Skip to main content
An AI assistant can make mistakes. VEXiON is built so that the costly mistakes are caught before they reach a customer. This page explains what an assistant can do, what it can never do, and how to keep control. To connect an assistant first, see AI assistants (MCP).

​
What an assistant can do

What it can do depends on the access level you chose. Name the card, location or dates when you can. “Transactions at the Old Town location last week” gives a more exact answer than “recent transactions”. If you ask for something outside the access you gave, the assistant tells you it needs more access. You can raise the level with Change access. Each business is checked on its own. A tool works in a business only if the access of that business allows it. If you ask for something in a business that does not allow it, the assistant refuses and names the business. The full list of what an assistant can do is on the technical tools page.

​
What it can never do

These stay out of reach whatever access you choose. You do them yourself in the dashboard:
  • billing, plan changes and invoices
  • team members and their roles
  • API keys
  • webhooks
  • gift card balances, gift card refunds and money adjustments
  • changing a customer’s marketing consent
  • deleting cards or customers
  • changing the definitions of custom fields

​
Messages to customers need your confirmation

Three actions never happen on the first request:
  • sending a push notification to customers’ lock screens
  • emailing one customer the link to their card
  • reversing a transaction
Each works in two steps.
1

Preview

The assistant asks VEXiON to check the request. VEXiON answers with a preview: what would be sent or changed. For a notification that is the text and the audience filters. The number of customers is not shown, because it is not known before sending. Nothing has happened yet.
2

You decide

The assistant shows you the preview. Read it. If it is not what you want, say so and nothing is sent.
3

Confirm

When you agree, the assistant confirms. VEXiON then does exactly what the preview showed.
A confirmation works once, only for exactly the same details, and only for 10 minutes. It is tied to one business: a confirmation for one business never works for another. If the assistant changes the text or the audience after the preview, it must show you a new preview.
A push notification cannot be recalled once it is sent. Read the text and the audience in the preview before you say yes. Keep tool approval turned on in your AI app for every action that sends or changes data.

​
Notes on notifications

  • A notification has one language. To reach customers who speak different languages, the assistant sends one notification per language. You confirm each one.
  • You can schedule a notification up to 90 days ahead. You can cancel it until one minute before it is sent.
  • VEXiON allows 1 notification per minute and 50 per day for your business, shared by every connected AI app.
  • The message goes out in your business’s name to the members of your own card. You are responsible for the content and for the direct marketing rules that apply to you. Promote only your own goods and services, never offers of third parties. Members who turned off marketing messages for that card do not receive it.

​
Other actions that change what customers see

Two actions do not ask for confirmation, so read what the assistant proposes before you agree:
  • Creating a card makes it live at once. Customers can sign up straight away.
  • Changing a card or a location updates every pass that is already installed.
Recording a transaction also updates the customer’s wallet pass and can start your business’s automatic messages, for example when a reward is reached.

​
Where your data goes

The assistant does not copy your whole account. It asks VEXiON a question, VEXiON answers, and only that answer goes to the AI app. The company behind the AI app (for example Anthropic or OpenAI) sees your messages and the answers it received. That can include customer names, emails and phone numbers if you asked for them. This is personal data. The AI company handles it under its own terms, not VEXiON’s. Check its data and retention settings. Reports return counts, not personal details. If the assistant does not need to see individual customers, give it Read access only to the areas you need, or leave Customers on None under Customize.

​
How fast access ends

  • When you Revoke an app in Settings → Developer → AI assistants, it loses access to that business right away. Other businesses of the app keep their access.
  • When you lower the access with Change access, the lower level applies at once.
  • When someone stops being an admin, their assistants stop in that business within about 60 seconds.
To stop an assistant at once, revoke the app in AI assistants.

​
Stay in control

1

Start with Read only

Add write access only when you need it.
2

Connect only apps you trust

Use well-known AI apps. VEXiON does not check what an app does with your data.
3

Read every preview

Check the text and the audience before you confirm.
4

Keep tool approval turned on in your AI app

Most AI apps can ask you to approve each action before it runs. Keep this on, especially for any action that sends a message or changes data. It is a second check on top of the VEXiON preview. It matters because the assistant also reads text typed by customers, such as names, and a stranger could try to give it instructions.
5

Check the list now and then

Open Settings → Developer → AI assistants and Revoke apps nobody uses.
For the technical details, see Tools and Permissions and security.

