> ## Documentation Index > Fetch the complete documentation index at: https://vexioncards.mintlify.site/llms.txt > Use this file to discover all available pages before exploring further. # AI assistants: safety and questions > What a connected AI assistant can and cannot do in your VEXiON business, why messages to customers need your confirmation, and what to do when something does not work. An AI assistant can make mistakes. VEXiON is built so that the costly mistakes are caught before they reach a customer. This page explains what an assistant can do, what it can never do, and how to keep control. To connect an assistant first, see [AI assistants (MCP)](https://vexioncards.mintlify.site/knowledge-base/developer-ai-assistants.md). ## What an assistant can do What it can do depends on the [access level](https://vexioncards.mintlify.site/knowledge-base/developer-ai-assistants.md#the-three-access-levels) you chose. | You ask | What the assistant does | Access it needs | | - | - | - | | "How many new customers did we get each week in September?" | Counts sign-ups and wallet installs and groups them for you | Read | | "Compare transactions this month to last month at the Main Street location." | Builds a report for both periods and compares them | Read | | "Find the customer with email [anna@example.com](mailto:anna@example.com) and tell me her stamps." | Looks up the customer and reads the card balance and recent transactions | Read | | "What notifications did we send last week and did they arrive?" | Lists sent notifications and delivery status | Read | | "Add one stamp to Anna's card." | Records a transaction for her | Write | | "Create a stamp card for my cafe." | Drafts the card, shows you the design and creates it | Write | | "Change the push message of the Old Town location." | Edits the location | Write | | "Send everyone with the coffee card: Double stamps this Friday!" | Shows a preview, then sends after you confirm | Send messages | | "Email Tomas his card link." | Shows a preview, then emails the link after you confirm | Write | Name the card, location or dates when you can. "Transactions at the Old Town location last week" gives a more exact answer than "recent transactions". If you ask for something outside the access you gave, the assistant tells you it needs more access. You can raise the level with [Change access](https://vexioncards.mintlify.site/knowledge-base/developer-ai-assistants.md#change-access). Each business is checked on its own. A tool works in a business only if the access of that business allows it. If you ask for something in a business that does not allow it, the assistant refuses and names the business. The full list of what an assistant can do is on the technical [tools page](https://vexioncards.mintlify.site/ai/mcp-tools.md). ## What it can never do These stay out of reach whatever access you choose. You do them yourself in the dashboard: * billing, plan changes and invoices * team members and their roles * API keys * webhooks * gift card balances, gift card refunds and money adjustments * changing a customer's marketing consent * deleting cards or customers * changing the definitions of custom fields ## Messages to customers need your confirmation Three actions never happen on the first request: * sending a push notification to customers' lock screens * emailing one customer the link to their card * reversing a transaction Each works in two steps. **1. Preview** The assistant asks VEXiON to check the request. VEXiON answers with a preview: what would be sent or changed. For a notification that is the text and the audience filters. The number of customers is not shown, because it is not known before sending. Nothing has happened yet. **2. You decide** The assistant shows you the preview. Read it. If it is not what you want, say so and nothing is sent. **3. Confirm** When you agree, the assistant confirms. VEXiON then does exactly what the preview showed. A confirmation works once, only for exactly the same details, and only for 10 minutes. It is tied to one business: a confirmation for one business never works for another. If the assistant changes the text or the audience after the preview, it must show you a new preview. > [!WARNING] > > A push notification cannot be recalled once it is sent. Read the text and the audience in the preview before you say yes. Keep tool approval turned on in your AI app for every action that sends or changes data. ### Notes on notifications * A notification has **one language**. To reach customers who speak different languages, the assistant sends one notification per language. You confirm each one. * You can schedule a notification up to 90 days ahead. You can cancel it until one minute before it is sent. * VEXiON allows 1 notification per minute and 50 per day for your business, shared by every connected AI app. * The message goes out in your business's name to the members of your own card. You are responsible for the content and for the direct marketing