You can connect ZEP to an AI application of your choice and do the same things there as in the ZEP Assistant: record times, read reports, maintain projects, customers, tickets and receipts. The connection uses MCP, an open standard through which AI applications access business systems.
Availability
Note: The AI Interface (MCP) is part of the standard and is available in all five product lines — in ZEP Track, ZEP Clock, ZEP Control, ZEP Operations and ZEP Business. There is nothing to book for it.
Whether external AI applications may actually connect is decided by a switch in the administration. It is off to begin with. See the section Administration and switching off.
Requirements
An AI application that supports MCP. All common applications do.
Your own ZEP account. The AI gets exactly your rights, no others. There is no way to limit it to individual areas within those rights: the connection covers every area the administration switch releases.
ZEP MCP, switched on in the administration. Access is off to begin with; an administrator enables it.
Setting up the connection
You set this up once in your AI application.
Enter the address. In your AI application, enter this address as the MCP server: https://www.zep-online.de/<company slug>/next/mcp. The company slug is the same part you see in the address bar when you open ZEP in the browser.
Choose Connect. A browser window opens with the ZEP sign-in. Sign in as usual. If a ZEP session already exists in this browser, the sign-in is skipped.
Allow access. ZEP shows a consent page with the name of the application and the address ZEP redirects to. Only the host name of it is shown, for example claude.ai. Confirm with Allow.
Run a check. Ask your AI: Who am I in ZEP? The answer names your user name and your tenant. If that is right, the connection works.
Warning: Only confirm what you have just connected yourself. Any application can choose its name freely. What is reliable is the redirect destination that ZEP names on the consent page: it has to match the application you have just opened.
The connection renews itself in the background, you will not notice it. If you do not use it for 30 days, you consent once again.
Examples of use
You talk to your AI in your own words. The application finds the right tool itself, you do not have to learn any commands. A few examples from the three areas that are needed most often:
Recording times: Log four hours on the Website Relaunch project for me yesterday. Where are the gaps in my time recording this week? Submit my times for last week for approval.
Looking up and reporting: Which projects are currently running for customer Meier? Which leave requests are waiting for my approval? How many hours did the project cost in September?
Maintaining data: Create a new customer with this data. Set the ticket to done. Record the receipt from yesterday for 48 euros.
Covered are project times, projects, customers, employees, tickets, work items, receipts, absences, offers, suppliers, invoices, dynamic attributes, planning and reports. Not every area can also be changed: invoices and reports are read-only, and with offers only the note and the status can be changed. Of the planning you see the generation your account uses, so either the new resource planning or the old one.
Rights of the AI application
The application sees and changes exclusively what you yourself are permitted to do in ZEP: your role, your projects, your department. There is no extended access for machines. Every action checks the same rights as the ZEP Assistant.
If a person leaves the company, their connection stops working from the first day without a valid employment period. This applies regardless of whether the connection is still set up technically.
Sequence of a change
Reading works directly. Every change, by contrast, takes two steps.
Preview. The AI calls the action and nothing happens yet. ZEP answers with a preview: what would change, before and after. For deletions, ZEP additionally points out that data is being removed.
Confirmation. Only an explicit confirmation carries out the change. It applies once and expires after about ten minutes.
Warning: Read the preview before you confirm. An AI application can technically confirm immediately by itself without asking you. The intermediate step only protects you if you use it. Set up your application so that it asks you before every write action.
Tip: Some AI applications ask for permission before every single tool. That comes from the application, not from ZEP. Let reading and previews through without a prompt there and stop exactly at the confirmation step. The safeguard then stays effective and the clicking stops. Where you set this is in the tool permissions of your AI application.
Tool search
Directly visible are all reading tools, the recording of project times, the search and the two tools for confirming and cancelling. Everything else sits in a tool search that your AI queries itself. This keeps the list short and the application fast. If your AI does not find a task straight away, ask differently or more precisely.
Limits of the interface
Uploading files. Receipt recognition from a file and attaching files to receipts or tickets need the file upload in the chat. Both continue to work in the ZEP Assistant, but not through the connection to your AI.
Voice input. It belongs to the chat window in ZEP.
Managing connections yourself. There is no overview of your connected applications in ZEP.
Ending the connection
If you remove the server in your AI application, it stops addressing ZEP. In ZEP this revokes nothing: the access key already issued remains valid for up to one hour, the renewal for up to 30 days. After that the connection expires by itself. If a connection has to end immediately, the administration switches off access through MCP. That then affects every connection in your organisation.
Individual connections cannot be revoked one by one. If a device goes missing, the only remedy is therefore the switch in the administration, which rejects every connection at once.
Administration and switching off
Under Administration > ZEP AI Features > ZEP MCP, administrators control access for the entire tenant. The switch is called Allow access for external AI applications via MCP and is off to begin with. An administrator opens the page, ticks the box and saves. While the switch is off, ZEP rejects every connection. Anyone who already used ZEP MCP keeps access without doing anything.
Note: This switch works independently of the ZEP Assistant. You can switch off the Assistant and keep access through MCP, or the other way round. There is one exception: the switch The ZEP Assistant may read and edit absences. If it is off, the absences area also falls away for MCP. The settings for the Assistant and for receipt analysis are in the same area.
Help with problems
What you see | What causes it and what helps |
The application does not find ZEP | The address does not contain your company slug or is spelled incorrectly. |
Error 403 or a message that access is switched off | Access via MCP is switched off in the administration. An administrator switches it on under Administration > ZEP AI Features > ZEP MCP. |
Sign-in is rejected, error 401 | The connection belongs to a different tenant, or there is no valid employment period. |
No consent page appears after signing in | Too much time passed between the start and the sign-in. Choose Connect again in the application. |
The AI does not find a tool | Directly visible are only reading and time recording. Everything else sits in the tool search. Ask more precisely. |
Confirmation expired or already carried out | The ten minutes are over, or the change has already run. Have a new preview generated. |
Too many requests, error 429 | The application made a large number of requests in a short time. Wait a minute. |
Access and responsibility
Within ZEP, the following applies: the AI application works with your account and therefore with exactly your rights. ZEP does not grant any additional permissions for machines, and every change is recorded in the change log. ZEP itself does not additionally analyse your data in this process.
Outside of ZEP, you determine the conditions yourself through the choice of your AI application. What your AI application does with the retrieved data is governed by the terms of its provider. The commitments ZEP makes for the ZEP Assistant do not apply there. So check which provider your organisation wants to work with before you enable access.
ZEP delivers data exclusively to the application you have connected yourself.
