AI access

#What AI access does

One MCP endpoint per workspace, personal access tokens, and a live view of what a connected AI can reach.

• One endpoint, any client. Streamable HTTP, so the AI client you already pay for connects in one command or one config block.
• Personal tokens. Each token maps to one person in one organisation. Every action is attributed to them — never to "the AI".
• Cannot exceed you. A connection carries your permissions and nothing more. Reshaping a role reshapes what AI may do, in the same edit.
• Revoke instantly. One token, all your tokens, or the whole person. Each takes effect immediately, with no window where an open session keeps working.

#Why it exists

Your AI knows everything about software in general and nothing about your business. So you paste context into a prompt, over and over, and it is stale by the time you finish.

Point Claude Code, Cursor, Claude Desktop or claude.ai at your workspace and it reads and writes your real records. Tokens are personal, scoped to one organisation, and revocable in one click.

#Connect a client

1. Generate a personal access token under Account → AI access. It is shown once — store it then.
2. Point your AI client at the workspace endpoint. Claude Code takes one command; Cursor and Claude Desktop take a config block.
3. Ask your AI something only your workspace could answer. Real data back means you are connected.

Full setup for every client, and what to do when it does not connect: Connect your AI.

#Keep it safe

• One token per place it lives. Name them “Laptop”, “Claude Code” — a leak then costs you one reconnection instead of an audit.
• It cannot exceed you. A connection carries your permissions. Reshaping a role reshapes what AI may do, in the same edit.
• Revoke instantly. One token, all of yours, or the whole person — each takes effect immediately.

#On the MCP surface

This is the module that makes every other module reachable by AI. What a connected AI can and cannot do is documented area by area — including the two things it structurally cannot do at all.

#Works with

• Agents. Connect external MCP servers and bring their data home.
• Cloudflare. Your account, your infrastructure — from inside sSystm.
• CRM. Contacts, companies and a weighted pipeline.