MAVOS
Documentation

Integrations

Connecting AI apps (Claude, ChatGPT)

Let Claude, ChatGPT and other AI apps work with your business data, with the permissions you choose and limits that always apply.

What it is

You can connect AI apps such as Claude and ChatGPT to your Mavos business. Once connected, you can ask questions in plain English — "what sold best last week?", "which bookings do we have tomorrow?", "which discounts are running?" — and ask for help with everyday tasks, like marking an item sold out, updating a product or checking in a booking. More of Mavos, including staffing, stock and your other modules, is being added over time.

This is different from the AI assistant built into Mavos (theming, product import and analytics chat), which runs inside Mavos itself. Connecting an outside AI app is available on every plan.

Some apps call this kind of connection an MCP server or a custom connector. Both mean the same thing here.

Before you connect

  • You need your own Mavos login with access to the business.
  • An AI app acts as you. It can never do more than your role allows, even if you tick more permissions.
  • If you work at more than one business, one connection can cover any of them, with different permissions in each.

Connecting Claude, ChatGPT or another app

  1. In your AI app, open its connector settings and choose to add a custom connector. Depending on your plan with that app, custom connectors may need to be switched on first.
  2. Give it a name (for example "Mavos") and enter this address: https://mavos.com.au/api/mcp
  3. The app opens a Mavos sign-in page. Sign in the way you normally sign in to Mavos.
  4. If you belong to more than one business, tick each business the app may work in.
  5. Tick the permissions the app may use in each business. Only the permissions your role in that business allows are shown. Read the two below carefully before ticking them.
  6. Choose Allow. You're taken back to the AI app, ready to go.

The same address works in other apps that support custom connectors, such as Cursor and VS Code. Developers can also connect with an API key — see the developer documentation.

Two-factor sign-in

If your business requires two-factor sign-in, Mavos asks you to confirm it's you with your authenticator app before you can allow the connection. If you haven't set up two-factor sign-in yet, you'll be asked to set it up under Settings → My account first, then connect again.

Choosing permissions

Permissions are grouped the same way as the rest of Mavos — catalogue, sales and money, customers, bookings, your business, integrations, and any modules you use. Tick only what you need; you can change them later under Settings → My account → Connected AI apps.

To save ticking one by one, use the quick picks at the top:

  • Read only — everything the app may read, except customer names and Query data.
  • Safe write — Read only, plus everyday changes that are easy to undo: products (including marking items sold out), the calendar, knowledge base pages and marketing drafts. Marketing can never be sent by an AI app.
  • All — every permission your role allows in that business.
  • Same as … — when the app already works in another of your businesses, copy the permissions it has there.

Each group also has a tick box beside its name that ticks or clears the whole group. Only permissions your role allows are ever shown or ticked.

Two permissions deserve a second look:

  • See customer names — lets the app see customer and recipient names. Without it, names are hidden. Email addresses and phone numbers are never shared with AI apps, whatever you tick.
  • Query data — lets the app run its own read-only reports across your data, for questions the standard reports don't answer. Personal details are masked in the results.

More than one business

When an app is connected to more than one of your businesses, it works in one business at a time and always says which. It asks you which business you mean if your question doesn't make it clear, and it never does anything in a business you didn't choose.

To add another business to an app you've already connected, switch to that business in Mavos and go to Settings → My account → Connected AI apps. The list shows which apps already work in the business you're in.

  • Add connection — choose an app you've already connected in one of your other businesses and tick what it may do in this one. If you haven't connected the app yet, the same window shows the address to use and the steps to connect it.
  • Add next to an app — adds the business you're in to that app.
  • Add another business — adds one of your other businesses without switching to it first.
  • Change — change the permissions for one business.
  • Remove — the app stops working in that business. Removing its last business disconnects the app.

Once an AI app is connected, connecting it again from the app doesn't ask about businesses. To add a business to it, use Connected AI apps in Mavos.

If a business needs two-factor sign-in, you'll be asked to confirm it's you first.

What AI apps can never do

Some things are always done by a person in Mavos. No matter which permissions you tick or what your role is, AI apps can never:

  • Create or change orders, take payments or issue refunds
  • Issue or adjust gift cards
  • Change loyalty point balances
  • Sign customers up to memberships or cancel them
  • See customer email addresses or phone numbers
  • Manage API keys, webhooks or users
  • Send marketing campaigns

Everything is recorded

Every action an AI app takes is recorded under the person who connected it, the same as if they had done it themselves, so it's always clear who is responsible for a change.

Disconnecting

  • Your own connections: go to Settings → My account and find Connected AI apps. Disconnect any app and it loses access straight away, in every business.
  • Every connection in the business (owners and admins): go to Settings → Integrations → API, Webhooks & AI apps. You'll see every AI app anyone on your team has connected to your business, who connected it, what it's allowed to do and when it was last used, and you can disconnect any of them. This only affects your business; the person's other businesses are not changed.

An AI app can never do more than the person who connected it, so removing someone from your team also cuts off their AI apps in your business, and changing their role changes what their AI apps can do.

Related