The Business NXT GraphQL API now enforces an AI permission setting per company. AI integrations — GAiA and the Business NXT MCP — only receive data when the corresponding Read or Write permission has been granted in the System information and Company tables. Requests without the permission are rejected at the API regardless of the signed-in user’s other Business NXT permissions. The setting can only be modified by a System supervisor and takes effect immediately.