Use Cerbos with your AI.
Connect your account once and let the AI you already use work with it, without building another integration. Decouple authorization from your code. Manage policies, check permissions, and audit access control directly through your AI agent.
Developed, maintained, and hosted by Vinkius.
MCP VERIFIED · PRODUCTION READY · VINKIUS GUARANTEED
Waiting for input…
Works with modern AI clients that support MCP, including ChatGPT, Claude, Cursor, and more.
Complete set · 19 capabilities
The complete Cerbos capability set.
These are the exact actions your AI can choose when you ask it to work with Cerbos.
01-04
4 capabilities in this set.
Part of 19 available through Cerbos.
- 01
Get policy
Get a specific policy by ID
- 02
Get schema
Get a specific schema by ID
- 03
Get authzen config
Get AuthZEN configuration metadata
- 04
Authzen evaluations
Perform batch AuthZEN access evaluations
05-08
4 capabilities in this set.
Part of 19 available through Cerbos.
- 05
Delete policy
Delete a policy by ID
- 06
Disable policy
Disable a policy
- 07
Enable policy
Enable a policy
- 08
Get server info
Get Cerbos server version and build information
09-12
4 capabilities in this set.
Part of 19 available through Cerbos.
- 09
List audit logs
List audit logs
- 10
List policies
List all policies
- 11
List schemas
List all schemas
- 12
Update policy
Update an existing policy
13-16
4 capabilities in this set.
Part of 19 available through Cerbos.
- 13
Add policy
Add a new policy
- 14
Add schema
Add or update a schema
- 15
Authzen evaluation
Perform a single AuthZEN access evaluation
- 16
Check resources
Check permissions for a set of resources
17-19
3 capabilities in this set.
Part of 19 available through Cerbos.
- 17
Get health
Get Cerbos health status
- 18
Get metrics
Get Prometheus metrics from Cerbos
- 19
Plan resources
Produce a query plan (AST) for filtering resources
Observed, not estimated
936ms average. Fast in production.
Cerbos is checked daily against the live service.
- Fastest day
- 796ms
- Slowest day
- 1134ms
- 14-day trend
- Stable-2%
Connect your client
One URL. Every client.
Activate the Connector, copy your link, and paste it into the client you already use. 19 capabilities arrive ready to run.
Preview access · not provider authentication
The vk_preview_* token belongs to Vinkius preview infrastructure. It lets Claude discover and display the capabilities of Cerbos, so you can see the experience inside your AI.
It does not authenticate your account with Cerbos. Actions requiring credentials or live account data may not run until you activate the Connector and authorize the service.
Cerbos Connector
You're all set. Choose your MCP client and follow the setup instructions.
https://edge.vinkius.com/vk_preview_InOwgNCcuNoJDDtlbw3Rpbk72NQ9Y39enLJWWQOg/mcpClaude Desktop
Follow the steps below to connect in seconds.
- 1In Claude Desktop, open Settings → Connectors.
- 2Click “Add custom connector” and paste the connector link above as the remote MCP server URL.
- 3Click Add and start a new chat — Cerbos capabilities are ready to use.
{
"mcpServers": {
"cerbos-access-control-mcp": {
"url": "https://edge.vinkius.com/vk_preview_InOwgNCcuNoJDDtlbw3Rpbk72NQ9Y39enLJWWQOg/mcp"
}
}
}
Claude
ChatGPT
Cursor
VS Code
Windsurf
Claude Code
JetBrains
Cline
Step-by-step instructions for each client are in the guide. How to connect
FAQ
Questions Cerbos owners ask.
- 01
Can I test if a specific user has access to a resource without writing code?
Yes. You can ask the agent to use the check_resources capability by providing the principal (user) details and the resource you want to check. The agent will return the allowed or denied status based on your Cerbos policies.
- 02
How do I view all the authorization policies currently loaded in my Cerbos server?
Simply ask the agent to 'list all policies'. It will invoke the list_policies capability (requires Admin credentials) and display the IDs of all active policies in your environment.
- 03
Can the AI help me generate filters for my database based on permissions?
Yes, by using the plan_resources capability. The agent will generate a query plan (AST) that describes the conditions under which a user is allowed to access resources, which you can then apply to your database queries.
Explore
More in Developer Tools
Permit.io AI Connector
Orchestrate full-stack authorization, manage RBAC/ReBAC policies, and evaluate permissions in real-time via Pe
ViewPermify AI Connector
Manage fine-grained authorization and access control via Permify — write schemas, manage relation tuples, and
ViewPermify AI Connector
Manage fine-grained authorization and access control via Permify — write schemas, manage relation tuples, and
ViewOpenFGA (Fine-Grained Auth) AI Connector
Manage fine-grained authorization with OpenFGA — create stores, define authorization models, and manage relati
View
Suggestions
Logz.io AI Connector
Query logs, manage alerts, and monitor triggered events in Logz.io directly from your AI agent using Elasticse
ViewHive (Project Management) AI Connector
Manage projects via Hive — create actions, track initiatives, and organize workspaces.
ViewFlinks AI Connector
Connect to financial institutions to aggregate banking data, verify income, and perform deep transaction analy
ViewAuthorize.net AI Connector
Process cards, manage refunds, capture holds, and inspect settled transactions on Authorize.net directly from
View
