- NEW
- EDIT
- TOGGLE
- HUMAN
Short answer
Can I manage Cerbos policies using my AI?
Yes. You can use your AI to add new rules, change existing ones, or turn specific policies on and off. This gives you a direct way to adjust permissions using plain English.
Policy outcomes
What your AI accomplishes
Your AI handles the technical execution of policy changes.
NEW
Instant rule creation
The AI uses add_policy to set up new authorization logic based on your description. You get new security rules without manual JSON drafting.
EDIT
Live rule updates
Modify existing permissions on the fly. The AI applies changes to your current setup using update_policy.
TOGGLE
Status control
Quickly enable or disable specific policies. This lets you freeze or reactivate access rules instantly.
HUMAN
Manual oversight
You retain full control over the final policy state. The AI performs the technical execution, but you decide which rules stay active.
The workflow
What your AI does when a policy request arrives.
The AI translates your intent into specific Cerbos actions.
Drafting new rules
When you describe a new permission requirement, the AI builds the policy structure and pushes it to Cerbos.
add_policyModifying permissions
If a rule needs to change, the AI identifies the target policy and applies your requested edits.
update_policyRemoving access
You can tell the AI to strip a policy entirely if it's no longer needed for your application.
delete_policyToggling status
The AI can flip the switch on a policy to make it active or inactive without deleting the underlying logic.
enable_policydisable_policy
Try it
Copy these to start.
Use these prompts to trigger Cerbos actions.
Starting points
Swap out the bracketed text for your actual policy names or user roles.
Cerbos Connector
You're all set. Choose your MCP client and follow the setup instructions.
https://edge.vinkius.com/vk_preview_InOwgNCcuNoJDDtlbw3Rpbk72NQ9Y39enLJWWQOg/mcpClaude Desktop
Follow the steps below to connect in seconds.
- 1In Claude Desktop, open Settings → Connectors.
- 2Click “Add custom connector” and paste the connector link above as the remote MCP server URL.
- 3Click Add and start a new chat — Cerbos capabilities are ready to use.
{
"mcpServers": {
"cerbos-access-control-mcp": {
"url": "https://edge.vinkius.com/vk_preview_InOwgNCcuNoJDDtlbw3Rpbk72NQ9Y39enLJWWQOg/mcp"
}
}
}Add a new policy called [policy_name] that allows [role] to [action] on [resource].
Disable the [policy_name] policy immediately.
Update the [policy_name] policy to allow [new_role] access.
Delete the [policy_name] policy from Cerbos.
Claude
ChatGPT
Cursor
VS Code
Windsurf
Claude Code
JetBrains
Cline
Start here
Connect Cerbos once, then ask.
One connection link is all you need. Your credentials stay encrypted, and you can start managing policies in any MCP-compatible client immediately.
Connect Cerbos to your AIFAQ
How the Cerbos Connector behaves
- 01
Can the AI delete my entire policy set?
No. The AI can only delete specific policies that you explicitly name in your prompt.
- 02
Does the AI write the JSON for me?
Yes. You provide the intent in plain English, and the AI handles the technical policy structure.
- 03
Can the AI change my user database?
No. This connector only manages Cerbos policies, not your external user or identity provider data.
- 04
Can I undo a policy change made by the AI?
Yes, you can ask the AI to update or re-enable a policy to revert to a previous state.
- 05
Will the AI automatically create policies without my permission?
No. The AI only executes actions when you give it a direct command.
More questions about Cerbos? See everything the Cerbos Connector can do
Connect Cerbos to Claude, Cursor, ChatGPT & more