​
Questions

No. VEXiON runs the server. You only add its address, https://api.vexioncards.one/mcp, to your AI app.
No. You sign in on a VEXiON page. The app gets a sign-in for the businesses you chose, each with the access level you chose. You can remove it at any time.
VEXiON PRO. The connect page shows “Needs the PRO plan” for a business that is not on it. Your AI app may have its own plan and price. VEXiON does not control that.
Only admins can. Managers and scanner users cannot connect an assistant. See who can connect.
Yes. One connection can cover up to 50 businesses, each with its own access level. On the VEXiON page you tick the businesses you want. To add one later, connect the app again and click Add another business. Ask about a business by name, for example “visits at Brew Haven last week”. See Connect an assistant.
Yes. Open Settings → Developer → AI assistants and click Change access on the app. Only the business you have open changes. Or remove the app there. See Change access.
Only the person who connected the app can give it more access. Any other admin of the business can only lower it. If you are not that person and the app needs more access, ask them to raise it.

​
When something does not work

None of your businesses qualify. Check that you are an admin of the business and that it is on VEXiON PRO. Ask an admin of the business to connect if you are not one.
The reason is shown next to the business name:
  • Only admins can connect AI apps: ask an admin to connect.
  • Needs the PRO plan: the business is not on VEXiON PRO. See Plans.
  • Paused, Locked, Cancelled or Not active yet: the assistant works only on an active business. Resume or activate the business first.
Your sign-in is missing or has expired. Reconnect the VEXiON connector in your AI app and sign in again. In Claude Code, run /mcp and choose vexion.
Click Sign in again. Nothing was authorized, so start the connection again from your AI app if needed.
Access follows your role and plan live. It ends within about 60 seconds if you stop being an admin, if the business leaves VEXiON PRO, or if the business is paused, locked or cancelled. Only that business drops out. The other businesses of the app keep working. Ask the assistant to list your businesses: it shows which ones are unavailable and why. A paused business stays in the list, but the assistant gets a message that the account is paused. Check your role, your plan and Settings → Developer → AI assistants. If the app was revoked, see the next answer.
Someone removed the app in AI assistants. Remove the connector in your AI app, add it again, and choose the access level once more. Connecting again lifts the revocation.
The assistant cannot see what you did not allow. Open Settings → Developer → AI assistants, click Change access and choose Read and write, or allow that area under Customize. Then start a new chat in your AI app. In Claude, also check that VEXiON is switched on for the conversation: click + at the lower left of the chat, then Connectors. If you are not the person who connected the app, you can only lower the access. Ask that person to raise it.
The AI app loads its tool list when a chat starts. Start a new chat (in Claude or ChatGPT) and the new tool appears. A lower level applies at once, so a tool you took away is refused right away.
When an app is connected to several businesses, the assistant uses the business you name, for example “visits at Brew Haven last week”. If it is not sure, it asks you. Tell it which one. Each answer starts with the business name, so you can check it picked the right one. Only an old connection without a stored choice asks you to pick one business first. To fix that, connect the app again and choose the businesses on the VEXiON page.
You authorized the app, but it has not made its first request yet. Go back to your AI app and ask a question. If you do not want the app, click Decline. If the app never finishes connecting, the entry disappears after about 10 minutes.
A confirmation works once, for 10 minutes, and only for the exact details in the preview. Ask the assistant to make a new preview, check it, and confirm again.
Ask the assistant to check before it tries again. For example: “List the notifications sent today.” Open Notifications in the dashboard to see them as well. Do not ask it to send again until you know.
Very big reports stop after 30 seconds or 3,000 rows. The assistant should continue and add the counts together. You can also ask for a shorter period, for example one month at a time.
The assistant asked for too much at once. Wait a minute and ask again. Big reports use many requests, so leave a minute between them. Notifications are limited to 1 per minute and 50 per day for your business.
Check that the address is exactly https://api.vexioncards.one/mcp and that your AI app supports Streamable HTTP MCP servers. In ChatGPT, an admin of your workspace may need to allow custom MCP servers first. If your network is managed by your company, ask your IT team to allow api.vexioncards.one. Restart the AI app after you change its settings.
Still stuck? Contact VEXiON support from the email address of your account. Tell us the time of the problem and the message you saw. Never send a password or an API key.

​
Next steps

Connect an assistant

The three steps to connect and how to remove an app.