All three big labs ship small-business agents, and SMB software suites face a bundled rival

The connector idea is the weaker of the two. Duet and Dots each ship thousands of connectors, OpenAI runs its own connector review, and Intuit is building a first-party QuickBooks MCP. Composio, CData and free open-source servers already offer scoped accounting connectors. A third party selling "certified" connectors to vertical vendors would be squeezed from both sides. Big vendors build their own, and labs or Composio-style platforms cover the long tail. The only plausible opening is to sell to small vertical vendors, such as niche booking, salon, trades or clinic software, who lack the engineering capacity to build and keep listings live across three lab marketplaces at once. Even that looks like a services business more than a durable product. The data guard idea has a clearer opening. Enterprise MCP gateways with DLP exist, but none I found is packaged for accountants or MSPs managing many small-business clients. None is aimed at consumer-grade lab agents like Duet, Muse and Dots rather than corporate Copilot tenants. The Muse leak, about 7,000 exposed chats with loan and financial documents, plus the Marketplace address incident, make the pain concrete. AvePoint's report that MSPs see governance as the top obstacle shows the channel wants something to sell. The risks are that each lab is adding its own safeguards (Duet's approval gates and sensitive-data classifier, Meta suspending sharing), and that a proxy layer may not be able to sit between a consumer agent and its built-in connectors at all. A winning entrant would probably need to be a multi-tenant console for accountants and MSPs. It would set per-client, per-record scopes once and push them down to QuickBooks, Gusto and similar systems through scoped credentials. It would also keep a tenant-specific audit trail across all three labs' agents. That cross-lab, per-client policy and evidence layer is the part I found no one shipping today.

• Anthropic Claude Duet (built-in safeguards)

  Launched as a research preview on October 21, 2026, aimed at small business owners. It reaches more than 6,000 marketplace connectors, including QuickBooks, Gusto, HubSpot and Shopify. Anthropic's own controls already cover approval gates before sending, paying, signing or deleting, a design where Duet never sees tokens, and a classifier that blocks card and government ID numbers. That takes over part of what a data guard would do.

• OpenAI Dots plugin ecosystem

  Launched September 29, 2026, with 4,000+ apps. Any business can build a connector and submit it for OpenAI review. Because OpenAI runs the certification for Dots, a third-party 'certified connector' has to be worth something on top of the lab's own review.

• Meta Muse sharing leak (the demand signal)

  About 7,000 shared Muse chats were publicly reachable, including small-business loan and financial documents. Meta suspended sharing on October 20. A separate incident in September involved Muse revealing a Marketplace seller's home address. This confirms the pain is real, but Meta is patching it on its own side.

• Intuit QuickBooks MCP server (early preview)

  Intuit has its own QuickBooks Online MCP server in early preview. Large vertical vendors are likely to build their own lab-agent connectors rather than buy them.

• Composio

  Managed connector infrastructure with 1,000+ connectors, offered as MCP servers for QuickBooks, Wave, FreshBooks, FreeAgent and Moneybird. It is a direct substitute for agent-ready accounting connectors.

• CData Connect AI

  A third-party MCP layer in front of QuickBooks Online and Desktop. It advertises approved-operation allowlists, RBAC, masking and request logging, which overlaps with both the guard idea and the connector idea.

• Numeric QuickBooks MCP

  A commercial QuickBooks MCP for accountants and the month-end close, with write access optional. It already targets the accountant buyer.

• Maxio MCP server governance

  An example of a SaaS vendor shipping its own scoped, read-only, role-based MCP access. Vertical vendors can do this themselves.

• Enterprise MCP gateways with DLP (Nightfall, ManageEngine, PointGuard AI, Datawiza, Snowflake Cortex AI Gateway)

  Mature gateway-level DLP and policy for agent tool calls, sold to enterprise security teams. I found nothing packaged for small businesses or multi-tenant MSPs.

• AvePoint MSP agentic AI governance

  Pitches agent governance as a recurring MSP service across tenants, mostly in the Microsoft/Copilot world. Dope.security and ITarian offer per-client shadow-AI detection and multi-tenant AI management for MSPs.

• Open-source QuickBooks MCP servers on Glama

  Several free community QuickBooks Online MCP servers, some with a multi-tenant gateway mode. This pushes basic connectors toward commodity.

Checked 2026-10-22