call using only a query identifier.

MCP server

The system can publish MCP tools that expose FlexPortals capabilities to AI systems. This allows an AI client not only to answer in text, but to call controlled system capabilities as well.

Within our MCP framework, business logic, GraphQL query results or custom business processes can be published quickly. The focus is not unlimited automation, but ensuring AI can access only approved and reviewable actions.

Only business workflows that run under full Flex system control can be executed. Security, permission handling, logging and quality criteria are taken into account both in tool design and at runtime.

AI-assisted development control

We are continuously expanding the AI-supported development of the system. We define the expectations and guardrails that allow AI tools to support consistent enhancement of the existing platform without giving up control.

Where current standards allow it, we place prompts and development guidelines that support the creation of well-contextualized subagents. This makes even subagent teams steerable, reviewable and aligned with the FlexPortals architecture.

This approach is especially important in integration work: AI can accelerate delivery, but the boundaries of published capabilities, data access and quality expectations are still set by system rules.

Controlled exposure of FlexPortals capabilities

Why does the two-way view matter?

Enterprise integration works best when we can define not only how data enters FlexPortals, but also how capabilities, data and actions can be safely opened outward. Controlled two-way connectivity ensures that integrations do not bypass existing business, permission and quality expectations.

01

Controlled data exposure

The GraphQL layer publishes only what the system allows, so external queries and AI processes remain within FlexPortals data protection and authorization boundaries.

02

Business capabilities as tools

Through the MCP server, system actions can become available to AI tools as well, but only in predefined, auditable and safely executable form.

03

Development under consistent rules

AI support in development does not mean scattered code generation, but a delivery process guided by context, prompts and review.