Connect your AI assistant to Sijilak

What you need

A Sijilak account, and the admin role on it. Only an admin can connect an assistant, and the connection then runs with admin-level access to that one brand — never to any other.

An AI assistant that supports custom connections. Tested live with the Claude desktop app. ChatGPT support is built to OpenAI's published requirements and needs developer mode until Sijilak is listed in their directory — we will update this page the moment that changes.

How to connect — three steps

• In your assistant, open its connector settings and choose to add a custom connector.
• Paste the address above. Leave the sign-in options on whatever it detects — it reads them from us.
• Your browser opens a Sijilak screen asking you to approve. Read it, then press Connect.

What it can do

Nine things, and nothing else:

• Search your orders and customers by any text — an order number, a tracking number, a city, a status, a name or a phone.
• Open one record in full from that search: an order with its lines and shipping, or a customer with their order history.
• List your orders, and filter by status, order number or customer phone.
• Open one order with all its lines.
• Search your customers by name or phone.
• Read your profit and loss for any period, plus where your cash-on-delivery money currently sits.
• Compare your couriers — delivery and return rates, cost, collected COD, shipping margin.
• Rank your products by profit.
• Create a new order — down the same path the app itself uses: numbering, stock, plan limits, notifications.

What it cannot do

• It cannot delete or cancel anything.
• It cannot add or edit a product. It does read your catalogue — that is how it ranks products by profit and prices an order — and creating an order moves stock, exactly as it does in the app.
• It cannot reach your settings, your team or your subscription.
• It cannot see any other brand's data. Ever.
• It never receives your password. Sijilak never sends it anywhere.

How we keep it safe

You sign in on a Sijilak screen — the assistant never sees your password, the same way a "Sign in with…" button works everywhere else.

The access token the assistant receives is stored only as a one-way hash. Even we cannot read it back.

A connection lasts thirty days and renews as it is used. If the admin who approved it stops being an admin, it stops working.

Approving is not the end of the decision: you can cut any connection instantly from Settings, and the assistant loses access at once.

How to disconnect

Open Settings in Sijilak. Every connected assistant is listed by name and by the destination its data goes to, with a Disconnect button next to each one — so you can cut a single assistant without cutting the rest.

Privacy

Your business data is yours. Connecting an assistant does not give Sijilak, Anthropic or OpenAI any new right to it — it lets the assistant you chose read it on your behalf, when you ask it something.

Full details in our privacy policy. Questions: hello@sijilak.com

For developers

Sijilak is a remote MCP server implementing the 2025-06-18 authorization specification: OAuth 2.1 with PKCE (S256 only), RFC 9728 protected resource metadata, RFC 8414 authorization server metadata, RFC 7591 dynamic client registration, RFC 7009 revocation and RFC 9207 issuer identification. Scopes are sijilak:read and sijilak:write, and they are enforced per tool, not merely advertised.

A brand admin who prefers a static key can generate one from the same settings card and send it as a bearer token.