Quick start for governed AI access with AI Data Engine
Suggest changes
PDFs
Set up governed AI access with AI Data Engine (AIDE) so that AI clients can search data collections and tag files through the Model Context Protocol (MCP). Prepare the MCP host and Microsoft Entra ID, configure a data collection for MCP, and connect an AI client.
This quick start assumes that you have already connected a data source and that AI Data Engine has scanned and indexed it. The MCP server is deployed together with AI Data Engine. You need a registered DNS domain that is verified in your Microsoft Entra ID tenant. The AIDE cluster host name that you use must be on that domain. You also need permission to register applications and grant consent in Microsoft Entra ID, or you need an Entra ID administrator to complete the Entra ID steps for you.
On the system where you downloaded the AI Data Engine installer, run the ingress script to set up the certificate and the AIDE cluster host name. The host name must be on a domain that is verified in your Entra ID tenant. Then verify the host.
In the Microsoft Entra admin center, register an application for this AI Data Engine instance and define its Application ID URI and scope. Then create the power-user app role and assign it to your users, and add redirect URIs for your AI clients. Record the tenant ID and the application (client) ID.
In NetApp Console, add Microsoft Entra ID as an identity provider in AI Data Engine by using the tenant ID and the application (client) ID. Confirm that the provider is connected.
The All files collection exists by default and includes every scanned file. In NetApp Console, create more collections to make specific volumes available to AI clients through the MCP server.
In NetApp Console, enable the connection to MCP and confirm that the MCP server is running. The connection is disabled by default. Then configure a collection for MCP by selecting the identity provider and the power-user scope, and generate the MCP code snippet for your AI client.
In your AI client, add the snippet and sign in with Microsoft Entra ID. If AI clients can't connect, make sure that Enable connection to MCP is turned on. Confirm that the AI Data Engine tools are available, and then try sample prompts.
The values that you enter in Entra ID, NetApp Console, and your AI client must match exactly. For a full list of what to check, refer to Verify your configuration.