- SECURITY
- HEALTH
- METRICS
- HUMAN
Short answer
How can I audit Cerbos using an AI?
Your AI client uses the Cerbos MCP to pull audit logs and system metrics. You can then ask your agent to identify security anomalies or check if the engine is healthy.
Where your data goes.
Audit and monitoring outcomes
The AI processes raw Cerbos data into these specific areas.
SECURITY
Audit log reviews
The AI pulls logs to find unauthorized access attempts or policy failures. You get a clear picture of who did what and when.
HEALTH
Engine status checks
Your agent monitors system health and server info. It flags when the engine is struggling or behaving unexpectedly.
METRICS
Performance tracking
The AI analyzes system metrics to show you how the engine is performing under load.
HUMAN
Manual intervention
The AI identifies issues but won't change your policies. You still handle all policy updates and configuration changes.
The workflow
What your AI does when the data arrives.
The AI acts as a bridge between your Cerbos instance and your chat interface.
Gathering logs
The agent pulls the latest access history to see recent policy decisions.
list_audit_logsChecking engine health
It checks the current status of the Cerbos engine to ensure everything is running.
get_healthAnalyzing performance
The AI looks at system metrics to find patterns in engine usage.
get_metricsVerifying environment
It pulls server info to confirm the engine is running on the expected setup.
get_server_info
Try it
Copy these to start.
Use these prompts to kick off your audit.
Starting points
These are just ideas. Swap out the specific details like time ranges or error types to fit your needs.
Cerbos Connector
You're all set. Choose your MCP client and follow the setup instructions.
https://edge.vinkius.com/vk_preview_InOwgNCcuNoJDDtlbw3Rpbk72NQ9Y39enLJWWQOg/mcpClaude Desktop
Follow the steps below to connect in seconds.
- 1In Claude Desktop, open Settings → Connectors.
- 2Click “Add custom connector” and paste the connector link above as the remote MCP server URL.
- 3Click Add and start a new chat — Cerbos capabilities are ready to use.
{
"mcpServers": {
"cerbos-access-control-mcp": {
"url": "https://edge.vinkius.com/vk_preview_InOwgNCcuNoJDDtlbw3Rpbk72NQ9Y39enLJWWQOg/mcp"
}
}
}Show me the last 50 audit logs from Cerbos.
Is the Cerbos engine currently healthy?
Check the latest metrics and tell me if there are any spikes in latency.
Get the server info and summarize the current engine status.
Claude
ChatGPT
Cursor
VS Code
Windsurf
Claude Code
JetBrains
Cline
Start here
Connect Cerbos once, then ask.
One connection is all it takes. Your credentials stay encrypted, and you can immediately start asking your agent about your Cerbos setup.
Connect Cerbos to your AIFAQ
How this task behaves
- 01
Can the AI change my Cerbos policies?
No. The AI can only read logs, health, and metrics. It cannot modify your security policies or configurations.
- 02
Can the AI delete audit logs?
No. The tools only allow for retrieving data, not deleting or altering logs.
- 03
How often does the AI check the engine status?
The AI only checks the status when you specifically ask it to or when you give it a prompt to do so.
- 04
Can I use this with Claude?
Yes, as long as you are using an MCP-compatible client like Claude Desktop.
- 05
Does the AI see my actual user passwords?
No. The AI only sees the data provided by the audit logs and metrics tools.
More questions about Cerbos? The Connector page answers them. See everything the Cerbos Connector can do
Connect Cerbos to Claude, Cursor, ChatGPT & more
