AI Connector (MCP)

Connect your Paloma365 account to AI assistants (Claude, ChatGPT and others) over the MCP protocol. By default the assistant is read-only; anything it may change you grant with checkboxes when creating the connection.

How to Access

Settings → AI Connector (MCP) (/settings/mcp-connector).

The page is available to the account owner (signed in with the account login) and to employees with the “Administrator (Management mode)” interface. Employees with the “Manager” interface or no management interface, cash register, workstation and time-clock (URV) logins, and a support specialist's session do not see it in the menu.

Overview

The AI assistant gets access to your account data: searching and viewing items and reference lists, and — if you allow it — creating documents, posting them, reports and settings. Access is granted on behalf of whoever connected the assistant — the owner or an administrator employee — and is limited to the permissions ticked when connecting: without the checkbox the assistant cannot do it.

Fields

Field	Description	Required
Name	A label to tell tokens apart (e.g. "Claude Desktop — laptop")	No
Lifetime	How many days the token is valid: 30, 90, or 365	Yes
What the connector may do	Checkboxes for extra permissions (see below). Nothing is ticked by default	No

What the Connector May Do

Reading is always granted and needs no checkbox. Everything else is a separate consent:

Permission	What it opens
Create and edit	Editing items and creating document drafts. Reversible
Document posting	Posting a document: changes stock levels and cost price. Irreversible
Account setup	Trade points, workplaces, employees with logins and passwords, rooms, tables, roles, warehouses
Reports	Read-only: stock on hand, cash and bank balances, sales
View settings	Safe application settings (appearance, receipt, shift, delivery, region)
Edit settings	Editing one such setting. Includes viewing

Permissions are fixed at the moment the connection is created and never change afterwards. To add a right, revoke the token and create a new one — otherwise the assistant will keep answering "tool unavailable".

Step-by-Step Guide

1. Open the AI Connector (MCP) page.
2. Enter a name and lifetime, tick the permissions you need, then click Create connection.
3. Copy the displayed access token — it is shown only once.
4. Pick your client:
   • Claude Code — run the displayed command in your terminal.
   • Claude Desktop — add the displayed block to your claude_desktop_config.json and restart the app.
5. The MCP server URL is already filled into the command/config.

Connecting ChatGPT

ChatGPT connects as a plugin — at a separate address from the ChatGPT block on this page (it ends with /mcp/plugin). It does not need a token from this page.

For the dashboard.paloma365.com account the plugin address is https://mcp.paloma365.com/mcp/plugin. It is permanent and does not depend on the MCP server address in the block above.

The ChatGPT block appears only when the plugin is switched on: when the page opens, the dashboard first checks that the plugin server answers at this address. If the block is missing, the plugin is not available for your account yet. Connecting Claude with a token does not depend on it.

1. Copy the Address for ChatGPT from the ChatGPT block.
2. In ChatGPT, open the plugins section and add an MCP server with this address.
3. ChatGPT opens the Paloma365 sign-in window. Sign in with the account login and its password — the one the owner uses for the dashboard — or with the login of an employee with the “Administrator (Management mode)” interface, as “employee.account”. Manager, cash register, workstation and time-clock logins are not accepted here.
4. On the confirmation screen, tick the permissions and click Allow.

What Each Checkbox Grants

With no boxes ticked the plugin is read-only: searching and viewing items, reference lists (warehouses, organizations, suppliers, price types and others), documents and recipes.

Checkbox	What it opens
Editing and creating items and warehouse document drafts (write)	Creating and editing items and item groups. Document drafts: receipt of goods, posting (stock entry), write-off, movement, return from customer, return to supplier, inventory
Analytical reports	Read-only: sales, stock on hand, cash and bank balances
Viewing app settings	Appearance, receipt, shift, delivery, region

A draft does not change stock. It is posted in the Paloma365 dashboard: together with the draft, ChatGPT receives a link to that document in the dashboard.

Every change takes two steps: the assistant first prepares the change, then carries it out as a separate step. A prepared change is valid for about 5 minutes — after that it has to be prepared again.

