AI is only as good as the actions it can take. Here are complete lists of what each agent can do – organized by area.
AI Boss – 95+ actions
AI Boss is your most powerful agent. Actions are grouped by area.
| Action | What it does | Example query |
|---|
| Add menu item | Add new menu item | "Add Pizza Margherita for 149 SEK" |
| Update menu item | Change price/name/category | "Raise Sirloin to 299 SEK" |
| Remove menu item | Remove item (with confirmation) | "Remove Caesar Salad" |
| Show menu | Show full menu as card carousel | "Show the menu" |
| Generate menu draft | Scan paper/PDF menu | "Read this menu image" |
| Profit analysis | Margin per item | "What's the margin on each dish?" |
| Add category | Create category | "Create the Breakfast category" |
| Update category | Rename | "Rename Food to Mains" |
| Remove category | Remove empty category | "Remove the Toppings category" |
| Manage categories | Unified category management | "Create the Brunch category" |
B. Modifiers and variants (3 actions)
| Action | What it does |
|---|
| Manage modifiers | Create modifier groups (e.g. "Choose sauce") |
| Manage variants | Sizes (S/M/L) with different prices |
| Manage allergens | Set allergen labels on items |
C. Discounts (2 actions)
| Action | What it does |
|---|
| Manage discounts | Create/delete discounts (%, fixed, code) |
| List discounts | Show all active discounts |
D. Tables and sections (3 actions)
| Action | What it does |
|---|
| Manage tables | Add/remove tables |
| Manage sections | Create zones (bar, terrace) |
| Rename kitchen routing | Rename kitchen routing |
E. Orders and sales (8+ actions)
| Action | What it does | Example query |
|---|
| Search past orders | Find past orders | "Find Andersson's receipt from yesterday" |
| Sales summary | Total sales per period | "What were last week's sales?" |
| Sales by channel | POS vs. online vs. kiosk | "How much do we sell online?" |
| Product analytics | Top/bottom ranking | "Which dishes sell the most?" |
| Hourly breakdown | Sales per hour | "Which hours sell the most?" |
| Staff performance | Per register/server | "Which register sells the most?" |
| Category breakdown | Sales per category | "Food vs. drinks split?" |
| Billing summary | Vendion invoice this month | "What are we being billed?" |
F. Customers and CRM (5 actions)
| Action | What it does |
|---|
| List customers | List all registered customers |
| Search customers | Search by name, phone, tag, spend |
| Show customer profile | Full profile incl. favorites |
| Customer order history | What the guest has ordered before |
| Quick guest search | Quick lookup with booking history |
G. Marketing and automations (5 actions)
| Action | What it does |
|---|
| Quick campaign | Create SMS/email campaign |
| CRM stats | Dashboard metrics (VIP, risk, growth) |
| Campaign performance | Open/click rate per campaign |
| List automations | List active automations |
| Toggle automation | Turn automation on/off |
H. Bookings (6 actions)
| Action | What it does |
|---|
| Today's reservations | Today's reservations |
| Reservation stats | Occupancy, no-show rate |
| Create reservation | Book a table |
| Modify reservation | Reschedule or change |
| Cancel reservation | Cancel |
| Available slots | Open times |
I. Events and resources (8 actions)
| Action | What it does |
|---|
| List events | All events |
| Create event | Create new event (wine tasting etc.) |
| Update event | Edit event details |
| Add event date | Add specific date |
| Cancel event date | Cancel one instance |
| List resources | Bowling, shuffleboard etc. |
| Create resource | Create bookable resource |
| Set availability | Open times per weekday |
J. Staff and scheduling (6 actions)
| Action | What it does |
|---|
| Staff list | Active team members |
| Invite staff | Invite via email |
| Show schedule | Weekly schedule |
| Staff summary | Who works which day |
| Labor cost | Payroll + % of sales |
| Suggest schedule | AI-generated schedule |
K. Todos and reminders (4 actions)
| Action | What it does |
|---|
| Create todo | Create recurring or one-time |
| List todos | Show active todos |
| Update todo | Edit |
| Remove todo | Remove |
L. Reporting and finance (5 actions)
| Action | What it does |
|---|
| Generate X-report | X-report (read, no close) |
| Generate Z-report | Z-report + day close |
| Cash ledger | Cash book history |
| Labor cost | (see Staff) |
| Platform costs | Platform costs |
M. Settings (2 actions)
| Action | What it does |
|---|
| Update restaurant settings | Name, org. number, address |
| Manage categories | Unified category management |
POS Copilot – 22+ actions
POS Copilot has a narrower toolset focused on helping the server mid-shift. Cannot change settings – only read and take orders.
