Agents

Agent colleagues that do the work,
while the decision stays yours

DocAI agents take on assignments and work on your document archive on their own: they review invoices, flag missing documents and send summaries. They work like a new colleague with a job description: they have their own name and permissions, every run is logged, and they have no tool to pay, approve or sign.

What is an agent colleague?

The key facts in one place. If it is not here or further down this page, we do not claim it.

What is an agent?
A user in the system, with its own name, permission group and mailbox. It cannot log in.
Whose rights?
Its principal's: it works with the intersection of its own rights and its principal's, so it never sees more than its principal does.
When does it work?
On an event (a document type being finalised, a label, a document link, an incoming e-mail), on a schedule (hourly, daily, weekly, monthly, yearly) or when started manually.
What can it do?
Search the archive, produce invoice summaries, receivables and cash-flow reports, add labels, create tasks, send e-mail or Telegram notifications and generate files. Always only with the tools its assignment allows.
What can it not do?
It has no tool to start a transfer, make an approval decision or sign.
Who oversees it?
Only administrators can create agents and assignments. Every run is logged, and a single switch pauses all agents.

Last reviewed:

The assignment is the agent's job description

An agent is not a clever prompt but a fixed frame: the assignment says for whom, what, when and with which tools it works.

Fields of an assignment
Field What it sets
Principal Whose rights the agent works with and who receives the result. Only an administrator can be a principal.
Instruction Free text: what to examine and what to produce.
Triggers Document type, label, document link, incoming e-mail, schedule, manual "Run now". On first start it can also review documents back to a given date.
Tool rights On four axes: internal read, internal write, outbound, web. Each axis can be switched off or on, with an allow and a deny list per tool.
Schedule Hourly interval, daily, weekly, monthly (on a given day of the month) or yearly runs. A missed monthly or yearly run is caught up.
Notification E-mail or Telegram to the principal. If a run has nothing to do, no notification is sent.

Internal reading and web access cannot both be enabled on the same assignment: what looks outward cannot look inward. If you need both, that is two agents and two assignments.

Built-in, internal and external agents

The same frame for three kinds of work. We mark the status of each.

Built-in catalogue

Built-in agent: Iratőr

It works from a fixed rule table, not from a prompt, so it is predictable and auditable. It checks whether invoices have a contract and a completion certificate. It can be installed from the built-in catalogue.

Custom assignment

Internal agent

It works on the company's own data: invoices, contracts and financial reports. It gets its instruction as free text and works with the tools its assignment allows. It cannot go out to the web.

Pilot

External agent

It watches the public web and public company data: market research, grant monitoring, lead search. It cannot see the company's internal documents. It runs as a pilot on our own system; at customers it can be enabled once the allow-list of web sources is in place.

Does every invoice have a contract and a completion certificate?

Iratőr is DocAI's built-in agent. It works in four steps and only flags: it does not change the invoice and does not open tickets.

  1. Trigger — the invoice gets its document type, a contract or completion certificate arrives, a document link is created or a label is added. On top of that a full weekly review, and it can be started manually.
  2. Rule table — which document types need a contract and a completion certificate, which partners are exempt, the amount threshold and grace period, and from what score a document link counts as reliable.
  3. Decision — fine, not required, expected later, missing contract, missing completion certificate, or uncertain.
  4. Flag — a label on the invoice, a row with the reason in the "handled documents" list, and a summary by e-mail or Telegram to the principal. In the "handled documents" list a person can override the verdict.

Measured on our own system (K3Net, 9 September 2026): Iratőr re-checked 36 invoices in 3 seconds. It found one real gap: an invoice of HUF 166,100 without a contract, which received a "missing contract" label. 31 invoices needed no attachment, 2 were within the grace period and 2 were deferred for missing data. Every decision came from the rule table, without a language model.

Example assignments

These are examples, not ready-made templates: each company writes the instruction for its own process.

