Production installation · submits to Test environment · email onThis is not a production installation connected to the production environment — check both before submitting.
TimberTrailby KaudataDue diligence reporting
Interface language
Interface appearanceFollows the device setting. The device is currently set to: Light theme

Connecting an AI assistant

TimberTrail has a connection for AI assistants that use the Model Context Protocol (MCP), such as Claude and ChatGPT. Once you connect one, the assistant can do in TimberTrail what you can do on the screens, with your role and never more: read your organisation's records, help you enter suppliers, producers, plots and ZGS felling decisions, prepare due diligence statements and simplified declarations, run the checks and, after you confirm, file them in the EU Information System.

TimberTrail itself contains no AI model. The assistant's replies are generated by the AI app you connect, and they can be wrong; check what the assistant has prepared before you confirm a filing.

Who can use it

  • Organisations that are TimberTrail customers. The connection is off for every organisation until KAUDATA switches it on; whether it is included is agreed in the customer's contract. Your organisation's Skrbnik (owner) can ask us at info@kaudata.si.
  • Each user connects their own AI app and signs in as themselves. The assistant then acts with that user's role: with the Pripravljavec (preparer) role it can prepare but not file, and with the Revizor (auditor) role it can only read.
  • When the connection is on for your organisation, the AI-pomočnik (AI assistant) page appears in the navigation of TimberTrail. It shows the server address and the apps connected to your account.

The server address

https://platform.timbertrail.si/api/mcp

You do not enter a client ID or a secret: the server supports dynamic client registration, so the app registers itself. While connecting you sign in with your TimberTrail e-mail address and password, and with your code if you use a second factor, and then choose Dovoli (allow). The AI app never sees your password.

Connecting in Claude

These steps match Anthropic's pages as checked on 5 October 2026; the menus change from time to time.

claude.ai, Claude Desktop and the mobile apps. Custom connectors are available on every Claude plan; the Free plan allows one.

  1. On claude.ai, open Customize → Connectors and choose + Add → Add custom connector.
  2. Enter a name, for example TimberTrail, and paste the server address.
  3. If the dialog offers a choice of OAuth client, choose Register automatically and leave OAuth Client ID and Client Secret empty.
  4. Choose Add, then Connect. Sign in to TimberTrail and choose Dovoli (allow) on the consent screen.
  5. In a conversation, open + → Connectors and switch TimberTrail on.

On Team and Enterprise plans, an owner of the Claude organisation first adds the connector under Organization settings → Connectors → Add → Custom → Web; members then find it under Customize → Connectors and choose Connect. Claude Desktop and the mobile apps use the connectors added on claude.ai when you are signed in with the same account.

Claude Code.

  1. In a terminal, run claude mcp add --transport http timbertrail https://platform.timbertrail.si/api/mcp.
  2. In Claude Code, type /mcp, choose timbertrail and follow the instructions. Sign in in the browser and choose Dovoli (allow).
  3. Remove the connection with claude mcp remove timbertrail.

Claude Code receives the connection on your own computer, so the consent screen warns that any program on it could intercept the access. Allow it only if you have just started the connection yourself.

Connecting in ChatGPT

These steps match OpenAI's pages as checked on 5 October 2026; the menus change from time to time. You need a paid plan (Plus, Pro, Business, Enterprise or Edu) and ChatGPT in a browser at chatgpt.com. Your own apps are added in developer mode.

  1. Open Settings → Security and login and switch Developer mode on.
  2. Go to chatgpt.com/plugins (in some places the page is called Apps) and choose +.
  3. Enter the name TimberTrail, choose a public endpoint and paste the server address. Under Authentication choose OAuth, then Create.
  4. A sign-in window opens. Sign in to TimberTrail and choose Dovoli (allow) on the consent screen.
  5. In a new conversation, open the + menu, choose Developer mode (or More) and then TimberTrail.

In Business, Enterprise and Edu workspaces members cannot add apps themselves. An owner or admin switches developer mode on under Workspace settings → Permissions & roles, creates the app as above and publishes it under Workspace settings → Apps → Drafts. Each user signs in with their own TimberTrail account the first time they use it.

Before anything is connected, TimberTrail shows the name the app gave itself (marked as such), the address it returns to, your name, your organisation, your role, the EU system your statements are filed into, and what the app will and will not be able to do. Choose Dovoli (allow) to connect or Zavrni (deny) to refuse.

