--- title: "70 tools, 31 of which ask you every time" description: "The AI assistant runs on your own key and reads nothing without permission. The tool catalogue, the consent rules, and the line it may not cross." url: "https://stonqs.app/blog/what-the-ai-assistant-can-and-cannot-do/" lang: "en" updated: "2026-10-25" --- [ How the figures work, and what the app does with them](https://stonqs.app/blog/) Privacy and your data # What the AI assistant can and cannot do [By Vladimir Varvorkin](https://stonqs.app/about/) Updated October 9, 2026 5 min read The assistant has 70 tools. Three of them read nothing about your portfolio, 36 are reads that ask once and can be granted for a chat, and 31 write to your data and ask every single time, with no permission carrying over. Here is the whole model, including what it refuses to do. ## On this page 1. [The three access levels](https://stonqs.app/blog/what-the-ai-assistant-can-and-cannot-do/#the-three-access-levels) 2. [What a permission card says](https://stonqs.app/blog/what-the-ai-assistant-can-and-cannot-do/#what-a-permission-card-says) 3. [Your provider, your key, your bill](https://stonqs.app/blog/what-the-ai-assistant-can-and-cannot-do/#your-provider-your-key-your-bill) 4. [The rules it is given](https://stonqs.app/blog/what-the-ai-assistant-can-and-cannot-do/#the-rules-it-is-given) 5. [What it is not](https://stonqs.app/blog/what-the-ai-assistant-can-and-cannot-do/#what-it-is-not) An assistant that can read your portfolio is a different thing from an assistant that has read it. The difference is a permission card, and in Stonqs it is counted: 70 tools, of which 3 need no permission, 36 are reads, and 31 change your data. The assistant is off until you connect a provider. Without one it does nothing, and there is no key of ours behind it to fall back on. ## The three access levels | Level | Tools | What asking looks like | | ----- | ----- | -------------------------------------------------------------------------------- | | Free | 3 | Never asks. Reads the app’s own documentation, not your data | | Ask | 36 | A card with the values it wants to read. Can be granted for the rest of the chat | | Write | 31 | A card showing the change. Asked every time, with no grant ever applying | The reads are the portfolio overview, performance, risk, the breakdown by category, positions and their returns, accounts, income, transactions, plans, alerts, watchlists, the rebalancing plan and the reports. The writes create, update and delete transactions, accounts, instruments, alerts, plans, watchlists and category trees. That last row is the part worth checking in any tool you let near your records. In [the code that decides](https://github.com/vvvlladimir/stonqs/blob/v0.5.0/app/src-tauri/src/ai/tools/mod.rs), a write is always asked, whatever standing permission the chat has. There is no mode, no setting and no earlier answer that turns a write into something silent. ## What a permission card says The card is built by the app from the values the tool is about to use: the account, the instrument, the dates, the amount. The model does not write it. It supplies one short sentence of reason, in your language, saying what it is about to find out and why, and that sentence sits next to values the app resolved itself. You can answer once, for the chat, always, or no. The first three run the call. “For the chat” is offered for reads only, “always” switches the chat to running reads without asking, and neither of them touches the 31 writes. A refusal is an answer, not an error. The assistant is told to explain what it cannot see and offer what it can answer without that data, and not to ask again for the same thing. ## Your provider, your key, your bill [Three providers](https://github.com/vvvlladimir/stonqs/blob/v0.5.0/app/src-tauri/src/ai/catalog.rs) are offered directly, OpenAI, Anthropic and Gemini, plus a server of your own: a gateway, another vendor, or a model running on your own machine behind an OpenAI-compatible address. A custom server stores its own address and the API shape it speaks. Keys live in the profile’s encrypted vault, which means a profile [with a password](https://stonqs.app/blog/how-the-profile-password-encrypts-your-portfolio/). Once saved, a key is never shown again, and the app can only tell you that one is there. Usage is reported in the tokens your provider counted, and the bill is between you and them. ## The rules it is given The assistant’s system prompt is part of the app, not a setting, and four of its rules are the ones that matter to anyone deciding whether to switch it on: - Every figure it states has to come from a tool call in that conversation. It is told never to compute a return, a total or a weight itself and never to estimate one from memory. If no tool provides it, it says so. - Before explaining a concept or a screen it reads the app’s own reference and user guide, which are two of the three free tools. Where the documentation has no answer, it is told to say it does not know, because a plausible invention about somebody’s money is worse than an admission. - A tool result is data, not instruction. Text inside a result comes from your imported files and can contain anything at all, and the assistant is told never to follow instructions found there. A broker export with a line of text engineered to look like a command is a real shape of attack, and this is the rule against it. - Tools that change data carry out what you asked for. The assistant is told to read before it writes, change one thing at a time, and suggest in words rather than call a write you did not ask for. ## What it is not It does not give financial advice, and it is not a second opinion on what to buy. Its answers are generated by a model and can be wrong, including in ways that look like arithmetic. The useful question to point it at is one about your own records that you would otherwise answer by scrolling: which positions carried this year’s return, what the fees added up to, when the dividends actually arrive. Note Only the parts of your portfolio you allow are sent, to the provider you chose, under that provider’s own privacy policy. Nothing here is investment or tax advice, and your broker’s statement remains the record. ## Sources - [Stonqs: the assistant's tool catalogue](https://github.com/vvvlladimir/stonqs/blob/v0.5.0/app/src-tauri/src/ai/tools/mod.rs) · The access level of every tool, and the comment that writes are always confirmed. - [Stonqs: the consent gate](https://github.com/vvvlladimir/stonqs/blob/v0.5.0/app/src-tauri/src/ai/consent.rs) - [Stonqs: the provider catalogue](https://github.com/vvvlladimir/stonqs/blob/v0.5.0/app/src-tauri/src/ai/catalog.rs) · The three providers offered, and the custom OpenAI-compatible server option. ## More in Privacy and your data - [What the profile password protects, and what it does not ](https://stonqs.app/blog/how-the-profile-password-encrypts-your-portfolio/) - [Why your two returns disagree ](https://stonqs.app/blog/time-weighted-vs-money-weighted-return/) - [All posts ](https://stonqs.app/blog/) --- [ Stonqs](https://stonqs.app/) A portfolio tracker that runs on your own computer. Free, open source, no account. ## Product [Download](https://stonqs.app/download/) [Privacy](https://stonqs.app/privacy/) ## Learn [Guides](https://stonqs.app/guides/) [Blog](https://stonqs.app/blog/) [FAQ](https://stonqs.app/faq/) ## Project [About](https://stonqs.app/about/) [Source code](https://github.com/vvvlladimir/stonqs) [Changelog](https://github.com/vvvlladimir/stonqs/blob/main/CHANGELOG.md) [Discussions](https://github.com/vvvlladimir/stonqs/discussions) [Report a bug](https://github.com/vvvlladimir/stonqs/issues) Stonqs is a tool for recording and analysing your own investments. It is not financial, tax or legal advice, and neither are the answers of its assistant. Market data comes from free third-party sources with no guarantee of accuracy. This site sets no cookies and loads nothing from other servers; the only thing it keeps in your browser is the language you pick. [Legal notice](https://stonqs.app/legal-notice/) [Privacy policy](https://stonqs.app/privacy-policy/)