AI Assistance
Get a head start on sync rules and a plain-language answer when a run fails. AI assistance uses your own Claude or Azure OpenAI account, sends only what the data agreement lists, and never acts on its own.
What it helps with
Suggested sync rules
Open a connector in the editor and ask for suggested rules. Each proposal comes with a preview that Identity Mesh computes on rows the connector has really imported, so you see actual results, not a claim. Accept, edit or dismiss each one. Nothing is saved until you accept it.
Explain a failed run
Click Explain on a failed run. The answer says what happened, lists the log lines it is based on so you can check it, and offers next steps as buttons: open the connection, retry the run, or pause the schedule.
Explain drift
When a connector drifts from what the last sync reported, Explain drift gives a plain-language reason with the evidence behind it.
Exactly what is sent
The data agreement an administrator accepts lists this in full. If its wording changes in a later build, it must be accepted again.
Sent when an operator clicks
- Names of connectors, object types and attributes
- Counts, such as rows, adds, updates and errors
- Run history and log lines, which can contain user names and directory paths
- Up to five sample values per attribute. Attributes marked sensitive are named, but their values are not sent
Never sent
- Passwords
- Secrets and connector credentials
- The audit chain
You stay in control
Off until you turn it on
With AI assistance off, Identity Mesh makes no call to any AI provider. A request is only sent when an operator clicks a button. Nothing runs on a schedule.
Bring your own provider and key
Use your own Claude account from Anthropic, or your own Azure OpenAI deployment. Calls go straight from your server to the provider. Usage is billed to your account, and Identity Mesh adds no charge.
A clear data agreement
Before any feature works, an administrator tests the provider and ticks an agreement that says exactly what will be sent. Changing the provider withdraws the agreement and deletes the stored key.
Advice, never action
The AI never changes a rule, retries a run or pauses a schedule by itself. You read the answer and decide.
Every request is audited
Each request is written to the administrator audit log with a list of what was sent and a fingerprint of it. Sample values are never stored in the audit entry.
Switch it off in one click
Turn AI assistance off, untick the agreement, or clear the key, and calls stop at once. Rules you accepted stay in place as ordinary rules.
Spend less time reading logs
The guide covers setup, the providers, the outbound hosts to allow, and what is audited.