Capabilities

Everything a connected AI app can do in your workspace, and the permission each one needs.

A connection acts as you: it can do exactly what your role in Kokar lets you do, and nothing more. Every capability below checks your own permissions each time it runs β€” the Needs column is simply what you would need in the app.

When you approve a connection, write access is ticked. Untick it for a read-only connection: everything under Reading keeps working, and anything under Writing is refused with a message saying the connection is read-only.

Every capability below takes an optional workspace β€” say which one you mean and it runs there; say nothing and it runs in the connection's default. Two capabilities exist just for that:

CapabilityWhat it does
List workspacesEvery workspace you belong to, with your role in each and which one is the default.
Set default workspaceChanges the default for this connection β€” "switch to Acme". It stays changed until you change it again.

Reading

Finding your way around

CapabilityWhat it does
Get workspace hierarchyReturns the tree β€” spaces, their folders and subfolders, and the projects in each. This is how the app learns what exists before doing anything else.
List membersThe people in the workspace, with their roles. Used to work out who to assign a task to when you name someone.
Get docs hierarchyThe documents tree β€” folders, pages and sub-pages you have access to.

Tasks

CapabilityWhat it does
List tasksOpen tasks, optionally just yours or just one project's.
Get taskThe full detail of one task β€” description, status, priority, dates, project, assignees.
List overdue tasksOpen tasks past their due date, most overdue first, reckoned in your workspace's timezone.
Search tasksFinds tasks by title, across the workspace or within one project β€” for when you refer to a task by name.
Get task commentsReads a task's comment thread, with author names.
List statusesThe statuses on a project's board, in order, and which ones only a manager can set β€” so "move it to Review" uses a real status name.
List tagsThe workspace's tags.
Get task checklistsA task's checklists and their items, ticked or not, with who each item is assigned to.
Get task dependenciesWhat a task is waiting on, what it is blocking, and related tasks. Links to tasks you can't open are left out.

Docs

CapabilityWhat it does
Search docsFinds document pages by title, with the document each belongs to.
Read doc pageReads a page's content, so the app can summarise or answer questions from it.

Dashboards

CapabilityWhat it does
List dashboardsThe dashboards you can open, where each one lives, and whether it is a space's or folder's Overview.
Get dashboardEvery card on a dashboard with its live numbers β€” task counts, charts by status, assignee or project, task lists, work logs, estimate against tracked time β€” worked out for you. Ask for a space's or folder's Overview and you get it even if nobody has opened it yet.

Each card follows its own rules, the same as in the app. Tasks in private places you can't open are never counted, and the cards meant for managers β€” estimated against tracked time, someone else's work log, members without tasks β€” come back marked restricted for anyone who doesn't manage that place, instead of showing numbers.

Forms

CapabilityWhat it doesNeeds
List formsThe workspace's forms, whether each is published, paused, expired or full, and how many responses it has.Permission to create forms β€” owners and admins have it
Get form submissionsA form's responses, newest first, each answer labelled with its question. Filter by status or dates, and page back through older ones. Shows the task a response was turned into, if any.Same as above

Over a connection, forms can only be read. The respondent's own account is never shown, as in the app.

Chat

CapabilityWhat it does
List conversationsYour channels and direct messages, most recently active first.
List chat messagesReads the recent messages in one channel or direct message, oldest first, with sender names β€” so an app can catch you up or summarise a thread. Only conversations you belong to.

Time tracking

CapabilityWhat it does
Get time entriesThe time logged on a task, by whom, with the total β€” or, with no task named, your own recent entries and whether a timer is running right now. Someone else's timer stays private until they stop it.

Attendance, time off and the audit log

The workspace's people data. Each of these carries the same permission it carries in the app, so an app asking on behalf of someone without it is refused rather than answered.

