AI assistants (MCP)

You can connect Innovanet to an AI assistant such as Claude, ChatGPT, Cursor, GitHub Copilot or Gemini. The assistant can then search Innovanet and, with your approval, create records. It uses MCP (Model Context Protocol), an open standard for connecting AI assistants to applications.

The assistant works on your behalf, with your permissions. It sees only what you can see in the portal, and only the modules your company has activated.

What the assistant can do

Tool	What it does	Module	Access
whoami	Who you are, your company and available modules	–	read
search_partners	Finds partners by name, company ID or tax ID	Address book	read
get_partner	Partner detail: addresses, contacts, bank accounts, notes	Address book	read
list_outgoing_invoices	Issued invoices (text, status, year, customer)	Issued invoices	read
get_outgoing_invoice	Invoice detail with lines and payments	Issued invoices	read
list_bills	Expense receipts (status, type, period)	Receipts	read
get_bill	Receipt detail with VAT breakdown and history	Receipts	read
create_bill	Records a new receipt (waits for approval)	Receipts	write
list_todos	Your tasks or your team's tasks	Tasks	read
create_todo	Creates a task	Tasks	write
list_projects	Projects	Projects	read

Example requests:

• "Which invoices for ABC Ltd. are overdue?"
• "Find the company ID and contacts of supplier Slovnaft."
• "Record a lunch receipt of €18.50 from yesterday."
• "Create a task for me: call the client by Friday."

Creating a token

1. Open your Profile and in AI assistants (MCP) click New token.
2. Enter a name, e.g. "Claude on my laptop", so you can recognise the token later.
3. Choose the access:
   • read only – the assistant can search and read, it cannot change anything (recommended),
   • read and write – the assistant can also create receipts and tasks.
4. Set the validity (90 days by default, at most 365).
5. Copy the token right away. It is shown only once. Innovanet stores only a hash of it, so it cannot show it again.

The token dialog contains ready-to-copy configuration for each AI client.

Connecting an AI client

The server URL is https://api.innovanet.com/mcp (the exact URL is shown in your profile). Replace TOKEN with your token.

Claude Code

claude mcp add --transport http innovanet https://api.innovanet.com/mcp --header "Authorization: Bearer TOKEN"

Claude Desktop (claude_desktop_config.json, requires Node.js)

{
  "mcpServers": {
    "innovanet": {
      "command": "npx",
      "args": ["-y", "mcp-remote", "https://api.innovanet.com/mcp", "--header", "Authorization: Bearer TOKEN"]
    }
  }
}

Cursor, Windsurf (mcp.json)

{
  "mcpServers": {
    "innovanet": {
      "url": "https://api.innovanet.com/mcp",
      "headers": { "Authorization": "Bearer TOKEN" }
    }
  }
}

VS Code with GitHub Copilot (.vscode/mcp.json)

{
  "servers": {
    "innovanet": {
      "type": "http",
      "url": "https://api.innovanet.com/mcp",
      "headers": { "Authorization": "Bearer TOKEN" }
    }
  }
}

Gemini CLI (~/.gemini/settings.json)

{
  "mcpServers": {
    "innovanet": {
      "httpUrl": "https://api.innovanet.com/mcp",
      "headers": { "Authorization": "Bearer TOKEN" }
    }
  }
}

ChatGPT and claude.ai (web) – web connectors require OAuth sign-in, which is coming soon. Until then, use one of the clients above.

Security

• Treat the token like a password. Do not share it or commit it to public repositories.
• The assistant has the same permissions as you. It cannot see anything you cannot see in the portal.
• A read-only token cannot change or create anything.
• No delete tools are available.
• Every tool call is written to the company activity log (module mcp).
• Your profile shows, for each token, when and from which client it was last used, and how many times.
• You can revoke a token at any time. Access ends immediately.
• Each token is limited to 120 requests per minute.
• Attendance-only users cannot use tokens.

Data and AI providers: Data the assistant requests from Innovanet is processed by your AI assistant's provider (e.g. Anthropic or OpenAI) under your agreement with them. Check that this fits your company's policies before connecting.

Troubleshooting

Problem	Solution
Client reports 401	The token is invalid, expired or revoked. Create a new one.
A tool is missing	The module is not activated for your company, or the token is read-only (write tools are hidden).
"This token is read-only"	Create a token with read and write access.
Client reports 429	Request limit exceeded. Wait a minute.