Can I test if a specific user has access to a resource without writing code?

Yes. You can ask the agent to use the `check_resources` tool by providing the principal (user) details and the resource you want to check. The agent will return the allowed or denied status based on your Cerbos policies.

How do I view all the authorization policies currently loaded in my Cerbos server?

Simply ask the agent to 'list all policies'. It will invoke the `list_policies` tool (requires Admin credentials) and display the IDs of all active policies in your environment.

Can the AI help me generate filters for my database based on permissions?

Yes, by using the `plan_resources` tool. The agent will generate a query plan (AST) that describes the conditions under which a user is allowed to access resources, which you can then apply to your database queries.

Cerbos (Access Control) MCP Connector for Claude

A+

Decouple authorization from your code. Manage policies, check permissions, and audit access control directly through your AI agent.

19 tools Official Updated Oct 1, 2026 Official Vinkius Partner

More Details Connect to Claude

Connect your Cerbos instance to any AI agent to streamline authorization management and policy auditing through natural language.

What you can do

Permission Checks — Use check_resources to evaluate if a principal (user) has the rights to perform specific actions on resources.
Query Planning — Generate AST query plans with plan_resources to filter database results based on complex authorization logic.
Policy Management — List, retrieve, add, or delete policies (RBAC/ABAC) using the Admin API tools like list_policies and add_policy.
Schema & Auditing — Inspect resource schemas and review access logs with list_auditLogs to ensure compliance.
Health & Metrics — Monitor your PDP (Policy Decision Point) status with get_health and get_metrics directly from the chat.

How it works

Subscribe to this server
Enter your Cerbos PDP URL and Admin credentials (if required for policy management)
Start auditing and managing your access control logic from Claude, Cursor, or any MCP client

Who is this for?

Security Engineers — quickly audit existing policies and verify permission logic without manual API calls
Backend Developers — test authorization scenarios and generate database filter plans during development
Compliance Officers — retrieve audit logs and policy definitions to ensure organizational security standards

authorizationrbacabacpolicy-as-codeaccess-control