• CONTAINMENT
  • AUDIT
  • VERIFICATION
  • HUMAN

How to terminate active privileged sessions with your AI

Connect CyberArk Privilege Cloud to your AI client to stop unauthorized access the moment you spot it.

Ask AI about this page

Short answer

How do I kill a privileged session using my AI?

Tell your AI to terminate the specific session ID or user session via CyberArk. It uses the terminate_session tool to cut the connection instantly. You get immediate containment of the threat.

Containment outcomes.

Where the action lands.

What happens after you trigger the command.

CONTAINMENT

Session is killed

The terminate_session tool cuts the active connection. The unauthorized user loses access immediately.

AUDIT

Logs are preserved

CyberArk maintains the record of the session and the termination event. Your AI provides the confirmation that the action succeeded.

VERIFICATION

Status is confirmed

Your AI checks the session state to ensure the connection is truly dead. You get a clear status update in your chat.

HUMAN

Manual review needed

The AI stops the session but doesn't investigate the root cause. You still need to perform a full forensic analysis.

The workflow

What your AI does when a session is flagged.

The AI handles the direct execution so you don't have to hunt through the CyberArk console.

  1. Identify the target

    Your AI looks through the active session data to find the specific ID or user that triggered the alert.

    terminate_session

  2. Execute termination

    Once you confirm, the AI sends the command to CyberArk to drop the connection.

    terminate_session

  3. Verify the kill

    The AI checks the session list again to make sure the session is no longer active.

    terminate_session

  4. Report results

    The AI tells you exactly which session was terminated and confirms the success of the command.

    terminate_session

Try it

Copy these to start.

Direct commands to trigger the action.

Starting points

Replace the bracketed text with your specific session IDs or usernames.

CyberArk Connector

You're all set. Choose your MCP client and follow the setup instructions.

Connector linkhttps://edge.vinkius.com/vk_preview_18gJHbsKGjtg9GOn25i2jhe0oFuy772lTZzUa9w1/mcp

Claude Desktop

Follow the steps below to connect in seconds.

  1. 1In Claude Desktop, open Settings → Connectors.
  2. 2Click “Add custom connector” and paste the connector link above as the remote MCP server URL.
  3. 3Click Add and start a new chat — CyberArk capabilities are ready to use.
Configuration · claude_desktop_config.jsonCopy
{
  "mcpServers": {
    "cyberark-privilege-cloud-mcp": {
      "url": "https://edge.vinkius.com/vk_preview_18gJHbsKGjtg9GOn25i2jhe0oFuy772lTZzUa9w1/mcp"
    }
  }
}
Copy into chat04

  • Terminate the active session for user admin_test immediately.

  • Kill session ID 99283 in CyberArk.

  • Find the most recent privileged session for the service account and terminate it.

  • Is session 4452 still active? If so, kill it.

  • Claude
  • ChatGPT
  • Cursor
  • VS Code
  • Windsurf
  • Claude Code
  • JetBrains
  • Cline

Start here

Connect CyberArk Privilege Cloud once, then ask.

Add the CyberArk Privilege Cloud MCP to your client with one click. Your credentials stay encrypted and secure on our side.

Connect CyberArk Privilege Cloud to your AI

FAQ

How the termination task behaves

  • 01

    Can the AI create new privileged accounts?

    No. This MCP only has the capability to terminate existing sessions.

  • 02

    Does the AI need my CyberArk password?

    No. You connect the MCP via Vinkius, and your credentials are managed securely without being exposed to the AI model.

  • 03

    Will the AI automatically kill sessions if it sees something suspicious?

    No. The AI only acts when you explicitly tell it to terminate a session.

  • 04

    Can the AI delete the audit logs after a session is killed?

    No. The AI cannot modify or delete logs within CyberArk.

  • 05

    What happens if the session is already closed?

    The tool will return an error stating the session is not active, and the AI will report that to you.

  • More questions about CyberArk Privilege Cloud? The Connector page answers them. See everything the CyberArk Privilege Cloud Connector can do

Connect CyberArk to Claude, Cursor, ChatGPT & more