How do I verify a specific permission for a user?

Use the `authz_is` tool. You need to provide the identity context (user), the policy context (the path to the rule), and any relevant resource context to get a boolean decision.

Can I execute complex Rego logic through the agent?

Yes! The `authz_query` tool allows you to run any valid Rego query against your authorizer, enabling you to inspect data or evaluate custom logic on the fly.

Is it possible to trigger a policy sync on an Edge Authorizer?

Yes. Use the `control_plane_exec` tool with the instance ID and the appropriate command (e.g., `{"discovery": {}}`) to manage your connected authorizers.

Aserto MCP Connector for Claude

A+

Manage authorization policies and evaluate access control decisions via Aserto — run Rego queries, check user permissions, and audit decision logs.

7 tools Official Updated Oct 1, 2026 Official Vinkius Partner

More Details Connect to Claude

Connect your Aserto tenant to any AI agent to manage and evaluate fine-grained access control policies through natural conversation.

What you can do

Authorization Checks — Use authz_is to determine if a specific user identity is authorized to perform actions based on policy and resource context.
Rego Query Execution — Execute custom Rego queries against your authorizer using authz_query to inspect policy data or evaluate complex logic.
Decision Trees — Retrieve full decision tree values across policy modules with authz_decisiontree for UI logic or deep policy inspection.
Control Plane Management — Send commands to connected Edge Authorizers using control_plane_exec to sync policy instances or directories.
Audit & Logging — List and retrieve decision logs using list_decision_logs to maintain a clear audit trail of all authorization events.

How it works

Subscribe to this server
Enter your Aserto Tenant ID and API URL
Provide your Authorizer and Decision Logs API keys
Start evaluating security policies directly from your AI assistant

Who is this for?

Security Engineers — quickly test policy changes and verify authorization logic without manual API calls
Backend Developers — integrate and debug fine-grained access control (FGAC) during the development lifecycle
Compliance Officers — audit decision logs and verify that access control policies meet regulatory requirements

authorizationregopolicy-as-codeaccess-controliam