# TagoAI: the AI assistant built into your IoT platform > TagoAI is the AI assistant built into TagoIO. It inspects your devices, writes Analysis code, and builds dashboards. You pick what it may touch before you send, you can bring your own provider key, and every action lands in the Audit Log. TagoAI The AI assistant that already knows your devices Built into the platform, not bolted on: TagoAI reads your devices, writes your Analysis code, edits your dashboards, and answers from the official docs. It runs in the mode you set, and every dashboard it edits is versioned. ## Two doors into the same account Work with TagoAI inside the Admin, or reach your account from the AI client you already have open. ### The Assistant in the Admin TagoAI sits behind the star icon in the sidebar. Ask about a device, inspect the Action behind an alert, or have it write the Analysis script that parses your payload. ### The TagoIO MCP Server Point Claude Code, Cursor, Copilot, or any MCP client at your account. Same devices, same data, same permission scope, without leaving the tool you work in. ### Same account, same permissions In the Admin or over MCP, TagoAI acts as you, on the same account, inside the same permissions. In the Admin it runs on the provider set for your profile; over MCP the model comes from your own client. ## Everything it does happens in the open One session on one dashboard, start to finish. TagoAI builds it, reorganizes it, then answers a question about it, and every step it takes is visible while it happens. ### One sentence, one dashboard TagoAI reads a real sample from the device before it draws anything, then binds every widget to the variables it just confirmed. No blank widgets waiting for you to wire them up. ### It can change what it made, not remove it Edit Mode rearranges and rewrites but cannot delete, so the same five widgets come back in a clearer order. The dashboard is versioned on the way through, and Rollback puts the old layout back. ### Drop it to Read Only and it still reads everything Same assistant, same account, one notch lower. It still opens every device and dashboard to answer you, which is why Read Only is the mode worth staying in until you actually want something built. ## You decide what it may touch, before you send The control sits at the bottom of the chat panel, and you set it before you send. Pick a mode to see exactly what it allows. ### Read Only Can only read data and resources. TagoAI answers questions, inspects resources, and analyzes data. Nothing in your account changes. ### Edit Mode Can edit and create resources and data. Deletion stays off the table. ### Full Access Can delete, edit, and create resources and data. Pick it for the task in front of you, not for a session you walk away from. ### Never more access than you have TagoAI acts inside your own account permissions. It cannot reach what your user cannot reach, and it cannot grant itself more. ### Every action is on the record Creates, edits, and deletes land in the Audit Log with the account that ran them, the time, and what changed. ## Bring your own AI provider Run TagoAI on the TagoIO default, or connect an account you already pay for. You set it per profile, under Profile Settings, Services, AI Provider. ### Keys live in Secrets Provider keys are stored in TagoIO Secrets, encrypted at rest. They are only read when TagoAI sends a request, and the Admin does not show them again once saved. ### Per profile, not per account A regulated profile and a development profile can run different providers, or one can run TagoAI while the other has it switched off entirely. ### Off by default in the EU Profiles in the EU region ship with TagoAI disabled. Turn it off anywhere and no data from that profile reaches any AI provider. ## Reach your account from the tools you already use The TagoIO MCP Server is open source. Give an MCP client a profile token and your devices, data, dashboards, and analyses show up in that client. ## Included, with a monthly prompt allowance TagoAI ships with TagoIO. Prompts are counted per profile, per month, on the TagoIO default provider. ### One message, one prompt Each message you send counts once, whether it asks one question or builds a whole dashboard. Unused prompts do not carry over between billing cycles. ### The allowance grows with the plan Higher plans get a higher monthly allowance. The figures per plan are in the FAQ below. ### Your key, your bill, no TagoIO limit Connect your own provider and prompts run through that account, billed by that provider. The TagoIO monthly limit stops applying. ### No per-seat AI fee Everyone on the profile uses TagoAI. There is no separate charge per user. ## Common questions ### Can TagoAI change things in my account? Only what the selected mode allows. You set the mode at the bottom of the chat panel before you send: Read Only can look but never change, Edit Mode can create and edit, and Full Access adds deletion. Dashboards it edits are versioned so you can roll them back, and it can never exceed the permissions your own user already has. ### Where are my provider keys stored? In TagoIO Secrets, encrypted at rest. They are only read when TagoAI sends a request, and the Admin does not display them again once you save them. ### Is my data used to train a model? No. On the TagoIO default, the providers operate under agreements that prevent your data from being used to train their models. On your own provider, your contract with that provider governs. ### Can I turn TagoAI off? Yes, per profile, under Profile Settings, Services, AI Provider. With it off, the assistant does not appear in that profile and no data from it reaches any AI provider. Profiles in the EU region are off by default. ### How is the MCP Server different from the Assistant? Same account, different door. The Assistant lives in the Admin and knows the page you are on. The MCP Server exposes your account to Claude Code, Cursor, Copilot, and any MCP client, scoped by the profile token you give it. ### How many prompts do I get? Each message you send TagoAI counts as one prompt. The monthly allowance is per profile: 10 on Free, 50 on Starter, and 150 on Scale, with TagoDeploy negotiated per project. Unused prompts do not carry over between billing cycles, and once you connect your own provider the TagoIO limit stops applying. [llms.txt](https://tago.io/llms.txt)