What does this MCP do?

This MCP audits application permissions by comparing them against a registry of approved permission sets to find security and privacy risks.

How are permissions categorized?

The capability categorizes permissions into three statuses: keep, review, or revoke.

Can I check if a permission is valid?

Yes, you can use the search capability to check if a specific permission string exists within the global domain context.

Which AI clients can use this MCP?

You can use this MCP with any compatible client like Claude, Cursor, Windsurf, or VS Code.

Do I need to host the MCP myself?

No, Vinkius hosts and manages the MCP for you. You just connect your client and start using the capabilities.

How do I audit a specific application?

You can use the analyze_app_permissions capability by providing the application name and the list of permissions you want to check.

What does 'Review' status mean?

A 'Review' status indicates that the application has requested a permission that is not found in its official required permission list, signaling a potential security risk.

Can I see all available apps in the registry?

Yes, use the list_all_apps capability to retrieve a directory of all applications currently managed within the permission registry.

An astronaut overseeing a futuristic data hub

Download PDF Markdown Version

Connect App Permission Review to ChatGPT, Claude and Gemini

Set it up once and it works in ChatGPT, Claude, Cursor, and any other client you love. It all runs safely in the background, so you can relax and focus on what really matters. Verify app permissions against official security requirements.

Ask AI about this Connector

Developed, maintained, and hosted by Vinkius.

MCP VERIFIED · PRODUCTION READY · VINKIUS GUARANTEED

Waiting for input…

Works with modern AI clients that support MCP, including ChatGPT, Claude, Cursor, and more.

Your AI does the work. We keep it safe and sound.

No other AI tool gives you this. Your workflow runs in the client you already love, your account stays protected, and you decide what the agent can and cannot do. It is the whole reason to make the switch.

Each Connector lives inside our infrastructure, the same place where your workflow runs. The three things below are already part of it, working quietly in the background so you never have to think about them. Nothing to add, nothing to set up, nothing to worry about.

V8 Isolate01

Each Connector runs inside its own sealed environment.

Each Connector runs inside its own sealed V8 runtime — no access to your files, your system, or other servers. A Connector never sees past its own request.

Kill Switch02

One switch stops every agent. Instantly.

One action deactivates every Connector, revokes every token, and ends every session at once. AI Governance keeps the record.

FinOps per User03

Spending limits that pause instead of surprise.

Every user keeps their own connections and credentials, isolated from everyone else. Anything that would cross your spending limit is held for your approval, not billed.

Three controls, built into the layer your AI connects through.

Curated set · 4 capabilities

We ship only the actions that matter.

Capability set01 / 01

01-04

4 capabilities in this set.

Part of 4 available through App Permission Review.

01
List all apps
This capability provides a directory of every application currently managed in the permission registry.
02
Get app requirements
This capability pulls the official list of approved permissions for a specific application. It provides the baseline for your audit.
03
Search permission by name
This capability checks if a specific permission string exists in the global domain context. Use it to verify if a permission is recognized.
04
Analyze app permissions
This capability runs a full audit on a specific application's permission profile. It compares the app's requested access against approved standards.

Real work

What teams actually run

Security Auditing

Run a full audit on a new application to see if its permission profile matches its intended use.

Compliance Monitoring

Check if existing applications still adhere to the official permission registry.

Permission Validation

Verify if a specific permission string is valid before implementing it in a new app.

App Inventory Management

Use the app directory to see all applications currently being managed for permissions.

One connector, every AI

App Permission Review works with the most popular AI clients.

These are the most popular clients, each with a step-by-step guide: one link, set up once, with governance and visibility built in. And because everything runs on the MCP standard, the same connection also works in any other compatible client — nothing to rebuild.

Building your own app? The connector is yours to use.

You don't need a client to put App Permission Review to work: the same hosted connection plugs into your own applications and agent code, with the same governance on every request. Build with it, chat with it — one connection for both.

Observed, not estimated

923ms average. Fast in production.

App Permission Review is checked daily against the live service.

Daily averagePeak 1156ms

Sep 29Today

Fastest day: 717ms
Slowest day: 1156ms
14-day trend: Improving-35%

Connect your client

One URL. Every client.

