# GTM Assistant: Claude Plugin + Secure Broker

> Claude inside the sales workflow, with credentials that never leave the vault.

**Status:** Production  
**Client:** An enterprise sales org (details confidential)

## Problem

Putting AI into a sales workflow usually means leaking API credentials into client tooling.

## What it does

A production Claude plugin that puts prospecting, lead-qualification, and pipeline workflows directly in the assistant for an enterprise sales org. It's backed by a serverless broker that proxies CRM and data-enrichment APIs so credentials never ship inside the plugin, with per-rep authorization via an allowlist, full audit logging, and CI security gates.

## Measured results

- **0** credentials in the client — Brokered via Key Vault Managed Identity.
- **117** automated tests

## Stack

Claude plugin, MCP, Azure Functions, Azure Key Vault (Managed Identity), CRM APIs, GitHub Actions OIDC

## Topics

AI, Agents, Security, Cloud

---

Part of the proof-of-work portfolio of Michael Wahl — VP, Software Engineering & AI Enablement.

- Canonical project page: https://connect.michaelwahl.org/project/gtm-cowork-plugin
- Full professional profile: https://connect.michaelwahl.org/
- Machine-readable context: https://connect.michaelwahl.org/llms.txt