AI apps
Open Settings → You → AI → AI & MCP in the dashboard, or visit /dashboard/settings/ai. Copy the server address shown there (https://api.lumio.vision/mcp in production). The area appears when one of your channels supports MCP and you hold apikeys:create; connected apps keep it visible for disconnection if that access later disappears.
Connect an assistant
| Assistant | Setup |
|---|---|
| Claude Code | Run claude mcp add --transport http lumio https://api.lumio.vision/mcp, then claude mcp login lumio. |
| Claude.ai or Claude Desktop | Open Customize → Connectors → + Add → Add custom connector and enter the server address. |
| ChatGPT | Enable Developer mode under Settings → Apps → Advanced settings, then choose Create app and enter the server address. Workspace settings may control who can create apps. |
| Grok | At grok.com/connectors, choose New Connector → Custom and enter the address. Business and Enterprise members need their team admin to provision the connector first. |
| Other MCP clients | Add the address as a remote MCP over HTTP server and sign in with OAuth. |
The client opens Lumio's sign-in and consent page. Check its name, verification badge and destination host before choosing channels and permissions. Only eligible channels you own are preselected; tick any channel where you are a member, such as an administrator or moderator, yourself. If you own no eligible channel, nothing is preselected and Allow stays disabled until you choose one. Only Read is preselected among the permissions. Channels, permissions and the high-risk block each have a Select all / Deselect all toggle once they hold two or more selectable choices; it skips channels that cannot be selected and never ticks Write & change. Additional groups include chat, events, music, automations, overlays and widgets, extensions and bot controls. High-risk groups require a fresh identity confirmation: with 2FA enabled, use a passkey, authenticator app code or recovery code; without 2FA, use an existing platform sign-in or email password. For channels you do not own, Write & change is a separate opt-in that starts off. Lumio shows why a channel cannot be selected, such as missing apikeys:create or a disabled MCP feature.
Chat and event access may send viewer or chatter content to the AI provider you choose. Review the privacy notice before enabling those groups.
With Read access, an AI app can list the platforms connected to an approved channel and show your own Lumio platform sign-ins, including more than one sign-in on the same platform. Stream status is a separate view: a platform only appears there after Lumio has recorded its status. The channel connection list also requires your connections:read right and the channel's connections feature.
With overlay or widget access, an AI app can receive a browser-source URL when it creates one, or request the URL of a resource it may edit. If no URL exists, the request can create one when Write & change is enabled for that channel. Treat each URL as a credential: anyone who has it can view that overlay's or widget's output. Rotate or revoke it in the webapp, and update any OBS source using the old URL after rotation.
Where AI-app activity appears
The Security → Overview page shows how many AI apps are connected and opens AI & MCP. In a chatter's moderation history, an action taken through an AI app shows by ‹moderator› · via AI app ‹name›. The automations list labels an automation created or last changed via AI app ‹name›; the installed-extensions list labels an installation installed via AI app ‹name›. After the connection ends, those entries show (disconnected) where the app's history remains.
Review or disconnect
In Connected apps, inspect when the app connected and last used Lumio, its permissions, access destination and expiry. Each channel shows your role, its write switch and Remove. Edit channels changes the selected channels; adding one to a high-risk connection requires fresh confirmation. Permissions only shows the current rights. To change them, disconnect and reconnect.
Disconnect revokes the app's access. The dialog offers to switch off its automations (selected by default) and uninstall its extensions (off by default). Data from an uninstalled extension remains restorable for 30 days. A disconnected app is labelled in automation and extension provenance. A security-related disconnection also sends a security notice.
The AI & MCP feature guide explains the access boundary; the MCP reference lists every tool.