| Action | What it does | Example query |
|---|
| Create order | Create new order | "A burger and beer to table 3" |
| Search active orders | Find open orders | "What orders are waiting?" |
| Update order | Add/remove in open order | "Add a beer to table 3" |
| Add order note | Special request | "No onion on the burger" |
| Show menu carousel | Visual menu browsing | "Show the menu" |
| Start payment | Open payment flow | "Take payment for table 5" |
| Table's last order | What the table ordered last | "What did they have last?" |
| Reassign table | Move order to another table | "Move table 3 to table 7" |
| Acknowledge notification | Mark notification as read | "Acknowledge the notification" |
| List my todos | Today's tasks | "What are my tasks?" |
| Mark done | Mark todo done | "Mark cleaning task done" |
| Table overview | Table status matrix | "Which tables are free?" |
| Upcoming reservations | Next bookings | "What bookings do we have soon?" |
| Find reservation | Find a booking | "Do we have Andersson at 19?" |
| Check in reservation | Mark guest arrived | "Booking X has arrived" |
| Look up customer | Quick CRM lookup | "Who is this guest?" |
| Available discounts | Active discounts | "Which discounts can I give?" |
| Search past orders | Find old receipt | "Find yesterday's receipt" |
| Cash balance | Cash balance | "How much cash is there?" |
| Allergen info | Check allergens | "Does carbonara contain gluten?" |
| Item modifiers | Modifiers for a dish | "What modifiers does burger have?" |
| Popular now | Today's top | "What sells most today?" |
| Who's working | Clocked-in staff | "Who's working?" |
| Next shifts | Upcoming shifts | "Who's coming soon?" |
| Clock reminder | Check if someone forgot to clock out | "Did anyone forget to clock out?" |
Guest AI – 11–13 actions
Guest AI is the most restricted agent – deliberately, for security reasons. Cannot change menu, prices or other guests' data.
| Action | What it does | Guest says |
|---|
| Add to order | Add item to cart | "I'll have a burger and a cola" |
| Show menu | Show full menu | "Show the menu" |
| Show category | Filter by category | "Show starters" |
| Filter by allergen | Safe options | "What can I eat without gluten?" |
| Item details | Full info on a dish | "Tell me about the burger" |
| Special request | Note on an item | "No onion on the burger" |
| Call waiter | Call for server | "We'd like to pay" |
| Popular items | Recommendations | "What's most popular?" |
| Personal suggestions | Personal suggestions | "What should I get?" |
| Find my reservation | Find own booking | "I have a booking at 19" |
| My order history* | Previous orders | "What did I order last time?" |
| My guest profile* | Own profile | "What are my preferences?" |
*Requires guest to sign in via SMS one-time code (OTP).
Security: what AI can and can't do
| Action | AI Boss | POS Copilot | Guest AI |
|---|
| Read the menu | ✅ | ✅ | ✅ (active only) |
| Change price | ✅ | ❌ | ❌ |
| Add item | ✅ (menu) | ✅ (order) | ✅ (own order) |
| Remove item | ✅ (menu) | ✅ (order) | ✅ (own) |
| Send campaign | ✅ | ❌ | ❌ |
| Book table | ✅ | ✅ | ❌ (see own only) |
| See other guests' data | ✅ | ✅ | ❌ |
| Generate Z-report | ✅ | ❌ | ❌ |
Known security gap in Guest AI
Note: Guest AI currently lacks sign-in verification. This means a technical attacker who knows your restaurant ID can call the Guest AI without logging in. Risk area: an attacker can read the menu and customer list – but cannot create orders or payments (which are token-protected).
Mitigation:
- Rate limiting per IP (30 calls/minute)
- Orders require session token
- Planned fix Q2 2026: stricter access protection
Privacy considerations
All text sent to Gemini is retained for 30 days by Google before deletion. For the current phase Vendion has no Data Processing Agreement (DPA) with Google – a known GDPR gap handled separately.
What is NOT sent to Gemini:
- Social security numbers
- Salaries
- Bank details
- Payment card numbers
What is sent:
- Menu, prices, categories
- Guest names and phone numbers (on concrete queries)
- Order history (on concrete queries)
- Staff names (first name only)
Next steps
- AI agents overview (article 75)
- Getting started with AI Boss (article 76)
- Effective AI queries (article 77)