What the Plugin Does Not Do

• it does not post documents;
• it does not create cash or bank documents;
• it does not set up the account: trade points, workplaces, employees;
• it does not change settings.

These checkboxes are not on the plugin's confirmation screen. Use the dashboard for those actions.

How to Disconnect ChatGPT

The connection appears in the Active tokens table labelled “OAuth: …” with the name ChatGPT gave itself. Click Revoke — the plugin stops working immediately. To use it again, connect it in ChatGPT once more.

Managing Tokens

The Active tokens table shows each token's name, permissions, creation date, last use, expiry, and status. Any token can be Revoked — the connection stops working immediately. The Revoke all button revokes every token at once.

The owner sees the connections of every employee of the account in the table — the Connected by column — and can revoke any of them. An administrator employee sees and revokes only their own connections.

The Permissions column shows exactly what was ticked when the connection was made: "Read", "Create and edit" (for the ChatGPT plugin — "Items and warehouse drafts"), "Post documents", "Account setup", "Reports", "View settings", "Edit settings". Permissions are granted once, at connection time, and never change afterwards. If a permission is missing from the list, the assistant simply cannot do that on this connection: revoke the token and connect again, ticking the consent you need.

Tips

• Treat the token like a password: never publish it or store it in shared repositories.
• If a token is compromised, revoke it and create a new one.
• The token acts with the rights of whoever connected it — the owner or an administrator employee — within the permissions ticked, so only connect trusted apps.

FAQ

Q: Can I connect ChatGPT?

A: Yes, as a plugin — at the address from the ChatGPT block on this page (for dashboard.paloma365.com — https://mcp.paloma365.com/mcp/plugin). If there is no ChatGPT block on the page, the plugin is not available for your account yet. No token from this page is needed: ChatGPT opens the Paloma365 sign-in window and a confirmation screen where you tick the permissions. The plugin does less than the full connector: it reads items, reference lists, documents and reports, edits and creates items, and creates drafts of warehouse documents. It cannot post documents, create cash or bank documents, set up the account or change settings. See Connecting ChatGPT.

Connections made earlier to the main MCP server address keep working.

Q: Can an employee connect an AI assistant?

A: Yes, if the employee has the “Administrator (Management mode)” interface — in the dashboard such an employee can do everything the owner can. They connect the assistant on this page, or sign in as “employee.account” in the window that opens when connecting Claude or ChatGPT.

An employee with the “Manager” interface cannot connect an assistant: the assistant does not apply a manager's restricted rights and would get more than the manager can do in the dashboard.

Access is checked on every call the assistant makes. If the employee's interface or password changes, or the employee is dismissed or deleted, their connections stop working at once.

Connections employees made earlier do not work — connect the assistant again. Everything they did is visible to the owner in the MCP log.

Q: Can I connect claude.ai (web)?

A: Yes — it connects as an OAuth connector to the main MCP server address: a consent screen opens where you tick what you allow. It does not need a token from this page; that token is for Claude Code and Claude Desktop. Whatever such a connection was granted is then visible in the Permissions column.

Q: ChatGPT created a document, but stock did not change

A: The ChatGPT plugin creates drafts only — they change neither stock nor cost. Open the document from the link in ChatGPT's answer or from the document list in the dashboard, check it and post it.

Q: Can the assistant change items or prices?

A: Only if you ticked that at connection time — the "Create and edit" checkbox on this page, or the same one on the consent screen of an OAuth connection. Without it the assistant creates and changes nothing, and without "Document posting" it posts nothing. What was actually granted is visible in the Permissions column.

Q: The assistant says a tool is unavailable, although it used to work

A: Two common causes, both visible on this page. First — the connection lacks the permission: check the Permissions column and, if the one you need is missing, reconnect the connector and tick that consent. Second — the assistant is working from an old skill list: start a new chat (in an old one the skill list is frozen from when it was created). What the assistant actually called and how it ended is visible on the MCP log page.

Q: What happens when the token expires?

A: The connection stops working. Create a new token on the same page.