CapabilityWhat it doesNeeds
Get attendance β€” dayWho worked on a given day: check-in and check-out, break and worked time, overtime, and whether the punch was off-site. Defaults to today in your workspace's timezone.Attendance access
Get attendance β€” memberOne person's day-by-day record over a range, with the same totals the PDF export carries. Defaults to the last 30 days.Attendance manager
Get attendance β€” teamPer-person totals over a range for the whole roster β€” days worked, hours, overtime.Attendance manager
Get time offYour own balances for the year and your requests β€” or, for whoever reviews leave, the whole approval queue with how much paid allowance each person has left.Membership for your own; the time-off approval permission for the queue
Get audit logRecent events in the workspace β€” who did what, to which item, and when. The answer to "who deleted that project". Audit logs need Scale or Enterprise; on other plans nothing is recorded, and the app is told that rather than shown an empty list.The audit log permission β€” owner only unless an owner has switched admins on

Ranged attendance needs the manager permission here

Over a connection, reading a stretch of attendance needs the attendance manager permission β€” including for your own days. That is stricter than the app itself, where you can always look back over your own record. Nothing is exposed that would not be; you may just have to open Kokar for it.

Writing

Tasks

CapabilityWhat it doesNeeds
Create taskAdds a task to a project, with description, starting status, priority, dates, time estimate, tags and assignees. A manager-only status can only be chosen by a manager.Create access to the project β€” plus permission to manage tags, if a tag has to be created
Create subtaskAdds a subtask under an existing task, in the same project, with the same options.Create access to the project
Update taskChanges an existing task. Only the fields mentioned change; status is set by its name on the board, e.g. "In Progress".Edit access. With interact access you can still change the description, and an assignee can change status and assignees on their own task
Delete taskSends a task to Trash, where it can be restored β€” same as deleting it in the app.Full-edit access to the project. Having created the task does not stand in for it, and workspaces that limit people to deleting their own work apply here too
Add tagTags a task, creating the tag if it does not exist yet.Edit access to the project β€” plus permission to manage tags, if the tag has to be created
Remove tagTakes a tag off a task. The tag itself stays in the workspace.Edit access to the project
Add commentPosts a comment on a task, under your name.Comment access to the task's project
Add checklist itemAdds an item to a task's checklist, starting a checklist if the task has none.Comment access to the task's project
Update checklist itemTicks, unticks or rewords a checklist item.Comment access to the task's project
Add dependencyMarks a task as waiting on, blocking, or related to another task β€” even one in another space. Loops are refused.Edit access to both tasks' projects
Remove dependencyRemoves the link between two tasks.Edit access to either task's project

Structure

CapabilityWhat it doesNeeds
Create spaceAdds a top-level space.Permission to create spaces
Create folderAdds a folder for projects in a space, optionally nested inside another folder. (Folders in the docs tree are Create docs folder, below.)Create access to the space
Create projectAdds a project (task board) in a space, optionally inside a folder.Create access to the space β€” and, when you name a folder, create access to that folder as well
Update space, folder or projectRenames it, changes its description, or archives or unarchives it.Full-edit access to rename; edit access to archive; owner or admin to unarchive
Move projectMoves a project into another folder of the same space, or out to the space itself. Moving to another space isn't possible, in the app or here.Full-edit access to the project and to the folder it moves into
Delete space, folder or projectSends it β€” and everything inside it β€” to Trash, where it can be restored.Full-edit access, and permission to delete. Workspaces that limit people to deleting their own work apply here too

Your plan's limits on how many spaces, folders and projects a workspace may hold apply here exactly as they do in the app. A connection is not a way around them.