Activate the Connector, copy your link, and paste it into the client you already use. 4 capabilities arrive ready to run.

Preview access · not provider authentication

The vk_preview_* token belongs to Vinkius preview infrastructure. It lets Claude discover and display the capabilities of App Permission Review, so you can see the experience inside your AI.

It does not authenticate your account with App Permission Review. Actions requiring credentials or live account data may not run until you activate the Connector and authorize the service.

App Permission Review Connector

You're all set. Choose your MCP client and follow the setup instructions.

Connector linkhttps://edge.vinkius.com/vk_preview_nxIpHNfmA4bMjVa0tsSbTe3XBanXNRjCzWy6hEV8/mcp

Claude Desktop

Follow the steps below to connect in seconds.

1In Claude Desktop, open Settings → Connectors.
2Click “Add custom connector” and paste the connector link above as the remote MCP server URL.
3Click Add and start a new chat — App Permission Review capabilities are ready to use.

Configuration · claude_desktop_config.jsonCopy

{
  "mcpServers": {
    "app-permission-review-mcp": {
      "url": "https://edge.vinkius.com/vk_preview_nxIpHNfmA4bMjVa0tsSbTe3XBanXNRjCzWy6hEV8/mcp"
    }
  }
}

Claude
ChatGPT
Cursor
VS Code
Windsurf
Claude Code
JetBrains
Cline

Step-by-step instructions for each client are in the guide. How to connect

Guided setup for Claude? Set up App Permission Review in Claude and other AIs

See all the AI clients this connector works with ↑

Who it's for

Built for the work App Permission Review owners hand off.

Security professionals and compliance officers use this MCP to automate the vetting of application access. You can hand off the tedious task of permission mapping to your AI agent.

01
Security Auditor
Uses the MCP to identify apps that request excessive or unauthorized permissions.
02
Compliance Officer
Relies on the capability to ensure application permissions meet regulatory standards.
03
App Developer
Checks their own app's permission profile against the official registry.

FAQ

Questions App Permission Review owners ask.

01
What does this MCP do?
This MCP audits application permissions by comparing them against a registry of approved permission sets to find security and privacy risks.
02
How are permissions categorized?
The capability categorizes permissions into three statuses: keep, review, or revoke.
03
Can I check if a permission is valid?
Yes, you can use the search capability to check if a specific permission string exists within the global domain context.
04
Which AI clients can use this MCP?
You can use this MCP with any compatible client like Claude, Cursor, Windsurf, or VS Code.
05
Do I need to host the MCP myself?
No, Vinkius hosts and manages the MCP for you. You just connect your client and start using the capabilities.
06
How do I audit a specific application?
You can use the analyze_app_permissions capability by providing the application name and the list of permissions you want to check.
07
What does 'Review' status mean?
A 'Review' status indicates that the application has requested a permission that is not found in its official required permission list, signaling a potential security risk.
08
Can I see all available apps in the registry?
Yes, use the list_all_apps capability to retrieve a directory of all applications currently managed within the permission registry.

Explore

More in Security

Connect App Permission Review to Claude, Cursor, ChatGPT & more

Your AI does the work. We keep it safe and sound.

Each Connector runs inside its own sealed environment.

One switch stops every agent. Instantly.

Spending limits that pause instead of surprise.

We ship only the actions that matter.

01-04

List all apps

Get app requirements

Search permission by name

Analyze app permissions

What teams actually run

Security Auditing

Compliance Monitoring

Permission Validation

App Inventory Management

Building your own app? The connector is yours to use.

App Permission Review Connector

Claude Desktop

Security Auditor

Compliance Officer

App Developer

What does this MCP do?

How are permissions categorized?

Can I check if a permission is valid?

Which AI clients can use this MCP?

Do I need to host the MCP myself?

How do I audit a specific application?

What does 'Review' status mean?

Can I see all available apps in the registry?

Enterprise Security Review Timeline AI Connector

Security Audit Prover AI Connector

Family Account Permission Matrix AI Connector

Shared Folder Access Audit AI Connector

Suggestions

Apple App Store AI Connector

Scytale (Security Compliance Automation) AI Connector

HCL AppScan AI Connector

AppGallery Connect AI Connector