rules that apply to you. Promote only your own goods and services, never offers of third parties. Members who turned off marketing messages for that card do not receive it. ### Other actions that change what customers see Two actions do not ask for confirmation, so read what the assistant proposes before you agree: * Creating a card makes it **live at once**. Customers can sign up straight away. * Changing a card or a location updates **every pass that is already installed**. Recording a transaction also updates the customer's wallet pass and can start your business's automatic messages, for example when a reward is reached. ## Where your data goes The assistant does not copy your whole account. It asks VEXiON a question, VEXiON answers, and only that answer goes to the AI app. The company behind the AI app (for example Anthropic or OpenAI) sees your messages and the answers it received. That can include customer names, emails and phone numbers if you asked for them. This is personal data. The AI company handles it under its own terms, not VEXiON's. Check its data and retention settings. Reports return counts, not personal details. If the assistant does not need to see individual customers, give it **Read** access only to the areas you need, or leave Customers on **None** under **Customize**. ## How fast access ends * When you **Revoke** an app in **Settings → Developer → AI assistants**, it loses access to that business **right away**. Other businesses of the app keep their access. * When you lower the access with **Change access**, the lower level applies **at once**. * When someone stops being an admin, their assistants stop in that business within about **60 seconds**. To stop an assistant at once, revoke the app in **AI assistants**. ## Stay in control **1. Start with Read only** Add write access only when you need it. **2. Connect only apps you trust** Use well-known AI apps. VEXiON does not check what an app does with your data. **3. Read every preview** Check the text and the audience before you confirm. **4. Keep tool approval turned on in your AI app** Most AI apps can ask you to approve each action before it runs. Keep this on, especially for any action that sends a message or changes data. It is a second check on top of the VEXiON preview. It matters because the assistant also reads text typed by customers, such as names, and a stranger could try to give it instructions. **5. Check the list now and then** Open **Settings → Developer → AI assistants** and **Revoke** apps nobody uses. For the technical details, see [Tools](https://vexioncards.mintlify.site/ai/mcp-tools.md) and [Permissions and security](https://vexioncards.mintlify.site/ai/mcp-permissions.md). ## Questions > [accordion] Do I need to install anything? > > No. VEXiON runs the server. You only add its address, `https://api.vexioncards.one/mcp`, to your AI app. > [accordion] Does the AI app get my VEXiON password? > > No. You sign in on a VEXiON page. The app gets a sign-in for the businesses you chose, each with the access level you chose. You can remove it at any time. > [accordion] Which plan do I need? > > VEXiON PRO. The connect page shows "Needs the PRO plan" for a business that is not on it. Your AI app may have its own plan and price. VEXiON does not control that. > [accordion] Can my staff connect an assistant? > > Only admins can. Managers and scanner users cannot connect an assistant. See [who can connect](https://vexioncards.mintlify.site/knowledge-base/developer-ai-assistants.md#who-can-connect). > [accordion] Can I connect several businesses? > > Yes. One connection can cover up to 50 businesses, each with its own access level. On the VEXiON page you tick the businesses you want. To add one later, connect the app again and click **Add another business**. Ask about a business by name, for example "visits at Brew Haven last week". See [Connect an assistant](https://vexioncards.mintlify.site/knowledge-base/developer-ai-assistants.md#connect-an-assistant). > [accordion] Can I change my mind about the access level? > > Yes. Open **Settings → Developer → AI assistants** and click **Change access** on the app. Only the business you have open changes. Or remove the app there. See [Change access](https://vexioncards.mintlify.site/knowledge-base/developer-ai-assistants.md#change-access). > [accordion] Why can't I raise the access of an app someone else connected? > > Only the person who connected the app can give it more access. Any other admin of the business can only lower it. If you are not that person and the app needs more access, ask them to raise it. ## When something does not work > [accordion] The connect page says no business can connect > > None of your businesses qualify. Check that you are an admin of the business and that it is on VEXiON PRO. Ask an admin of the business to connect if you are not one. > [accordion] My business is greyed out on the connect page > > The reason is shown next to the business name: > > * **Only admins