Brave Leo AI with Real-Time Search & MCP vs Glean Agentic Actions

“The primitive here is MCP client support baked into the browser sidebar — not a plugin, not an extension, the browser itself speaks MCP. The DX bet is that developers already have MCP servers running locally (which, post-Claude Desktop explosion, a surprising number do), so Brave is a zero-config client for them. The first-10-minutes test actually holds up: point Leo at your local MCP server, no API keys, no separate app install. The weekend-alternative comparison is real though — Claude Desktop does this already and has a bigger ecosystem. What earns the ship is that this is infrastructure-level integration, not a feature flag, and the real-time search grounding means you're not stuck with stale context.”

“The primitive here is an enterprise-permissioned action layer sitting on top of pre-built SaaS connectors — and that's actually non-trivial to build. The DX bet is that enterprises get value without writing glue code, which is the right call for this buyer. The approval workflow for sensitive ops is the specific technical decision that earns a ship: it's the thing that makes an IT admin actually allow agents to write to Salesforce instead of just read from it. What I want to see is a proper API surface so platform teams can register custom actions without waiting on Glean's connector roadmap — without that, you're locked into whatever integrations they've shipped.”

“Category: browser-native AI assistant with MCP support. Direct competitor is Claude Desktop for MCP workflows and Arc with its AI features for browser-integrated AI. The specific scenario where this breaks is enterprise MCP server setups — Leo's permission model and how it handles remote MCP servers with sensitive credentials is not clearly documented, and that will stop adoption dead in any team environment. What kills this in 12 months isn't a competitor — it's Chrome shipping Gemini with MCP support natively, which Google has every incentive to do given their MCP investments. What earns the ship anyway is that Brave has real distribution (millions of daily users), real-time search is table stakes that Leo was missing, and MCP support here is genuinely first-mover for a browser. To be wrong about the ship: Google has to ship Chrome AI with MCP before Brave builds meaningful workflow lock-in.”

“Direct competitors are Moveworks and ServiceNow's Now Assist, and both have been doing agentic actions in enterprise for longer. Glean's advantage is that its search index is already the connective tissue for many large orgs, so adding action execution is a natural extension rather than a cold-start problem — that's a real differentiator, not marketing. The scenario where this breaks is multi-step actions across three or more systems where context needs to persist mid-chain; every enterprise agent tool I've seen collapse on that specific workflow. What kills this in 12 months: Salesforce and Atlassian ship native cross-tool agents to their existing enterprise customers and Glean's connector advantage evaporates overnight.”

“The thesis: in 2-3 years the browser is the primary MCP client for most non-developer users, because it's the ambient computing surface they already live in — not a dedicated app, not a terminal. This is a falsifiable bet that requires MCP adoption to continue accelerating outside of developer toolchains and into consumer workflows. The second-order effect that isn't obvious: if Leo becomes a credible MCP client, Brave gains leverage over which MCP servers get adopted, because discoverability flows through the browser. The trend line is MCP standardization as the USB-C of AI tool connectivity — Brave is early here, not on-time, and the window before Chrome absorbs this is maybe 18 months. The future state where this is infrastructure: Leo is the default orchestration layer for personal productivity MCP servers the way the browser is the default HTTP client.”

“The job-to-be-done here is actually two separate jobs stapled together: 'answer questions with current information' (real-time search) and 'automate tasks via connected tools' (MCP). That 'and' is a focus problem — neither job is done completely enough to replace its current solution. Onboarding for the MCP piece requires the user to already know what an MCP server is, find one, configure the connection, and understand what Leo can do with it — that's not under 2 minutes, that's a tutorial for a developer audience. Real-time search grounding is the more complete feature and should have been the standalone launch. What would need to change: separate the two capabilities, get real-time search to reliably beat Perplexity for browser-based research, and build an MCP server directory inside the browser so non-developers can actually use the tool-calling feature.”

“The job-to-be-done is clear and single-threaded: let an employee complete a cross-system work task through one conversational interface instead of tabbing across five SaaS tools. The approval workflow layer is the product opinion that earns this a ship — it signals the team understands that 'autonomous agent' without human checkpoints is a non-starter for enterprise buyers, and they've built the right escape valve. The completeness gap is real though: if your workflow touches a SaaS tool Glean doesn't have a connector for yet, you're still dual-wielding, which means adoption will stall at the edges of the connector catalog. The product needs a clear public roadmap for connector coverage before I'd call this complete.”

“The buyer here is the CIO or VP of IT, and the budget is enterprise productivity or digital transformation — this is not a bottom-up PLG play, which is fine because Glean has never pretended it was. The moat is real and compounding: Glean already owns the permissions model and the search index across these enterprises, so adding action execution doesn't require re-selling the security and compliance story from scratch — that's genuine switching cost. The risk is that Glean's connector library has to keep pace with enterprise SaaS sprawl, and the moment a competitor ships better Workday or SAP coverage, the expansion story stalls. The specific business decision that makes this viable is building actions on top of an existing trust relationship rather than asking enterprises to grant write permissions to a new vendor.”