What an AI assistant can do in Tarkle
What an AI assistant can see in Tarkle, which actions wait for your OK, and how to disconnect it.
An AI assistant connected to Tarkle works as you. It uses your account and your role in each workspace, so it reaches only what you can open yourself. This article explains what it can see, which actions wait for your OK, how an API key limits it, and how to disconnect it.
What the assistant can see
The assistant works with the workspaces you can open. For each one it sees your role there and whether you can upload and share in it. Uploads, share links and file requests work only in a workspace where you can share. Roles are explained in Teams, roles and sharing files with your team.
If the assistant asks for a workspace you cannot open, Tarkle answers "Workspace not found." Your role decides what the assistant may do in each workspace you can open.
What waits for your OK
Some actions make something public, email someone, change people or create a workspace. For these the assistant asks you first. On the first try it changes nothing and shows you what would happen. It goes ahead only after you say yes. These actions ask first:
Creating a public share link. Anyone with the link can view and download the files.
Creating, reopening or deleting a file request. Anyone with the link can upload files into the request's destination folder. Deleting a request is permanent.
Turning on a contact's client portal. The first time, Tarkle emails the contact an invite.
Sending a portal sign-in email again to a contact.
Publishing a brand page, which makes it public or takes it out of draft.
Inviting a person to a workspace, which emails them, changing a member's role and removing a member.
Creating a new workspace.
Share links and file requests send no email. You pass the link on yourself.
Uploads, new folders, new contacts and adding a member to a team folder run without a question. An upload goes into the workspace you chose, as long as your role there allows it. To stop a link later, see How to pause or disable a transfer in Tarkle.
Connect an assistant
ChatGPT, Claude and Grok connect with browser sign-in, so they need no key. Add Tarkle to the assistant as a connector with the server address https://mcp.tarkle.com/mcp, then sign in to Tarkle. The next screen asks you to allow the app to use Tarkle, and you click Allow. That screen says "Only continue if you started this connection." Tarkle has not verified the name the app gives itself, so approve only a connection you started. A browser connection gets every action the MCP server offers, including the ones that ask first, and it does not appear on the API page. For the steps, see Connect an AI assistant to Tarkle.
Coding assistants such as Claude Code, Codex, Cursor, VS Code and Windsurf use an API key instead. The key goes in the assistant's settings as the header Authorization: Bearer <your-tarkle-key>, with the server address https://mcp.tarkle.com/mcp.
Create an API key
API keys are made in Settings, then API. Only owners and admins can open that page, and the keys on it belong to the whole organization. A member who needs a key asks an owner or admin to make one.
Open Settings, then API on API.
Click Create.
Type a Name that says where the key is used, for example Cursor on my laptop.
Under Access, choose All workspaces or Only selected workspaces. For the second, click Choose workspaces and tick each workspace the key may reach.
Click Create. The dialog shows the key. Click the key to copy it, then click Done.
A key can read and change everything in Tarkle for the workspaces it may reach. It acts as the person who made it, so the assistant can do with it what that person can do in those workspaces. It cannot make purchases. A key limited to selected workspaces does not show the other workspaces in the assistant's list, a request for one returns "Workspace not found.", and it cannot create a workspace. Treat a key like a password.
Copy, rename or delete a key
The keys are listed on the API page. Open the menu at the end of a key's row:
Copy token copies the key again. Only owners and admins can copy it.
Rename changes the key's name.
Delete stops the key.
A key with the Legacy badge was made before API keys had full access. It keeps its older, limited permissions, the MCP server does not accept it, and it cannot be copied. Create a new key for the full set.
A key stays active until you delete it. Deleting it stops it right away, everywhere it is used. Deleting does not remove the files or links the assistant already created.
Disconnect an assistant
To disconnect an assistant that uses an API key, open the key's row menu on the API page, click Delete, and confirm. Then remove the Tarkle server from the assistant's own settings, so the assistant stops trying to connect.
A browser connection does not appear on the API page. To disconnect it, remove the Tarkle connector from the assistant's settings.