One set of tools and rules
The in-app assistant does not have a secret shortcut into your data. It uses the same documented tools as an authorized MCP client, with the same permissions, validation, and version checks.
Read immediately, write only after approval
Questions about balances, receipts, and trends can be answered directly. Anything that would create, change, confirm, archive, merge, or delete information is shown as a proposed action first.
- See the full action before it runs
- Reject a proposal without changing the ledger
- Revoke connected-client access whenever needed
Bring a compatible client
Claude, ChatGPT, and other MCP-compatible clients can connect through OAuth or a revocable manual token. The source client is recorded on AI-created entries so you can see where a draft came from.