Connecting an AI to rs.ge, safely

What the connection is

Kvitiko is a remote MCP server. MCP, the Model Context Protocol, is the open standard that AI assistants use to call tools. In ChatGPT and Claude you add Kvitiko as an app from their directory, and there is nothing to configure. Any other assistant that speaks MCP gets one address.

You sign in once. From then on the assistant calls Kvitiko’s tools over HTTPS, and every call runs under your own account. The assistant gets a token that works for one hour and is renewed for up to 30 days. Kvitiko stores tokens only as hashes. You can see each connected app in Settings and remove it. Removing it ends all of its tokens at once, and its next call is refused.

The dashboard at app.kvitiko.ge talks to the same server. You do not need an AI assistant to use Kvitiko.

Your login: full access or a sub-user

When you connect rs.ge, you choose how much to hand over.

Full access means your main rs.ge login. Kvitiko stores it encrypted. It is never shown anywhere, not in a chat, not on a page and not to support, and it is never written to a log. With full access Kvitiko can prepare and file your declarations after your approval.

Limited access means a sub-user. You create it in rs.ge, in the user management of your account, and you can delete it there at any time. Kvitiko then holds no main password at all. A sub-user covers certificates, waybills, invoices, balances, payments and notices. It does not cover declarations, so with limited access the filing stays with you.

You enter the login on the connect page of the dashboard. It is never an argument of an AI tool, and you never type it into a chat.

The SMS code stays with you

When rs.ge asks for an SMS code at sign-in, the code goes to your phone. Kvitiko cannot read your phone, so it asks you for the code and you type it in. If a sign-in starts by itself and stops at the code step, Kvitiko sends you one notice by email, and by Telegram if you linked a chat, with a link to the page where you enter it. Without your code, nothing proceeds.

Approval before anything binding

Reading is immediate: the assistant can look at your account, the notices, the registry and the law, and the answers come back as they are.

A step that changes something at rs.ge works differently. A declaration, a waybill, an invoice or a certificate request first returns a preview, never an action. The assistant can show you the preview, but only you can approve it, on an approval page in your signed-in browser. The page lists every argument that will run. The approval works once and for ten minutes. If something changed between the preview and your click, the action is refused and nothing is written.

This page is on until you turn it off in Settings. With it off, your assistant can confirm these steps itself, so say so only if you accept that it can act without your click. Only a signed-in browser can change the setting, never the assistant.

The activity log

Every action is written to your activity log, which you can read in the dashboard. If you want to know what an assistant did in your account, the log is where to look.

Which AI sees what

On the Standard plan, none of the AI is ours. Your own assistant talks to Kvitiko and receives only what it asks for through the tools above. What it does with the conversation depends on the agreement you have with its provider, for example Anthropic or OpenAI. Kvitiko does not train any model on your data. A Chat plan with our own AI is planned and not available yet, so this post covers the assistant you bring.

For the details of hosting, backups and what is stored, read the security page and the privacy page.

Create your account