What the assistant can read
Everything the assistant sees passes through the same role and permission checks as the web app, re-read on every call. Two scope families exist:
Managers hold the HR scopes for their direct reports only.
Some things never cross the connector, whatever the role: AHV numbers, bank
details, withholding-tax data, dates of birth, private contact details, salary
amounts and bands, AI fit scores, private recruiting notes, e-mail bodies and
file names. Payslips are listed by period with a link to the portal; the
document itself opens only in your browser session. Text a person typed — a
leave reason, a cover letter, a note — is returned only when the assistant asks
for it explicitly, capped and marked as data for you to read.
The full tool list with schemas is in the
MCP connector reference.
What the assistant can file for you
With theself:write scope an assistant can file your own leave requests,
time entries and sick-leave reports, and take them back — nothing for anyone
else. Every write is two steps: the assistant first asks HR Easy for a
preview computed on the server (the working days a leave request deducts,
your balance before and after, who approves it; the net hours of a day and
what is already recorded; the days a sick report covers), shows it to you,
and only files it once you say so. The filed request is exactly the preview,
whatever was said in between, and your manager’s notification says it came
through an assistant. No reason, note or description travels through the
assistant; add those in the portal. A leave request still awaiting approval
can be withdrawn, and a sick-leave report cancelled within 24 hours as long
as no certificate is on file — in the portal or through the assistant. Each
connection may file at most 20 writes a day.
Company documents and prompts
Administrators can make the company’s own texts available to assistants — handbook chapters, policies, guides — under Settings → AI connections → Documents. Each document has an audience (everyone, managers, HR) and is served in your language where a translation exists. Ask the assistant to list the company documents or to read one; it will quote the company’s text, not a guess. HR staff and managers also get two ready-made prompts, a weekly HR briefing and a 1:1 preparation, both written so the assistant informs rather than rates anyone.Connect Claude
- In the Claude desktop or web app open Settings → Connectors → Add custom
connector and enter your installation’s connector URL:
https://<your HR Easy host>/api/mcp. - Click Connect. Your browser opens HR Easy, asks you to sign in with your company Microsoft account again, and shows a consent screen naming the assistant (by its web address) and the scopes it requests.
- Approve. Claude returns to the conversation; the connector is ready.
whoami tool tells it which
tools your connection may use.
Review and revoke
- Portal → Connections lists your connected assistants with the date of their last call and a Revoke button. Revoking takes effect on the assistant’s next call.
- The same page shows assistant accesses: which assistant read your record, when, and on whose behalf — your own connection or an HR colleague’s.
- Connections expire on their own after 30 days without use (8 hours for privileged roles) and after 90 days at the latest. Leaving the company ends every connection.
For administrators
Settings → Connected assistants holds the installation policy:- whether assistants may register themselves (off by default), and which vendors are approved automatically (Claude by default);
- a pause switch that refuses every assistant at once without deleting connections;
- the daily allowance of person records one connection may read (default 1 000); a connection that reads 50 or more different people in a day is flagged in the audit log as an export;
- every registered application and every connection, each with a revoke action.