Security and approvals

An assistant connected over MCP can do no more than the person whose key it uses — and usually less.

What a key reachesCopy Anchor Link

• The companies of its creator, narrowed to the ones chosen for the key. When the creator loses access to a company, the key loses it too. A connection works on one company at a time (select_entity).
• The scopes chosen for the key. A tool or agent action that needs a scope the key does not carry is not offered.
• For as long as the key lives. A revoked key stops working within a minute.

Risk levelsCopy Anchor Link

Every action AlphaCount can take has a risk level:

Direct tools and the agentCopy Anchor Link

The MCP server offers two kinds of tools:

• Direct tools read — balances, invoices, documents, reports — and the assistant calls them itself. Four writes are direct too: the user's own entries for their personal tax return — a business meal, a business trip, investment income, a personal tax item. They change no company's books, and the assistant asks the user before each one.
• Everything else goes through the agent: alphacount_agent_start hands the task to AlphaCount's agent, which uses the same tools as the agent in the app. When it reaches an R2 or R3 step, it stops and returns an approval request; alphacount_agent_resume continues with the decision. The assistant cannot skip that step — the approval is checked on AlphaCount's side, not in the assistant.

What no assistant doesCopy Anchor Link

Some things AlphaCount keeps for a person in the app, whatever the key: moving money, setting a partner's bank account, signing in to banks and other services, the ELSTER certificate, setting up webhooks, creating and revoking keys.

ScopesCopy Anchor Link

A key with Read only carries every read: scope, Read and write every scope below. Choose individually to narrow it — payroll, for instance, has scopes of its own.

Scope	Allows
read:documents	Read documents
write:documents	Upload and change documents
read:transactions	Read transactions
write:transactions	Match and book transactions
read:exports	Read reports and exports
write:exports	Start exports
read:accounting	Read accounting and taxes
write:accounting	Book, invoice and prepare tax filings
read:masterdata	Read master data
write:masterdata	Change master data
read:organization	Read organization
write:organization	Change company master data, organization and invitations
read:agent	Read agent tasks and knowledge
write:agent	Change agent tasks and knowledge
read:integrations	Read integrations
write:integrations	Change integrations
read:payroll	Read payroll
write:payroll	Prepare payroll runs
read:tasks	Read tasks
write:tasks	Assign and complete tasks