Shown once, stored hashed
Your connection URL carries the token. Sansflow shows it one time and keeps only a fingerprint of it.
Sansflow MCP · Premium
Connect the AI assistant you already use to your Sansflow business. Ask about sales, outlets, staff and open bills in your own words, and it answers from your real numbers, with your permissions.
Your Sansflow business▸ get_sales_summary
Ask your business
The assistant picks the right Sansflow tool, asks for exactly the dates and outlets it needs, and answers from what comes back. Every step is visible.
Questions to ask
How did we do last week?
thinking
▸ get_sales_summary{ "from": "2026-10-26", "to": "2026-11-01" }
◂ gross, refunds, net, discounts, orders, average ticket
▸ get_sales_summary{ "from": "2026-10-19", "to": "2026-10-25" }
◂ the week before, to compare
Last week Gross sales .................... Rp 48.260.000 Refunds ........................... Rp 310.000 Net sales ...................... Rp 47.950.000 Discounts ....................... Rp 1.150.000 Orders ................................. 1.284 Average ticket ..................... Rp 37.344 Week before (net) .............. Rp 45.230.000
Net sales were Rp 47.950.000 from 1.284 orders, up 6% on the week before. Refunds stayed small at Rp 310.000.
Example figures from a demo café. Connected to your business, the same tools answer from your own sales.
What it can read
Every token can use these read tools, and only for the outlets you allow. Each one answers a question an owner actually asks.
19read tools on every token
get_sales_summaryGross, refunds, net, discounts, tax, fees, orders and average ticketget_sales_trendSales per day, or per hour for up to 7 daysget_sales_breakdownBy product, category, payment method, cashier, outlet and morelist_locationsThe outlets this token may readget_location_performancePer outlet: sales, cost of goods, labour and expenseslist_ordersTransactions, newest firstget_orderOne order with its items and paymentslist_open_billsBills open right nowlist_invoicesInvoices, balances and due dateslist_refund_requestsRefund requests and their statusget_table_analyticsTable turns, occupancy and revenue per tableget_kitchen_prep_statsPreparation times by station, product or time of daylist_staffThe roster: name, role, statuslist_shiftsCashier shifts and cash countsget_staff_laborHours worked and labour costlist_productsYour catalogue: price, cost, category, availabilityget_inventory_variance_summaryExpected against actual cost of goods, and wastelist_reservationsReservations by timelist_audit_logWho did what, and whenlist_customersCustomers with contact details and loyaltyget_customerOne customer’s spend and visitscreate_ticketOpen a ticket for your teampost_platform_messageSend a bug report or idea to Sansflowapprove_refund_requestApprove a pending refund requestWhat it can never do
The connection is narrow on purpose. It can only reach what the tools above reach, through the permissions of the person who made the token.
A token acts as the person who created it. If that person can’t see revenue or another outlet, neither can the assistant.
Names, phone numbers and emails stay out unless the owner adds the guest-data permission to that token.
Tokens read only. Writing is a separate switch, and even then there are just three things it can do.
Sansflow tells the assistant to confirm every write with you first. Each write is logged and audited.
There is no tool to edit prices or products, change staff, adjust stock or delete a sale.
Each token gets 60 calls a minute. A write counts as two.
A write, the way it really happens
Approve the pending refund on order 1042.
▸ list_refund_requests { "status": "pending" }
◂ 1 pending · Rp 45.000 · order 1042
I found one pending refund: Rp 45.000 on order 1042. Approve it?
✓ approve_refund_request · approved, logged and audited
Okay, I left it pending. Nothing changed.
Only on a token with write access, and only for someone allowed to approve refunds.
The token
The connection runs on a token you create in Sansflow. You decide how long it lives, which outlets it sees and what it may do.
Your connection URL carries the token. Sansflow shows it one time and keeps only a fingerprint of it.
Leave it on all outlets, or tick the ones this assistant may read.
Never, 30 days, 90 days or a date you choose.
The assistant loses access immediately. Make a new token any time.
Sansflow records every tool call. Each token shows its last 100.
A steady limit per token, so nothing runs away with your data.
How to connect
Anyone with the Manage settings permission can do it, usually the owner, in about the time it takes to make a coffee.
In Sansflow, open Developers, then AI tokens (MCP). Name it, choose an expiry, the outlets and what it may do.
Sansflow shows your personal MCP URL one time. Save it. If it’s lost, make a new token and revoke the old one.
Add it to Claude or ChatGPT as a connector. Press Test connection in Sansflow to see the tools your assistant will get.
Works with
Sansflow’s setup guide gives you the exact steps for each, with your URL already filled in.
Plans
Connecting AI assistants through MCP is part of Sansflow Premium, Rp 508.000 per outlet a month or Rp 6.096.000 per outlet for a year, together with Sansflow AI, API access and every branch on one dashboard.
Building something? The technical guide is in the developer docs.
The Model Context Protocol, an open standard that lets AI assistants such as Claude and ChatGPT use tools in other apps. Sansflow runs an MCP server, so your assistant can read your business through tools Sansflow controls.
Claude and ChatGPT, through their custom connectors, plus Cursor, Windsurf, Codex CLI and any MCP client that connects over HTTP. Sansflow gives you setup steps for each.
Not on a new token: tokens read only. If you switch on write access, it can do three things: open a ticket for your team, send a message to Sansflow and approve a pending refund request. It is told to confirm each one with you, and each is logged. It cannot edit prices, products, staff or stock, or delete a sale.
Only if the owner adds the guest-data permission to that token. Without it, names, phone numbers and emails are left out of every answer.
Revoke the token in Sansflow under Developers, AI tokens (MCP). The assistant loses access immediately. You can also give a token an expiry when you create it.
The answers the tools return are sent to the assistant you connect, so they are handled under that assistant’s terms. You choose which outlets a token reads and whether it sees guest data at all.
Sansflow AI lives inside the app: tap Analyze with AI on a report. MCP connects the assistant you already use, so you can ask follow-up questions across your whole business. Both are on Sansflow Premium.