ChatGPT + Kroy

ChatGPT works through Kroy — never around it.

  1. ChatGPT connects to Kroy.

    ChatGPT connects to Kroy as an AI client, not to your systems. It holds no credentials for anything behind Kroy.

  2. Kroy reaches your systems.

    Xero, Microsoft 365 and your databases connect to Kroy once. Kroy holds those credentials.

  3. What ChatGPT may do.

    Through Kroy, ChatGPT can read shared state, Update shared state and Use a Skill — only as far as its user is allowed.

  4. Some actions wait for a person.

    Publish artifact needs a named person to approve it before Kroy acts.

  5. Revoke in one place.

    Disconnect ChatGPT from Kroy and it loses access to everything behind Kroy immediately.

ChatGPT
Kroy
Xero
Microsoft 365
Databases
! Publish artifact

ChatGPT via Kroy

  • kroy.state.read
  • kroy.state.update
  • !kroy.artifact.publish
  • Support depends on the ChatGPT plan i…
ChatGPT
Kroy
Xero
Microsoft 365
Databases
! Publish artifact

ChatGPT via Kroy

  • kroy.state.read
  • kroy.state.update
  • !kroy.artifact.publish
  • Support depends on the ChatGPT plan i…
ChatGPT connecting to business systems through Kroy. ChatGPT connects to Kroy.. Kroy reaches your systems.. What ChatGPT may do.. Some actions wait for a person.. Revoke in one place..

Supported resources

  • Kroy State the person may see
  • Skills granted to the person and to ChatGPT
  • Connector actions those Skills allow (for example SharePoint, Google Drive, Salesforce)
  • Artifacts and drafts
  • Projections shared with the person

Authentication

The person signs in to Kroy and authorises ChatGPT to act for them when adding Kroy as a connector. ChatGPT holds a Kroy delegation only; it never receives credentials for connected systems.

Supported actions

CapabilityTypeDefault
kroy.state.read
Read shared state
readPolicy
kroy.state.update
Update shared state
writePolicy
kroy.skill.invoke
Use a Skill
writePolicy
kroy.artifact.draft_create
Create draft artifact
writePolicy
kroy.approval.request
Request human approval
writePolicy
kroy.artifact.publish
Publish artifact
writeHuman approval

Events

kroy.approval.grantedkroy.state.updated

Overview

Staff already use ChatGPT at work. The question most organisations face is not whether, but with what: pasted extracts and screenshots, or a governed connection that knows who is asking.

ChatGPT is an AI client. Business systems connect to Kroy through Connectors; ChatGPT connects to Kroy to use them, within the limits Kroy sets for each person.

How ChatGPT connects

Kroy exposes an MCP server. Where a ChatGPT plan supports custom connectors built on MCP, Kroy can be added as one. What is available — including whether a connector can take actions or only search and read — varies by plan and changes over time. Check OpenAI’s current documentation for the plan you use.

What ChatGPT can reach

Only what Kroy allows for the person it acts for, narrowed by the Skills in use. A consultant’s ChatGPT can search that consultant’s client folders; it cannot search the partners’ files. Where actions are available, a Skill can let ChatGPT create a draft while sending still requires a person.

One state of work

Work done through Kroy is recorded in Kroy State. A colleague using Claude sees the same notes, decisions and drafts, so switching AI tools does not mean starting again.

Clients using their own ChatGPT

Through Guest Access, a firm can share a projection of a client’s record with that client. The client can then use their own ChatGPT to ask about it — seeing only what the firm chose to share.

Security

ChatGPT holds only a Kroy delegation. Revoking it ends access to every connected system at once. Every request and refusal is recorded against the person and the agent.

Limitations

  • Support depends on the ChatGPT plan in use and on its current connector capabilities. Some plans may offer read-only connectors, and some may not allow custom connectors at all.
  • Workspace administrators may need to enable or approve the Kroy connector.
  • ChatGPT can do only what Kroy allows for the person it acts for. Connecting it grants no extra access.
  • Kroy governs what ChatGPT receives and does through Kroy. It does not control what a person pastes into ChatGPT directly.