On this page
Permissions and security
The assistant uses your Koywe account: it can never do more than you, and it only accesses what you share when you connect it. It can never sign.
Permissions
These are the checkboxes you see when you authorize. Check only what you’ll use; you can always connect again and ask for more.
| Permission | What it lets the assistant do |
|---|---|
| View information (always included) | See balances, orders, contacts, approvals, your policy and webhooks. |
| See full details | See full account numbers, documents and wallets, plus emails and phone numbers. |
| Prepare payouts and charges | Payouts, conversions, transfers between businesses, payment links and deposits. |
| Add destination accounts | Create contacts, add bank accounts to them and add business wallets. |
| Prepare crypto purchases | Buy and sell stablecoins. |
| Propose policy changes | Not in use yet; you can leave it unchecked. |
For now, the permissions to prepare operations (payouts and charges, destination accounts and crypto) only work in sandbox, and only if your organization has the approval policy active. In production, the assistant only looks things up.
Without See full details, account numbers and wallets show as ****4821, and emails and phone numbers aren’t shown.
Who confirms each operation
The assistant never signs or approves. When it prepares a payout, a conversion, a transfer, a crypto purchase or a new account, the operation waits and it gives you a link to confirm it in Koywe with your passkey (or with an email code, if your organization allows it). If your policy asks for more approvals, it waits for those too.
Anything that doesn’t take money out of your account needs no confirmation: payment links, deposits to your balance, crypto sales and contacts.
Confirm only what you asked for. The confirmation screen in Koywe shows the real operation: review it before you sign.
What the assistant can’t do
- Sign, approve, reject or cancel operations.
- Invite users or change roles.
- Change webhooks or edit existing accounts.
- See your API credentials.
Your data
- The assistant isn’t part of Koywe. It belongs to your AI provider: what it reads goes through that provider and stays in your conversation history, under your agreement with them.
- In Koywe, what the assistant prepares shows up as done by your user.
Connected apps
In Koywe, open your account menu and go to Connected apps. There you see your connected assistants, what they can do and when they expire, and you can Disconnect any of them. The assistant loses access on its next request.