can connect AI apps**: ask an admin to connect. > * **Needs the PRO plan**: the business is not on VEXiON PRO. See [Plans](https://vexioncards.mintlify.site/knowledge-base/billing-plans.md). > * **Paused**, **Locked**, **Cancelled** or **Not active yet**: the assistant works only on an active business. Resume or activate the business first. > [accordion] The assistant says "Sign in to VEXiON to use this connector" > > Your sign-in is missing or has expired. Reconnect the VEXiON connector in your AI app and sign in again. In Claude Code, run `/mcp` and choose **vexion**. > [accordion] The connect page says my sign-in expired > > Click **Sign in again**. Nothing was authorized, so start the connection again from your AI app if needed. > [accordion] It worked yesterday and now it is refused > > Access follows your role and plan live. It ends within about 60 seconds if you stop being an admin, if the business leaves VEXiON PRO, or if the business is paused, locked or cancelled. Only that business drops out. The other businesses of the app keep working. Ask the assistant to list your businesses: it shows which ones are unavailable and why. A paused business stays in the list, but the assistant gets a message that the account is paused. Check your role, your plan and **Settings → Developer → AI assistants**. If the app was revoked, see the next answer. > [accordion] The assistant says the connection was revoked > > Someone removed the app in **AI assistants**. Remove the connector in your AI app, add it again, and choose the access level once more. Connecting again lifts the revocation. > [accordion] The assistant says it needs more access, or a tool is missing > > The assistant cannot see what you did not allow. Open **Settings → Developer → AI assistants**, click **Change access** and choose **Read and write**, or allow that area under **Customize**. Then start a new chat in your AI app. In Claude, also check that **VEXiON** is switched on for the conversation: click **+** at the lower left of the chat, then **Connectors**. If you are not the person who connected the app, you can only lower the access. Ask that person to raise it. > [accordion] I changed access but the assistant does not see the new tool > > The AI app loads its tool list when a chat starts. Start a new chat (in Claude or ChatGPT) and the new tool appears. A lower level applies at once, so a tool you took away is refused right away. > [accordion] The assistant asks which business to use > > When an app is connected to several businesses, the assistant uses the business you name, for example "visits at Brew Haven last week". If it is not sure, it asks you. Tell it which one. Each answer starts with the business name, so you can check it picked the right one. Only an old connection without a stored choice asks you to pick one business first. To fix that, connect the app again and choose the businesses on the VEXiON page. > [accordion] The app shows "Waiting for first use" > > You authorized the app, but it has not made its first request yet. Go back to your AI app and ask a question. If you do not want the app, click **Decline**. If the app never finishes connecting, the entry disappears after about 10 minutes. > [accordion] A confirmation was refused or expired > > A confirmation works once, for 10 minutes, and only for the exact details in the preview. Ask the assistant to make a new preview, check it, and confirm again. > [accordion] I am not sure if a message was sent > > Ask the assistant to check before it tries again. For example: "List the notifications sent today." Open **Notifications** in the dashboard to see them as well. Do not ask it to send again until you know. > [accordion] A report is marked partial > > Very big reports stop after 30 seconds or 3,000 rows. The assistant should continue and add the counts together. You can also ask for a shorter period, for example one month at a time. > [accordion] "Too many requests. Slow down." > > The assistant asked for too much at once. Wait a minute and ask again. Big reports use many requests, so leave a minute between them. Notifications are limited to 1 per minute and 50 per day for your business. > [accordion] The AI app cannot connect at all > > Check that the address is exactly `https://api.vexioncards.one/mcp` and that your AI app supports **Streamable HTTP** MCP servers. In ChatGPT, an admin of your workspace may need to allow custom MCP servers first. If your network is managed by your company, ask your IT team to allow `api.vexioncards.one`. Restart the AI app after you change its settings. Still stuck? Contact VEXiON support from the email address of your account. Tell us the time of the problem and the message you saw. Never send a password or an API key. ## Next steps > [card] [Connect an assistant](https://vexioncards.mintlify.site/knowledge-base/developer-ai-assistants.md) > > The three steps to connect and how to remove an app. This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.