  • Completion certificates for subcontractor invoices (energy, construction) — Iratőr flags every invoice where the completion certificate required for payment is missing.
  • Duplicate payment watch (finance) — the same partner, amount and invoice number twice.
  • Month-end close preparation (finance) — at the start of each month a list of missing invoice images, unmatched items and pending approvals.
  • Rolling liquidity (finance) — weekly receivables, upcoming liabilities and a cash-flow forecast for the principal.
  • Market and grant monitoring, lead search (external agent, pilot) — a weekly summary from public sources, with the companies found recorded as leads.

Where can you reach it, and where does it report?

E-mail

An agent can have its own mailbox. An e-mail from a verified sender starts a run, and the agent replies in the same thread.

Telegram

The principal can also receive results and flags as Telegram notifications.

Other AI systems, via MCP

DocAI's tools can be called from other AI systems through MCP (Model Context Protocol), with the rights of the user the access belongs to. We have tried it with Hermes, OpenClaw and Hyppolit, among others.

Human in the loop

The agent prepares and flags; responsibility cannot be delegated to a model.

  • It never sees more than its principal. Its rights are the intersection of its own and its principal's; if the principal is deleted, it has access to nothing.
  • What looks outward cannot look inward. Internal reading and web access cannot both be enabled on one assignment.
  • Every run can be traced. A run log, an event log and the "handled documents" list, where a person can override the agent's verdict.
  • No empty e-mails. If there is nothing to do, there is no notification.
  • One switch stops it. An administrator can pause all agent runs at once.

General security controls of the document system: Security →

What we do not claim

Agents are a young feature. We list this so nothing surprises you when you decide.

  • We publish no accuracy figure for any agent. The measurement above was taken on a single system of our own; the multi-week accuracy measurement has not yet concluded.
  • The built-in catalogue currently holds one agent: Iratőr. Other agents work through custom assignments.
  • Iratőr's language-model reviewer runs in shadow mode. It was built for uncertain cases but does not yet influence the decision.
  • A person does not approve the agent's individual steps in advance. It does what its assignment allows and nothing else. A "propose, then a person approves" mode is in development.
  • The external, web-facing agent is a pilot. At customers it can be enabled once the allow-list of web sources is in place.

Agents: frequently asked questions

What is the difference between document chat and an agent?

Chat answers when you ask. An agent receives an assignment and works on its own: on an event (for example a document type being finalised or an incoming e-mail), on a schedule or when started manually, using only the tools its assignment allows, and every run is logged.

Can an agent see documents its principal cannot?

No. An agent works with the intersection of its own rights and those of its principal, so it sees at most what its principal sees. If the principal is deleted, the agent loses access to everything. Only administrators can create agents and assignments.

Can an agent pay, approve or sign?

No. It has no tool to start a transfer, make an approval decision or sign. An agent prepares and flags, for example by labelling an invoice or sending a summary; the decision stays with a person.

What does Iratőr do?

Iratőr is the built-in DocAI agent. Using a fixed rule table it checks whether invoices have a contract and a completion certificate. If one is missing, it labels the invoice and adds it, with a reason, to the "handled documents" list. It does not open tickets and does not change the invoice.

Can an agent go out to the web?

Only with an external-scope assignment, and then it cannot read the company's internal documents: internal reading and web access cannot both be enabled on the same assignment. The external agent currently runs as a pilot; at customers it can be enabled once the allow-list of web sources is in place.

Will it flood my inbox with notifications?

No. If a run has nothing to do, no notification is sent. Results arrive to the principal by e-mail or Telegram, and every run can be looked up in the log.

Can other AI systems use DocAI's tools?

Yes, through MCP (Model Context Protocol), with the rights of the user the access belongs to. We have tried it with Hermes, OpenClaw and Hyppolit, among others.

See Iratőr on your own invoices

In a demo we set up the rule table for your document types and partners and show you what it flags. If an internal or external assignment interests you, we write its job description together.

Request a demo

Get in touch

Fill out the form below and our team will reach out shortly to schedule a demo.

Please provide your name.
Please provide a valid email address.
Please provide a company name.
Format: 12345678-2-41

We only use your data to respond to your inquiry. We do not share it with third parties. Legal basis: your consent and pre-contractual steps (GDPR Art. 6(1)(a) and (b)). For details, see our privacy policy.