Sign in as yourself
The assistant connects with OAuth and PKCE through Thoshika sign-in, including single sign-on and MFA.
- No shared API keys: each person authorises their own client
- Short-lived tokens issued per person and company
- Company row-level security, the app gate and role scopes apply to every call
- Standard protected-resource metadata, so MCP clients discover sign-in automatically
Tools the assistant can use
A small set of general tools covers every app.
- Who am I and which companies can I open
- Search the API catalogue to find the right operation
- Read records and reports from any app you can open
- Create and update records through the same API the web app uses
- Read your My work inbox and approve or reject items
Examples
Ask in plain language; the assistant finds the records and, if you ask it to, takes the action.
- "Which invoices for Acme are overdue, and by how much?"
- "Summarise the leave requests waiting for me and approve the ones under two days."
- "List open purchase orders for steel and their expected receipt dates."
- "Draft a support reply for ticket 1042 using the last three messages."
Set up
Company administrators find the connector URL and client ID under Admin, AI connector.
- Add the connector URL to Claude or another MCP client
- Each person signs in with their own Thoshika account
- Works across several companies; the assistant can be told which company to use