- COMPLIANCE
- SECURITY
- OPERATIONS
- HUMAN
Short answer
How can I audit access decisions using AI?
Your AI pulls historical logs from Aserto to identify unusual access patterns or compliance gaps. It then summarizes these events into actionable reports for your security reviews.
Where every issue lands.
Audit outcomes
The AI processes log data into these specific categories.
COMPLIANCE
Audit-ready reports
The AI scans logs for specific authorization patterns and creates summaries that prove your access policies are working as intended.
SECURITY
Anomaly detection
Your agent flags unexpected access requests or repeated denials that suggest a potential security risk or misconfiguration.
OPERATIONS
Access pattern analysis
It identifies how users and services interact with your permissions, helping you clean up over-privileged accounts.
HUMAN
Manual review triggers
When the AI finds high-risk discrepancies it cannot resolve, it flags them for you to investigate personally.
The workflow
What your AI does when the logs arrive.
The AI moves from raw data retrieval to high-level analysis.
Gathering logs
The AI pulls a list of recent authorization events to establish a baseline for your audit.
list_decision_logsFiltering data
It searches through specific timeframes or user IDs to find the exact events you need to inspect.
query_decision_logsDeep inspection
The agent pulls the full details of a specific decision to understand why access was granted or denied.
get_decision_logReporting
The AI synthesizes the findings into a summary of compliance status and security risks.
query_decision_logs
Try it
Copy these to start.
Use these prompts to begin your audit.
Starting points
Replace the bracketed text with your specific user IDs, service names, or time ranges.
Aserto Connector
You're all set. Choose your MCP client and follow the setup instructions.
https://edge.vinkius.com/vk_preview_XOpJU2PJe7LAxPuGtGU6XTuW4mAiWsbg1RviddXw/mcpClaude Desktop
Follow the steps below to connect in seconds.
- 1In Claude Desktop, open Settings → Connectors.
- 2Click “Add custom connector” and paste the connector link above as the remote MCP server URL.
- 3Click Add and start a new chat — Aserto capabilities are ready to use.
{
"mcpServers": {
"aserto-mcp": {
"url": "https://edge.vinkius.com/vk_preview_XOpJU2PJe7LAxPuGtGU6XTuW4mAiWsbg1RviddXw/mcp"
}
}
}Show me all decision logs from the last 24 hours to check for recent access spikes.
Find all denied access decisions for user 'admin-service-01' from yesterday.
Analyze the decision logs for the 'payments-api' to see if any unauthorized users tried to connect.
Get the full details for the last five decision logs to verify the policy applied.
Claude
ChatGPT
Cursor
VS Code
Windsurf
Claude Code
JetBrains
Cline
Start here
Connect Aserto once, then ask.
One connection gives your AI direct access to your Aserto logs. Your credentials stay encrypted and secure.
Connect Aserto to your AIFAQ
How this task behaves
- 01
Can the AI change my Aserto permissions?
No. The AI can only read and analyze logs. It cannot modify your authorization policies or user permissions.
- 02
Can the AI delete old decision logs?
No. The tools only allow for retrieving and querying existing logs. Deletion is not possible through this MCP.
- 03
How does the AI handle large volumes of logs?
The AI uses query tools to filter and narrow down the data before analyzing it, preventing it from getting overwhelmed by raw data.
- 04
Does the AI see my actual passwords?
No. The decision logs contain authorization metadata, not sensitive credentials like passwords.
- 05
Can I use this to automate my weekly compliance report?
Yes. You can ask your AI to pull the same set of logs every week and summarize the findings for you.
More questions about Aserto? The Connector page answers them. See everything the Aserto Connector can do
Connect Aserto to Claude, Cursor, ChatGPT & more
