It can do anything you can do. Nothing you cannot.
An assistant with the same authority as the person prompting it. A prompt follows one controlled path — identity, access, records, engine, action, audit — and every stage happens inside the ERP.
Here is your Q3 summary. Revenue is up 12.4% on last quarter while expenses fell 3.1%, so net margin rose to 47.7%.
Q3 2026 performance
Live from your records · just now
Q3YTD
Revenue+12.4%
$184,320
Expenses−3.1%
$96,410
Net margin+6.0 pts
47.7%
Revenue vs expenses
RevenueExpenses
$80K$60K$40K$20K$0K
52.4
Jul
61.8
Aug
70.1
Sep
Top clients
Share of revenue
1AC
Acme Corp$42,000
22.8%
2NT
Northwind Traders$28,450
15.4%
3HL
Harbor Logistics$21,300
11.6%
4BS
Bluebird Studio$14,900
8.1%
Revenue grew every month this quarter. September was the strongest month at $70.1K.
Northwind Traders has one overdue invoice, INV-2026-0417 for $4,850.00. Want me to send them a reminder?
Send reminderCompare with Q2Break down by service
Reply to Agaro Agent…
AttachAction on Accept
The agent can only see and change what you can. Every action is recorded in the activity log.
Assistant · Acme IndustriesPrompt → identity
Draft
Confirm
Acme Admin · Acme Industries · 12 September 2026
Acme AdminReviewing…
Capabilities
What this module actually does inside Agaro ERP.
01
The same authority as the user
The prompting user is the identity and their workspace is the data boundary. Same role, same modules, same grants. If you cannot do it, it cannot do it.
02
One controlled path
Prompt, identity, access, resolve data, engine, action, audit. Every stage happens inside the ERP, and the ERP — not the model — decides whether the action executes.
03
Real records, not guesses
Before acting it resolves the actual customer, price, contract, hours, and payment history the workspace already holds.
04
Engines do the arithmetic
The model selects an action. The finance, payroll, inventory, and workflow engines calculate the result and enforce correctness.
05
Confirmation before consequence
Missing information is asked for, and actions that leave the building — sending, paying, posting — are presented for confirmation first.
06
Recorded under your name
Outcomes are written to the activity log against the acting user, so an assistant action is as auditable as a click.
Specifications
Engineered to a standard, not a slogan.
Assistant access
User = Assistant
Same role, same module access, same user grants, same model permissions, same workspace. The assistant inherits authority; it never adds any.
Engines
Deterministic where it matters
Finance, payroll, inventory, and workflow engines calculate and validate. The model chooses the action, not the amount.
Permissions
Checked before execution
Signed-in actor, workspace, role, modules, and model permissions are resolved before any action layer call is allowed to run.
Data model
One connected record set
213 Prisma models across finance, CRM, HR, inventory, tasks, the builders, and billing — one workspace-isolated source of business truth.
Audit
One trail for people and AI
A button click and an assistant tool call produce the same activity record, under the same identity, in the same log.
API & MCP
Same guarded business logic
Product interface, assistant, API, and MCP all enter through one shared action layer with validation, authorization, transaction, and activity logging.
Frequently Asked Questions · AGARO Assistant
What teams ask about AGARO Assistant before they move their operations.
Execute. Most assistants read your data and hand you instructions; the AGARO Assistant runs the same server actions the product's own buttons run, so the outcome is a posted invoice, a received purchase, an assigned task, a scheduled campaign — real records in your workspace with a journal or a stock movement behind them where one belongs. It resolves before it acts, reading the actual customer, price, contract, and history rather than working from what a prompt implied. And it works across the whole operating record, so a request touching CRM, the catalog, finance, and delivery does not have to be split across four tools and stitched back together. The limit is deliberate and simple: it can do anything the prompting user can do, and nothing else, inside that user's workspace.
No. It has no identity, credentials, or authority of its own. The prompting user is the identity and their workspace is the data boundary: same role, same module access, same user grants, same model permissions, same workspace. That is why there is nothing to over-provision and no second permission system to keep in step with the first — widen or revoke a person's access in the product and their assistant changes at the same instant. It also means the failure mode people worry about has no route to take. There is no elevated service account it falls back to, no admin key held for convenience, and no mode where a model acts on behalf of the workspace rather than a person. If the user cannot perform an action, the assistant cannot perform it.
One controlled path, entirely inside the ERP. Prompt: you state the outcome. Identity: the signed in user and workspace. Access: role, modules, grants, mode. Resolve data: real records and values, with a question back to you when something is missing or ambiguous. Engine: validation and calculation by the finance, payroll, inventory, or workflow engine that owns it. Action: the same product server action a click would call. Audit: the outcome recorded under your identity. The model's job is confined to selecting an action; Agaro decides whether and how it executes, and refuses at the access or validation stage when it should. A bigger request does not change the sequence — it runs more steps through the same path, each one validated and recorded. Nothing happens outside the ERP at any stage, and there is no point in the sequence where a model writes to your data directly.