Docs and chat

CapabilityWhat it doesNeeds
Create docs folderAdds a folder to the docs tree. At the top level it becomes a docs space; inside a folder it is a subfolder β€” three levels at most, and never inside a page. It can create up to 10 pages inside the new folder in the same step; if any of them can't be made, nothing is.Permission to create docs and edit access to the folder it goes in. A top-level docs space needs an owner or admin
Create doc pageCreates a document page β€” at the top level, in a docs folder, or under another page (two page levels at most) β€” with formatted content: headings, bold and italic, links, bullet, numbered and check lists, quotes, code blocks, dividers and tables.Permission to create docs, and edit access to the folder or page it goes in
Update doc pageAdds to the end of a page, rewrites it, and/or renames it. Adding is the default; a full rewrite is only done when you ask for one, and drops anything plain formatting can't express, such as images, embeds and callouts.Edit access to the page
Move doc pageMoves a page or docs folder, with everything inside it, into another folder or page or to the top level, or reorders it among its neighbours. Moved into a folder, it follows that folder's sharing unless it was shared on its own.Full-edit access to the item and to where it goes. Moving a folder to or from the top level needs an owner or admin
Archive doc pageArchives or unarchives a page.Edit access to the page
Delete doc pageSends a page or docs folder, and everything under it, to Trash, where you can restore it in the app.Full-edit access to the page, and permission to delete docs. Workspaces that limit people to deleting their own work apply here too
Send chat messagePosts to a channel you belong to, as you.Membership of the channel
Send direct messageSends a 1:1 message to a member, starting the conversation if there isn't one.Membership of the workspace

Time tracking

CapabilityWhat it doesNeeds
Start timerStarts a live timer on a task, for you. Up to three can run at once, one per task, and a forgotten one stops itself after 12 hours β€” the same rules as the app.Read access to the task
Stop timerStops one of your running timers and records the elapsed time on its task.Read access to the task
Log timeRecords work that already happened β€” minutes, an optional day and note, up to 24 hours per entry. Defaults to today in your workspace's timezone.Read access to the task

Time off

CapabilityWhat it doesNeeds
Request time offAsks for time off for you β€” whole days, or hours on a day. It goes to the approval queue like any request.Membership of the workspace, on a plan with attendance
Cancel time-off requestWithdraws one of your own requests while it is still waiting.It has to be your request
Review time offApproves or rejects a waiting request. Approving means choosing paid time off, which comes out of the person's allowance, or compensatory time, which doesn't.The time-off approval permission β€” owners and admins have it

Everything is written as you

Chat messages and comments an AI app posts appear under your name, with no marking to say a machine wrote them, and time it logs is logged as your time. Read what it is about to send before you approve it. Where a change shows up in the audit log, it is marked as having come through a connection.

What is deliberately not here

  • No permission or billing changes. Roles, invitations, plans and payment details cannot be touched over a connection.
  • No clocking in or out, and no correcting attendance. Attendance can be read by the people entitled to read it, never written. Office check-in depends on being where you say you are, and a connection would go around that.
  • No changing forms, dashboards or automations. Forms and dashboards can be read; building them stays in the app.
  • No moving a task to another project, or anything to another space. The app can't do that either yet.
  • No permanent deletion, and no restoring. Deleting sends things to Trash; restoring from Trash or emptying it is something you do in the app.
  • No access to a workspace you are not a member of, and no way to ask for one β€” an AI app cannot even find out whether such a workspace exists.
  • No reading of private locations you are not a member of. The one exception is the workspace owner, whose connection can reach private items for the same reason they can in the app β€” somebody has to be able to.
  • No reading of chat you are not in. This one has no exception at all: a connection can only ever see the rooms and direct messages you belong to, and that is as true of the owner's connection as anyone's.

Frequently asked questions

Can a connected AI app see my whole workspace?

Only the parts you can see. It acts as you, so the same space, project and folder permissions apply, and private locations you are not a member of stay invisible. Chat is stricter still β€” only the rooms and direct messages you are actually in, with no exception for anyone.

Can an AI app read attendance, time off or the audit log?

Only if you can. Those reads carry the same permission they carry in the app β€” the day overview needs attendance access, ranged attendance reports and the time-off approval queue need the manager permission, and the audit log needs the audit permission, which starts out with the owner alone and is a Scale and Enterprise feature besides. Someone without them gets a message saying so, which is the same nothing the app shows them.

Can it request or approve time off?

Yes. It can ask for time off for you, cancel your own pending request, and β€” if your role lets you approve time off β€” approve or reject requests in the queue. When approving, it has to say whether the time is paid time off or compensatory, exactly as you would in the app.

Can it read our dashboards?

Yes, with the numbers you would see. Every card is worked out for you, so tasks from private places you can't open are left out, and cards meant for managers only come back marked as restricted.

Keep reading