What AI apps can see

Pilot

Connected AI apps are currently enabled only for pilot organizations.

A connected AI app reads Focus data only through a fixed set of read-only tools. It cannot change anything in Focus, and it sees no more than the person who connected it can see in the dashboard.

The tools

Tool	What it returns
get_context	Who the connected person is in Focus (role and pseudonym), the organization’s time zone and today’s date, the teams they can see and the organization’s data rules
get_user_day	One day of one person: arrival and leaving time, active, idle, private and worked minutes, productivity percentages, attendance, the 10 most used apps and, only when the organization shares them, the 10 most visited website domains
get_team_summary	Totals of one team for up to 31 days: people, active and worked minutes, productivity percentages, the totals of each person (up to 200 people) and the 10 most used apps
list_apps_usage	Minutes per app, or per website domain when the organization shares them, for yourself, a team or the whole company, up to 25 rows and 31 days
search_help_articles	Articles of this help center that match a question, in Turkish or English
get_help_article	The text of one article of this help center

Minutes are whole minutes and percentages have one decimal, calculated exactly like the dashboard’s reports.

Your role sets the limits

The tools answer with the same data the dashboard shows the connected person, checked again on every request:

• Employees get their own days and apps and the help articles. With Only my data, so does everyone else.
• Owners, admins, team admins and managers can also get the teams and people they see in the dashboard, but only after allowing Team data I can see on the consent page (connecting an AI app). When an app asks for team data without that permission, it gets insufficient_scope and sends the person back to Focus to allow it.
• A person or team the connected person cannot see is answered like one that does not exist (forbidden).

A role change applies from the app’s next request; a deactivated account is disconnected.

What AI apps get, and what they never see

• Totals only: minutes, percentages, app names, categories and productivity levels, never individual events.
• Pseudonyms: people appear as Person 7K2Q unless the owner turns on Share display names; their Focus user id is not shown in any case (AI settings).
• Website domains: only when the owner turns on Share website domains, and then only domain names and minutes.
• Names typed by people: display names, team names and app names are cleaned of hidden and control characters and shortened to 64 characters, and the app is told to treat them as data, never as instructions.

AI apps never see window titles, URLs, e-mail addresses, devices, IP addresses, notes or screenshots, whatever the settings. Screenshots, which are off by default, are never offered to AI apps, and the connection of AI apps has no permission in the database to read screenshots, window titles, URLs or e-mail addresses.

When an app says AI access is off

The app gets ai_disabled when the owner has turned off Allow AI access or Allow external AI apps (MCP) under Settings → AI. Nothing is wrong with the app or your account; ask your owner. When access is turned on again, sign in again from the app; you are not asked for consent again, because your consent is kept.

Be careful with AI apps that also read e-mail or browse the web

An AI app becomes risky when it combines three things: it can read private data (such as your Focus data), it reads content that someone else wrote (e-mails, web pages, shared documents) and it can send data out (send an e-mail, open a web address, write to a shared document). Security researchers call this the lethal trifecta: an instruction hidden in an e-mail or a web page can make the app send the private data somewhere else, without you noticing.

Focus limits what reaches the app and neutralises what people typed, but it cannot control the app’s other tools. Before you connect Focus, turn off the tools you do not need in that conversation, especially e-mail, web browsing and writing tools, and approve each action the app wants to take.

What admins can check

Owners and admins see every active connection of the organization under Settings → AI → Connections and can end any of them (connections in your organization). Every request of an AI app is recorded with the app, the tool, the people it covered and the result.