The AI story

Your flight school,
as a set of verbs an AI can use.

SharedWing publishes a remote MCP server in front of the same API the web and iOS apps use. Connect it to Claude, ChatGPT, or your own agent and it can do exactly what you can do — no more, no less — because it authenticates as you, with your role, against the same permission checks.

Remote MCP · Streamable HTTPOAuth 2.1 + PKCEApp Intents · Siri on iOS 27

sharedwing · connected as Dana R. · role: Admin

Who's more than 60 days past due, and what's the total?

Three members, $2,480 total.
M. Alvarez $1,140 · 74 days
T. Okafor $860 · 68 days
J. Park $480 · 63 days
Read via reports.ar_aging · scope billing:read

Suspend booking for anyone over 60 days.

That's a write on 3 member accounts. Your role allows it; SharedWing needs an explicit confirmation.

Confirm 3 changesReview each

Architecture

One API. One permission model. An MCP server in front of it.

MCP is the open standard — introduced by Anthropic in late 2024 and now supported across Anthropic, OpenAI, Google, Microsoft, and AWS — for letting an assistant call real tools. SharedWing implements it as a remote server over Streamable HTTP, so there is nothing to install and nothing running on your laptop.

1 · Client

Claude, ChatGPT, or your agent

You add mcp.sharedwing.ai as a connector. The client discovers the server's capabilities and auth requirements from its .well-known metadata.

2 · Consent

You sign in and grant scopes

A standard OAuth 2.1 authorization-code flow with PKCE, on SharedWing's own login. You approve a named set of scopes; the client receives a short-lived, audience-bound token — never your password, never a permanent key.

3 · Tools

The server exposes your verbs

The tool list is filtered by your role before the model ever sees it. A member-pilot's Wing has no rates.update; it isn't hidden, it isn't there.

4 · Execution

Same API as the apps

Every tool call lands on the same endpoint the web app calls, and re-runs the same server-side checks: medical, BFR, currency, checkout, balance, squawk state. The MCP layer holds no rules of its own.

Why we didn't build a bot

A chatbot bolted onto a scheduler duplicates the rules and drifts out of sync. MCP inverts it: the model brings the language, SharedWing keeps the logic. If a rule changes in the app on Tuesday, your Wing obeys it on Tuesday.

Stateless, so it stays up

We build on the current spec revision, which moved MCP to stateless operation at the protocol layer. No sticky sessions, no shared session store — the server scales behind a plain load balancer and a restart is invisible to your assistant.

Bring your own client

Because it's the open protocol and not a private integration, anything that speaks MCP works: desktop assistants, IDE agents, or an internal ops agent your treasurer runs on a schedule.

Permissions

Your Wing inherits your role. Nothing more.

Authorization is two gates, not one. The OAuth grant decides which scopes this assistant may ever use; your role in the org decides what those scopes actually reach. Narrowing a grant is always allowed — widening it past your role is not possible.

Capability

Member pilot

Instructor

Maintenance

Private owner

Admin

Book & cancel own reservations

Yes

Book on behalf of a student

Yes

Check out / check in, log Hobbs

Own

Own + student

Yes

Open a squawk

Yes

Ground / return an aircraft to service

Yes

Schedule maintenance blocks

Yes

View maintenance due lists

Yes

Own

Yes

Member invoices, balances, A/R aging

Own

Yes

Manage rates, members, roles, QuickBooks

Yes

Roles are the ones you already assign in SharedWing, and one person can hold more than one — their Wing gets the union. Change a role in the app and the assistant’s tool list changes on its next call.

Tool catalog

Every operation, named and typed.

Reads return structured entities the model can reason over. Writes are explicit, idempotent, and confirmable. This is the launch set — the API surface behind it is the same one our own apps use.

Scheduling

aircraft.searchschedule.availabilityreservation.createreservation.movereservation.cancelinstructor.availability

Dispatch

flight.check_outflight.check_inhobbs.recordpilot.eligibilitycheckout.requirements

Squawks & maintenance

squawk.opensquawk.listsquawk.commentmaintenance.duemaintenance.blockaircraft.groundaircraft.return_to_service

Billing

invoice.listinvoice.getmember.balancepayment.requestreports.ar_agingquickbooks.sync_status

Reporting

reports.utilizationreports.instructor_hoursreports.revenue_by_aircraftmembers.expiring_credentials

Not exposed to any client

Deleting members or flight historyMoving money out of your Stripe accountGrounding by voice aloneReading another org’s data — tokens are org-bound

Siri & the native iOS app

On the ramp, the assistant is already in your pocket.

Our iPhone app is built on Apple's App Intents — the framework behind Siri, Spotlight, Shortcuts, widgets, Control Center, and the Action Button. We model SharedWing’s nouns as App Entities and its verbs as intents, then adopt Apple’s App Schemas so Siri understands what a reservation, an aircraft, or a squawk is and what can be done with it. With gloves on and a headset in one hand, you talk.