What the assistant can do

The server offers the assistant a guide it can consult when it needs to: how EUDR filing works, what to ask you for, and how to use the tools. Within your role it can:

  • tell you where your organisation stands: your role, the readiness checklist, deadlines that are closing, notices and recent statements;
  • read and maintain suppliers, producers, products, ZGS decisions with their scans, Article 6 mandates with their signed documents, and the classification of a business under the EUDR;
  • check whether a product falls under the EUDR by its CN code;
  • check plot geometry you give it as GeoJSON or CSV, save plots, and correct them;
  • preview and run a spreadsheet import, and use statement templates;
  • create and edit statements and simplified declarations, run the pre-flight check, and file, amend, withdraw, group or file several at once, each after your confirmation;
  • refresh statuses from the EU Information System, and help resolve a statement whose outcome is unknown;
  • record reference numbers received from your suppliers, and read the audit log and the evidence pack;
  • list your organisation's EU access keys without their secrets, and, for a Skrbnik (owner), test a key's connection.

What the assistant cannot do

  • create or replace an EU access key, or see a key's secret: the key would pass through the AI provider's systems;
  • manage users and roles, change passwords or second-factor settings, or manage AI app connections;
  • reach KAUDATA's staff area;
  • take a document larger than 11 MB. Upload it on the screen instead, which takes up to 20 MB; the assistant gives you the screen's address.

Confirmation before every filing

Filing, amending and withdrawing a statement, grouping statements, updating a simplified declaration and filing several statements at once are legal acts in the EU Information System. A filed statement cannot be deleted.

So the assistant cannot file directly. It first runs a preparation step, which performs the pre-flight check, summarises exactly what will be filed, and issues a single-use confirmation. The confirmation is bound to that content, to you, to your organisation and to this app, and is valid for 15 minutes. The server instructs the assistant to show you the summary and to ask you for an explicit yes. If the statement changes or the confirmation expires, the assistant has to prepare again and ask you again.

Read the summary before you answer. TimberTrail cannot tell whether a person or the assistant said yes, and a filing made through the assistant is your organisation's filing.

If the outcome of a filing cannot be established, for example because the EU Information System did not answer in time, the statement is marked as unknown and the assistant must not try again. Resolve it on the statement's screen.

How long a connection lasts

A connection ends 90 days after you chose Dovoli (allow), however often you use it. It ends earlier if the app does not use it for 30 days, when you change your password, when your account or your organisation is deactivated, when KAUDATA switches the connection off for your organisation, or when the connection is removed. Signing out of TimberTrail does not end it.

To reconnect, open the connector in your AI app and connect again: sign in to TimberTrail, with your code if you use a second factor, and choose Dovoli (allow).

Disconnecting

  • In TimberTrail, open AI-pomočnik (AI assistant) and choose Odstrani dostop (remove access) next to the app. That ends this app's access to your account and invalidates any authorisation it has not yet used; other users' access to the same app stays. Your organisation's Skrbnik (owner) sees every user's connections and can remove any of them.
  • In the AI app, remove the connector. In Claude Code, run claude mcp remove timbertrail.

Troubleshooting

What you seeWhyWhat to do
The AI-pomočnik (AI assistant) page, or the consent screen, says that MCP access is not switched onKAUDATA has not switched the connection on for your organisationYour Skrbnik (owner) can ask us at info@kaudata.si
The consent screen says that the request is no longer validThe request waited more than 10 minutes, or it was already handledStart connecting again in the AI app
The consent screen says that the app is not registered, or that its return address is not allowedThe app's registration does not match the requestRemove the connector in the AI app and add it again
The assistant says that the connection is no longer authorisedYour password changed, your account was deactivated, the connection was removed or switched off, or 90 days have passedConnect again
The assistant says that your role does not allow an actionYour role in TimberTrail does not include itAsk a colleague with that role, or do it on the screen if your role allows
The assistant asks you to confirm a filing againThe confirmation expired after 15 minutes, or the statement changed after it was preparedRead the new summary before you answer
A document is refused as too largeIt is larger than 11 MBUpload it on the screen
The assistant reports an error with a referenceThe server failed while running the tool, and whether it took effect is not knownDo not repeat a filing; send us the reference
The EU Information System does not answerAn outage on the European Commission's sideA filing may be marked as unknown; resolve it on the statement's screen and do not file again

Your data

What the AI app sends to TimberTrail, what TimberTrail returns to it, and what is kept about each connection is described in section 6 of the privacy policy. What the AI app does with your conversation is governed by your terms with its provider.

Help

Write to info@kaudata.si. Name the AI app and give any reference the assistant quoted. See also support and the terms of service.

Version 0.12.2 · ca786a7