Set up ERPNext for the AI

1. Make a user for the AI. In ERPNext, search User and add one, for example ai@yourcompany.com. Give it only the roles it needs (for example Accounts User, Sales User, Stock User). Whatever this user cannot do in ERPNext, the AI cannot do either. Avoid using Administrator.
2. Generate its API key. Open that user, find the API Access section, and click Generate Keys. ERPNext shows the API Secret once: copy it now. The API Key is the field above it.
3. Copy your site address, as it appears in your browser, for example https://yourcompany.erpnext.com. Leave off /app and anything after it.

Your site must be reachable from the internet with a valid HTTPS certificate. A site behind a VPN or an IP allow-list cannot be reached from here. If you generate new keys later, the old ones stop working and you reconnect with the new ones.

Which access should I pick?

Read only is the right start: the AI can answer questions and run reports but cannot change anything. Add write when you want it to draft customers, items or invoices, and full only if you want it to submit and cancel as well.

Good to know

Create the user with only the roles it needs. ERPNext enforces them whatever the AI asks. You can disable the user in ERPNext at any moment to cut off access immediately.