AI Assistant Access

OneTake supports a dedicated, read-only connection for AI assistants — tools that speak MCP (the Model Context Protocol), such as an AI chat client you've connected to your studio. This is separate from the personal access tokens used for the regular read-only API: an assistant connection is tied to one of your sign-in sessions rather than a token you generate and store yourself.

What an assistant can do

An assistant connection can read the same studio data your account's role already gives you access to in the app — gear inventory, insurance policies, maintenance schedules, and so on.

It can never create, change, or delete anything in your studio. Every write attempt — adding an item, editing a record, uploading or replacing a file, calling any action other than a plain read — is refused outright as an error, not silently ignored or quietly dropped.

What stays off-limits, even for reading

Regardless of your role, an assistant connection cannot read:

• billing or subscription details
• API tokens or their usage history
• pending team invitations
• background job records — including the fact that a data export exists
• the files in your account's data exports (the private storage used for export downloads)

Ordinary files — like gear photos — remain readable, the same as they are for your own account.

Who can connect an assistant

• Assistant access depends on your studio's plan, the same way other paid features are gated.
• Only studio owners and admins can use an assistant connection for a given studio. Members and the read-only Scanner role cannot, even though they might otherwise be able to view some of the same data inside the app itself.
• This is checked per studio. If you own more than one studio on different plans, an assistant can work for one and be blocked for another, depending on each studio's own plan.

How access is revoked

Because an assistant connection is tied to one of your sign-in sessions, signing out of that session immediately cuts off the assistant's access to your data.

A plan downgrade, or a role change that no longer qualifies, also takes effect immediately — on the assistant's very next request, without needing to reconnect or refresh anything.

Activity is logged

OneTake keeps a lightweight record of each request an assistant makes — which action it ran, whether it succeeded, and how long it took. This is the one narrow exception to "read-only": logging that an action happened is allowed; nothing else is.