Yes, and that is what keeps them consistent. The product interface, the assistant, the API, and MCP all pass through the signed in actor, workspace, role, modules, and model permissions into one shared action layer, where input validation, authorization, the transaction, and the activity log happen before the finance, payroll, inventory, CRM, and workflow engines run. A button click and an assistant tool call reach the same guarded business logic, so an invoice created any of those four ways carries the same totals, the same numbering, and the same journal. It also means integrating with Agaro does not mean finding a back door with looser rules, because there is not one. An action taken over MCP lands in the same activity history, under the same signed in actor, as the identical action taken by hand. Same identity, same controls, same business actions, one audit trail over workspace isolated data.
Agaro ERP is an AI native ERP from Agaro Technologies LLC, built so the software can do the work rather than only record it. It covers finance and invoicing, HR and payroll, CRM and leads, marketing, inventory and supply chain, projects and tasks, an app and website builder, a module builder, agency mode, and the AGARO Assistant — one connected workspace instead of a stack of tools that have to agree with each other. ERP has always held the facts: the customer, the price, the hours, the contract, the approvals. Someone still had to find the records, calculate the result, push the buttons, and reconcile what happened. Agaro closes that gap by giving the assistant the same authority the prompting user has and keeping deterministic engines in charge of money, pay, and stock. It is launching soon.
It does not decide; your access does. The prompting user is the identity and their workspace is the data boundary, and the assistant inherits all of it: same role, same module access, same user grants, same model permissions, same workspace. If the user cannot perform an action, the assistant cannot perform it. Every prompt follows one path — prompt, identity, access, resolve data, engine, action, audit — and access is checked before any record is read, so a request outside your permissions stops before data is resolved rather than being declined politely after the fact. The model's role is narrow by design: it selects an action, and Agaro decides whether and how that action executes. Anything that commits or delivers is presented for confirmation, and everything that happens is recorded under your identity in your workspace's audit history.
It means no route from a model to your data skips the business logic. The product interface, the AI assistant, the API, and MCP all resolve to a signed in actor with a workspace, role, modules, and model permissions, then pass through one shared action layer where input validation, authorization, the transaction, and the activity log happen. Only then do the finance, payroll, inventory, CRM, and workflow engines run, against workspace isolated PostgreSQL data and audit history. A button click and an assistant tool call reach the same guarded business logic. Practically, that is why the model never calculates an invoice total, a payroll register, or a stock quantity: the engines do, deterministically, and the same request produces the same result whichever route it arrived on. Same identity, same controls, same business actions, one audit trail.
Agaro ERP is launching soon. We are not publishing a date, because the parts that have to be right — the finance and payroll engines, the single stock-write path, the permission model binding the assistant to the user — are the parts worth finishing properly rather than shipping to a calendar. Early access is by talking to us. Tell us what you run today, which modules matter first, and whether you operate one business or a portfolio of client businesses through agency mode, and we will tell you plainly whether Agaro fits and when. If it does not fit yet, we would rather say so than take the signup. You can sign up on agaro.ai to be told when it opens, or reach Agaro Technologies LLC directly at info@agaro.ai or +1 (571) 278-8979. The company is based in Brambleton, Virginia.
The AGARO Assistant can do anything the prompting user can do. It is not a search box or a summarizer bolted onto a report screen — it creates and updates records, runs workflows, and completes transactions inside the ERP. Ask it to invoice a customer and it resolves the real customer, the catalog item, the stored price, the workspace currency, tax, and payment terms, then calls the finance engine to validate the request, calculate totals, allocate the invoice number, create the invoice, and commit the journal. It can create and assign tasks, move projects, prepare a payroll run, raise a purchase, or record a stock movement, each through the same server action a person triggers by clicking. When something is missing it asks. When an action needs confirmation, such as sending a document to a customer, it presents that action and waits for you.
Yes. Agaro ERP has full role-based access control (RBAC) and attribute-based access control (ABAC). Essentials includes role-based access with 5 fixed roles: Super Admin, Manager, Employee, Developer, and Viewer. The Scale plan adds custom access groups with inheritance, access levels for each module, separate read, write, create, and delete rights for each type of data, menu visibility, record rules that limit which records a person can see based on attributes like owner, team, or company, and field-level security that hides sensitive fields such as salaries. The same rules apply everywhere: in the app, through the API, over MCP, and to the AGARO Assistant. The assistant acts with the exact permissions of the person prompting it, so it can never see or change more than that person can. Downgrading a plan never widens anyone's access.
Get early access to AGARO Assistant
Agaro ERP is launching soon. Tell us how you run this part of the business today and we will show you how the assistant runs it inside Agaro.