• NEW
  • EDIT
  • TOGGLE
  • HUMAN

How to manage authorization policies with your AI

Connect Cerbos to your AI client to handle access control through chat. You can modify security rules without touching the Cerbos console or writing raw policy files.

Ask AI about this page

Short answer

Can I manage Cerbos policies using my AI?

Yes. You can use your AI to add new rules, change existing ones, or turn specific policies on and off. This gives you a direct way to adjust permissions using plain English.

Policy outcomes

What your AI accomplishes

Your AI handles the technical execution of policy changes.

NEW

Instant rule creation

The AI uses add_policy to set up new authorization logic based on your description. You get new security rules without manual JSON drafting.

EDIT

Live rule updates

Modify existing permissions on the fly. The AI applies changes to your current setup using update_policy.

TOGGLE

Status control

Quickly enable or disable specific policies. This lets you freeze or reactivate access rules instantly.

HUMAN

Manual oversight

You retain full control over the final policy state. The AI performs the technical execution, but you decide which rules stay active.

The workflow

What your AI does when a policy request arrives.

The AI translates your intent into specific Cerbos actions.

  1. Drafting new rules

    When you describe a new permission requirement, the AI builds the policy structure and pushes it to Cerbos.

    add_policy
  2. Modifying permissions

    If a rule needs to change, the AI identifies the target policy and applies your requested edits.

    update_policy
  3. Removing access

    You can tell the AI to strip a policy entirely if it's no longer needed for your application.

    delete_policy
  4. Toggling status

    The AI can flip the switch on a policy to make it active or inactive without deleting the underlying logic.

    enable_policydisable_policy

Try it

Copy these to start.

Use these prompts to trigger Cerbos actions.

Starting points

Swap out the bracketed text for your actual policy names or user roles.

Cerbos Connector

You're all set. Choose your MCP client and follow the setup instructions.

Connector linkhttps://edge.vinkius.com/vk_preview_InOwgNCcuNoJDDtlbw3Rpbk72NQ9Y39enLJWWQOg/mcp

Claude Desktop

Follow the steps below to connect in seconds.

  1. 1In Claude Desktop, open Settings → Connectors.
  2. 2Click “Add custom connector” and paste the connector link above as the remote MCP server URL.
  3. 3Click Add and start a new chat — Cerbos capabilities are ready to use.
Configuration · claude_desktop_config.jsonCopy
{
  "mcpServers": {
    "cerbos-access-control-mcp": {
      "url": "https://edge.vinkius.com/vk_preview_InOwgNCcuNoJDDtlbw3Rpbk72NQ9Y39enLJWWQOg/mcp"
    }
  }
}
Copy into chat04
  • Add a new policy called [policy_name] that allows [role] to [action] on [resource].

  • Disable the [policy_name] policy immediately.

  • Update the [policy_name] policy to allow [new_role] access.

  • Delete the [policy_name] policy from Cerbos.

  • Claude
  • ChatGPT
  • Cursor
  • VS Code
  • Windsurf
  • Claude Code
  • JetBrains
  • Cline

Start here

Connect Cerbos once, then ask.

One connection link is all you need. Your credentials stay encrypted, and you can start managing policies in any MCP-compatible client immediately.

Connect Cerbos to your AI

FAQ

How the Cerbos Connector behaves

  • 01

    Can the AI delete my entire policy set?

    No. The AI can only delete specific policies that you explicitly name in your prompt.

  • 02

    Does the AI write the JSON for me?

    Yes. You provide the intent in plain English, and the AI handles the technical policy structure.

  • 03

    Can the AI change my user database?

    No. This connector only manages Cerbos policies, not your external user or identity provider data.

  • 04

    Can I undo a policy change made by the AI?

    Yes, you can ask the AI to update or re-enable a policy to revert to a previous state.

  • 05

    Will the AI automatically create policies without my permission?

    No. The AI only executes actions when you give it a direct command.

  • More questions about Cerbos? See everything the Cerbos Connector can do

Connect Cerbos to Claude, Cursor, ChatGPT & more