AI assistants (MCP)¶

You can connect Innovanet to an AI assistant such as Claude, ChatGPT, Cursor, GitHub Copilot or Gemini. The assistant can then search Innovanet and, with your approval, create records. It uses MCP (Model Context Protocol), an open standard for connecting AI assistants to applications.

The assistant works on your behalf, with your permissions. It sees only what you can see in the portal, and only the modules your company has activated.

What the assistant can do¶

Tool	What it does	Module	Access
`whoami`	Who you are, your company and available modules	–	read
`search_partners`	Finds partners by name, company ID or tax ID	Address book	read
`get_partner`	Partner detail: addresses, contacts, bank accounts, notes	Address book	read
`list_outgoing_invoices`	Issued invoices (text, status, year, customer)	Issued invoices	read
`get_outgoing_invoice`	Invoice detail with lines and payments	Issued invoices	read
`list_bills`	Expense receipts (status, type, period)	Receipts	read
`get_bill`	Receipt detail with VAT breakdown and history	Receipts	read
`create_bill`	Records a new receipt (waits for approval)	Receipts	write
`list_todos`	Your tasks or your team's tasks	Tasks	read
`create_todo`	Creates a task	Tasks	write
`list_projects`	Projects	Projects	read
`get_my_profile`	Your employee profile without sensitive data	–	read
`search_employees`	Finds colleagues by name or e-mail	–	read
`get_employee_profile`	A colleague's profile, as far as you may see it in the portal	–	read
`list_qualifications`	Certificates, trainings, check-ups and their validity	–	read
`list_expiring_qualifications`	Qualifications expiring soon	–	read
`get_attendance_month`	Monthly attendance: fund, balance, overtime, vacation	Attendance	read
`who_is_at_work`	Who is at work right now and who is absent	Attendance	read
`attendance_check_in`	Records check-in (optionally on a project)	Attendance	write
`attendance_check_out`	Records check-out	Attendance	write

Sensitive personal data (IBAN, salary, birth number, ID documents, health insurance, private contact) is never sent over MCP, not even to HR users.

"Using with AI" in the portal¶

In the portal click your name in the top right and choose Using with AI. The page has four tabs:

Guides – step-by-step setup, supported clients, server address and tips on asking.
By module – example questions and tools for every module your company has. Try it opens the tool in the playground with the parameters filled in.
Playground – try the MCP server right in the browser.
FAQ – common questions.

Playground¶

The playground runs exactly the same tools as an AI assistant, but without a token – as the signed-in portal user.

Pick a method: tools/call, tools/list or initialize.
For tools/call choose a tool and fill in its parameters.
Write tools run only after ticking Allow writes. They create a real record.
Click Run. The JSON-RPC request and the server response appear on the right.
A ready curl command lets you test the same call with your own token.

Playground calls are written to the activity log like assistant calls.

Examples by module¶

Module	Example question
Profile and employees	"Who is my manager?" · "Whose safety training expires in 60 days?"
Business partners	"Find the company ID and contacts of supplier Slovnaft."
Issued invoices	"Which invoices are overdue? Sort them by amount."
Receipts	"Which of my receipts are still waiting for approval?" · "Record a lunch receipt of €18.50 from yesterday."
Tasks	"What is open for me today?" · "Create a task: call client ABC by Friday."
Projects	"Which projects are active for customer ABC?"
Attendance	"What is my balance and how many vacation days are left?" · "Who is at work right now?"

Creating a token¶

Open your Profile and in AI assistants (MCP) click New token.
Enter a name, e.g. "Claude on my laptop", so you can recognise the token later.
Choose the access:
- read only – the assistant can search and read, it cannot change anything (recommended),
- read and write – the assistant can also create receipts and tasks.
Set the validity (90 days by default, at most 365).
Copy the token right away. It is shown only once. Innovanet stores only a hash of it, so it cannot show it again.

The token dialog contains ready-to-copy configuration for each AI client.

Connecting an AI client¶

The server URL is https://api.innovanet.com/mcp (the exact URL is shown in your profile). Replace TOKEN with your token.

Claude Code

claude mcp add --transport http innovanet https://api.innovanet.com/mcp --header "Authorization: Bearer TOKEN"

Claude Desktop (claude_desktop_config.json, requires Node.js)

{
  "mcpServers": {
    "innovanet": {
      "command": "npx",
      "args": ["-y", "mcp-remote", "https://api.innovanet.com/mcp", "--header", "Authorization: Bearer TOKEN"]
    }
  }
}

Cursor, Windsurf (mcp.json)

{
  "mcpServers": {
    "innovanet": {
      "url": "https://api.innovanet.com/mcp",
      "headers": { "Authorization": "Bearer TOKEN" }
    }
  }
}

VS Code with GitHub Copilot (.vscode/mcp.json)

{
  "servers": {
    "innovanet": {
      "type": "http",
      "url": "https://api.innovanet.com/mcp",
      "headers": { "Authorization": "Bearer TOKEN" }
    }
  }
}

Gemini CLI (~/.gemini/settings.json)

{
  "mcpServers": {
    "innovanet": {
      "httpUrl": "https://api.innovanet.com/mcp",
      "headers": { "Authorization": "Bearer TOKEN" }
    }
  }
}

ChatGPT and claude.ai (web) – web connectors require OAuth sign-in, which is coming soon. Until then, use one of the clients above.

Security¶

Treat the token like a password. Do not share it or commit it to public repositories.
The assistant has the same permissions as you. It cannot see anything you cannot see in the portal.
A read-only token cannot change or create anything.
No delete tools are available.
Every tool call is written to the company activity log (module mcp).
Your profile shows, for each token, when and from which client it was last used, and how many times.
You can revoke a token at any time. Access ends immediately.
Each token is limited to 120 requests per minute.
Attendance-only users cannot use tokens.

Data and AI providers: Data the assistant requests from Innovanet is processed by your AI assistant's provider (e.g. Anthropic or OpenAI) under your agreement with them. Check that this fits your company's policies before connecting.

Troubleshooting¶

Problem	Solution
Client reports 401	The token is invalid, expired or revoked. Create a new one.
A tool is missing	The module is not activated for your company, or the token is read-only (write tools are hidden).
"This token is read-only"	Create a token with read and write access.
Client reports 429	Request limit exceeded. Wait a minute.

FAQ¶

Can the AI delete anything? No. There are no delete tools. A read-only token cannot change anything.

Which client should I use? Claude Desktop for everyday work; Claude Code, Cursor or VS Code with Copilot for developers.

How do I see what the assistant will see? Open Using with AI → Playground in the portal and run tools/list or whoami.