Available MCP actions, permissions and security
Actions depend on your user account#
SpeakDo determines the actions offered to your assistant from the Dolibarr configuration and the permissions of the connected user.
For example:
- if your user can view third parties, the assistant can offer searches for customers, prospects or suppliers;
- if your user cannot create an intervention, that action is not offered;
- a permission change in Dolibarr applies to SpeakDo.
SpeakDo never gives the assistant autonomous permissions.
Actions exposed to the assistant#
The assistant receives your user's effective catalog: the same actions as the mobile app, filtered by your business profile, your SpeakDo account policy, your ERP's active modules and your permissions. Each MCP tool carries exactly the identifier of the matching action in the catalog (for example thirdparty.search).
| Use | Examples |
|---|---|
| Search | customers, quotations, orders, invoices, interventions, tasks, tickets |
| View | an object's detailed record, documents, linked objects |
| Prepare a write | create an intervention, a task, a reminder, a quotation — always subject to confirmation |
Confirm and cancel commands only finalize or abandon an action that has already been prepared. They are not independent business features.
An action that is unavailable for your profile or ERP is not offered to the assistant, and it is refused if the assistant tries to call it anyway.
Confirmation before a write#
Every write is prepared before it is performed. SpeakDo provides a summary, the assistant asks for confirmation, and the ERP performs the action only after your explicit approval.
A prepared action can also be cancelled. Without confirmation, no ERP data is written.
Your core guarantees#
Dolibarr permissions#
Dolibarr remains the authority for users, permissions and business data. SpeakDo and the assistant use your user context; they do not replace your permissions.
No ERP key is provided to the assistant#
The credential SpeakDo uses to communicate with Dolibarr is never provided to Claude or another MCP client.
Environment isolation#
Each MCP access is associated with your SpeakDo/Dolibarr environment. An assistant cannot choose a tenant or ERP instance in its requests.
Revocation and revalidation#
You can revoke an MCP access from the SpeakDo interface in Dolibarr. SpeakDo rechecks important permissions before operations; a revoked access or removed permission can no longer be used.
Audit#
SpeakDo actions are recorded for operational traceability and security without exposing your connection secrets to the MCP client.
For the connection procedure, see Connect an AI assistant to SpeakDo.