AI access

AI access lets an AI assistant, such as Claude, read your shop's data and answer questions like "what's low on stock?" or "can we make 20 wallets?". You choose which modules it can see, and it can never change anything.

How it works

An assistant connects to Ordryx with a connection: a private token you make in Ordryx and paste into the assistant. The assistant then uses Ordryx's tools, for example Low stock or What to buy, and answers from what they return.

Connections use MCP, the common way AI assistants connect to other programs. Claude Code and other assistants that support MCP can use it.

For an assistant to see anything, four things must all be on:

1. The AI access module, in Settings › Modules.
2. Outside access, the master switch (see Outside access).
3. AI assistants allowed, on the same screen.
4. At least one module set to Look.

Who can do this

Everything here is on Settings › Outside access & AI. It opens for owners and for anyone whose role lets them manage outside access.

Choosing what assistants can see

The AI assistants card has its own switch at the top: Allowed or Not allowed. While it is off, no assistant can connect, whatever the levels say.

Below it, each switched-on module has a level:

• Nothing: assistants see none of this module's data.
• Look: assistants can use this module's tools to read its data.

Press the tools link on a line to see each tool, what it does and what it needs. Untick a tool to turn just that one off.

Every module is read-only for assistants today.

The tools today

Some modules have no tools of their own, but other modules' tools show some of their data. Their line says so.

Making a connection

1. In the Connections card, press + New connection.
2. Give it a Name that says where it is used, such as "Claude on the office Mac".
3. Press Create connection.
4. Copy what you need:
   • the Token on its own,
   • the line for Claude Code, or
   • the settings for Other MCP clients.
5. Paste it into your assistant, then press I've copied it.

The address under the Connections card (after Endpoint) says where assistants can reach the shop. Usually that is only from the shop's own network. If your shop is on the internet, anyone holding a token could use it from anywhere, so keep tokens private.

What a connection can see

A connection acts as you, the person who made it. It reaches only what your role allows, and only the modules set to Look. If you lose that access later, the connection stops too.

Even when an owner makes it, an assistant never gets owner powers, nor anything marked no AI on the Roles screen.

The Status column shows Live, Revoked, or why a connection stopped, for example Person turned off or Ended at a sign-in reset.

What an assistant can never do

Whatever the settings, an assistant can never:

• move stock, mark anything paid, or make payouts,
• send anything (email, orders),
• delete anything,
• touch people, roles or what they can do,
• change outside access or these AI settings,
• see passwords, tokens or other secrets,
• deal with licensing, updates or restoring backups.

Text that people typed, or that came from a store (names, notes, SKUs), is marked for the assistant as data to report, never instructions to follow.

Stopping a connection

1. In the Connections card, press Revoke… beside it.
2. Press Revoke.

The assistant is cut off straight away. This can't be undone: make a new connection if you need it again.

To cut off every assistant at once, turn AI assistants to Not allowed, or turn outside access off.

The call log

Every time an assistant uses a tool, it is recorded. Press Assistant activity → on the Connections card, or open Settings › Activity and pick the AI area. Each line shows when, which connection, and which tool it used (for example "Looked at: Low stock"), or that it was refused. See Activity and diagnostics.