Introduction
There are two ways to connect an AI assistant to ComplyFlow:
Sign in. Select Connect in your AI app, sign in to ComplyFlow and approve what it can do.
Use a Personal API Token. Create a token in ComplyFlow and paste it into your AI app's settings.
Which one you use depends on your AI app. Both are equally secure, and both are limited to what you can do in ComplyFlow.
| Sign in (Connected app) | Personal API Token |
Used by | Claude (web, desktop and mobile), ChatGPT on the web, Claude Code | Claude Code, Claude Desktop (config file), GitHub Copilot in VS Code, ChatGPT desktop app, Copilot Studio |
How you set it up | Select Connect, sign in to ComplyFlow, choose your organisation, then select Allow access | Create a token on Personal API Tokens and paste it into your app |
What it can do | What you approve on the Connect … to ComplyFlow screen | The scopes you tick when you create the token |
How long it lasts | Stays connected while you use it. If it's unused for 90 days, you sign in again | Fixed, from 1 day to 1 year. It can't be extended |
Counts towards your 10-token limit | No | Yes |
Where you manage it | Personal API Tokens > Connected apps | Personal API Tokens |
How you stop it | Select Disconnect | Select Revoke |
Use sign-in whenever your app offers it. You don't have to look after a token, and there's nothing to copy or paste.
Connecting by signing in
When you select Connect for ComplyFlow in your AI app:
1. Sign in to ComplyFlow the way you normally do. If you're already signed in, this step is skipped.
2. Choose an organisation, if you belong to more than one with API access. The app can only see and change data in the organisation you choose. To use another organisation, connect again.
3. Approve access. The Connect [app] to ComplyFlow screen shows who you're signed in as and lists what the app will be able to do, grouped into read and write items.
Everything you're allowed to do is ticked to start with, including changes. Untick anything you don't want the app to do. Write items only take effect once write access has been turned on for your organisation, which is available on request.
Items you asked for but can't grant are listed under Requested, but not available to you, with the reason.
4. Select Allow access. You're returned to your AI app.
If you select Cancel and sign out, nothing is shared and you're signed out of ComplyFlow in that browser.
"API access is not enabled for your account"
If you see this page, you don't have the MCP / API token access permission (or Edit Organisation Details). Nothing has been shared. Ask your ComplyFlow administrator, then try connecting again. Refer to Giving staff access to AI assistants.
Things to know about connected apps
It stays connected. Your app renews its access in the background, so you don't sign in every time. If you don't use it for 90 days, you'll be asked to sign in again.
Your permissions are checked every time. If your permissions change, the app's access changes with them straight away.
One connection per app. If you connect the same app again, it replaces the earlier connection.
Managing connected apps
Connected apps are listed on the Personal API Tokens page, under Connected apps. This section only appears once you've connected an app. To open the page, select your name or picture at the top right, then API Tokens. For each app you can see Access granted, Connected and Last used.
To disconnect an app:
1. Select Disconnect next to the app.
2. Confirm Disconnect this app? It will lose access immediately.
The app loses access straight away. To change what an app can do, disconnect it, then connect again and choose different items.
Using a Personal API Token
Related guides
Refer to Connect ComplyFlow to Claude
Refer to Connect ComplyFlow to ChatGPT
Refer to Giving staff access to AI assistants