Entities

The nouns of your operation

Aircraft, reservations, squawks, invoices, members, and maintenance items are all App Entities with queries behind them. That’s what lets Siri resolve “two-three-quebec” or “my Saturday booking” to a real record instead of a guess.

Intents & schemas

The verbs, with parameters

Each intent declares its parameters and when it’s safe to run. Siri owns the language understanding and the back-and-forth for anything missing; the app does the work and returns a snippet you can act on.

Onscreen awareness

“This one,” “the last one”

Our list rows carry entity identifiers and detail screens publish a user activity, so Siri can resolve what you’re looking at. Standing on the squawk list, “close the second one” means the second one.

Content transfer

Hand it to another app

Entities are exported as Transferable, so “email this squawk to the A&P” or “text my student this reservation” finishes in Mail or Messages without a copy-paste round trip.

The same sentence, four roles

Member pilot

“Hey Siri, book me the Archer Saturday morning.”

Checks your medical, BFR, currency, and balance, offers the two open slots, holds one on confirmation.

Instructor

“Book me and Jordan in a 172 Saturday morning.”

Same sentence, dual-booking path: reserves the aircraft, adds your instructor block, and flags Jordan’s expiring solo endorsement.

Maintenance officer

“Block the Archer Saturday morning — I’m doing the oil change.”

Creates a maintenance block, warns that one member reservation conflicts, and offers to notify them.

Admin

“How did the Archer do Saturday morning?”

Hours flown, revenue, invoice status, and whether it synced to QuickBooks — read-only, no confirmation needed.

9:41

Siri · SharedWing

“Report a squawk on two-three-quebec: nose strut low.”

Resolved entity

N1223Q · Archer II

You checked it in 4 minutes ago

Squawk draft

Nose strut low

Open squawkEdit

Grounding needs a human

Your maintenance officer is notified. Siri can open squawks; only Maintenance or Admin can ground an aircraft.

Also available

Shortcuts · Spotlight · Action Button · Lock-screen widget

Siri's conversational flows require Apple's newer on-device assistant, arriving with iOS 27 on supported iPhones. Until then, the same intents already power Shortcuts, Spotlight, widgets, and the Action Button — and every voice flow has an in-app equivalent that never needs Siri at all.

Safety & trust

Aviation software should be boring about permissions.

Rules live server-side

The model can request anything; the API decides. A request that violates currency, checkout, maintenance, or balance rules is refused with a reason your Wing reads back to you.

Confirmation before writes

Reads are free. Anything that books, bills, cancels, or notifies someone shows you exactly what will change and waits. Bulk writes itemize every record.

Short-lived, scoped tokens

Tokens are bound to one org, one user, one audience, and expire. Revoke a connector from your SharedWing settings and it dies on the next call — no password change required.

Everything is in the audit log

Each action records the actor, the assistant that carried it, the tool name, and the request — so a booking made by voice reads the same in your log as one made by mouse.

Your data isn't training data

SharedWing doesn't train models on your operation. What your chosen AI provider does with a conversation is governed by your agreement with them — pick the provider you already trust.

Admins hold the switch

Talk to your Wing is off until an admin enables it, and can be limited to read-only, to specific roles, or to named members. Everything in the app works without it.

Beta · December 20, 2026

Want your club to be one of the first to talk to its Wing?

We’re onboarding beta orgs alongside the December 20, 2026 release. Tell us which assistant you already use and what you’d ask it first — the tool catalog is still being shaped by those answers. Free for design partners through the pilot program.

00days until launch

Questions we get about the AI

Can the AI do something I'm not allowed to do?

No. It acts as you, with your role, through the same API and the same checks as the app. If you can't ground an aircraft in the app, no phrasing gets your Wing to do it.

Do I have to use Claude or ChatGPT?

Any MCP-capable client works, including one you write yourself. MCP is supported across every major AI vendor — Anthropic (Claude apps, Claude Code), OpenAI (ChatGPT connectors, the Agents SDK, Codex), Google (Gemini and Gemini CLI), Microsoft (Copilot Studio, GitHub Copilot, Windows AI Foundry), and AWS (Bedrock Agents, Kiro) — plus developer clients like Cursor, Zed, Windsurf, Cline, and Goose. We test against Claude and ChatGPT first; our own iOS app talks to the same API directly.

What happens if the model gets it wrong?

A wrong read is a wrong sentence — annoying, not damaging. A wrong write can’t happen silently: writes require confirmation showing the exact records, and every one is reversible from the app and stamped in the audit log.

Is this an extra login for my members?

No. Members connect once with their existing SharedWing account through the standard consent screen, and can disconnect any time. Admins can also disable the connector org-wide.

Does it cost per pilot?

Never. Talk to your Wing is one account-wide add-on at +$10 per aircraft per month,* with a 30-day free trial. Pilots, instructors, and members are always free.