• ACCESS
  • USERS
  • GAP
  • HUMAN

How to audit document access permissions with your AI

Connect Legito to your agent to run permission checks across your contract repository. Once connected, you can ask for specific access lists or user roles.

Ask AI about this page

Short answer

How can I audit document access permissions with my AI?

Your agent uses Legito to pull user lists and check specific document shares or individual permissions. This lets you quickly identify who has access to sensitive contracts without manual searching. You'll get a clear breakdown of access rights and any permission gaps.

Audit outcomes

Where your findings land.

The agent organizes its findings into these specific categories.

ACCESS

Permission maps

The agent identifies exactly which users or groups have viewing or editing rights to a specific contract.

USERS

User lists

You get a clean list of all users within the system to cross-reference against your authorized personnel.

GAP

Security gaps

The agent flags instances where unauthorized users or broad groups have access to restricted documents.

HUMAN

Manual review

You decide which permissions to revoke or change based on the agent's findings.

The workflow

What your AI does when the request arrives.

The agent moves through your Legito data to build a complete picture of document security.

  1. Identify users

    The agent pulls a full list of people in your Legito environment to establish a baseline for the audit.

    list_users

  2. Check document shares

    The agent looks at the specific sharing settings for the contract you are auditing.

    get_shares

  3. Verify individual rights

    The agent checks the specific permission levels assigned to individual users or groups.

    get_user_permissions

  4. Report findings

    The agent compiles the gathered data into a summary of who can see what.

    get_user_permissions

Try it

Copy these to start.

Use these prompts to kick off your audit.

Starting points

Swap out the contract names or user IDs for the ones you actually need to check.

Legito Connector

You're all set. Choose your MCP client and follow the setup instructions.

Connector linkhttps://edge.vinkius.com/vk_preview_f92c5v8FhPppIYVgYx3InXXsvcs6iBcNrTfQAm4A/mcp

Claude Desktop

Follow the steps below to connect in seconds.

  1. 1In Claude Desktop, open Settings → Connectors.
  2. 2Click “Add custom connector” and paste the connector link above as the remote MCP server URL.
  3. 3Click Add and start a new chat — Legito capabilities are ready to use.
Configuration · claude_desktop_config.jsonCopy
{
  "mcpServers": {
    "legito-mcp": {
      "url": "https://edge.vinkius.com/vk_preview_f92c5v8FhPppIYVgYx3InXXsvcs6iBcNrTfQAm4A/mcp"
    }
  }
}
Copy into chat04

  • Who has access to the 'Master Service Agreement' in Legito?

  • List all users in Legito and tell me if any have access to the 'Vendor Contract' folder.

  • Check the permissions for user 'jdoe@company.com' on the 'Lease Agreement' document.

  • Show me all the groups that have sharing access to the 'Q4 Sales Contracts'.

  • Claude
  • ChatGPT
  • Cursor
  • VS Code
  • Windsurf
  • Claude Code
  • JetBrains
  • Cline

Start here

Connect Legito once, then ask.

Just link your account once. Your credentials stay encrypted, and you can immediately start asking questions about your contracts.

Connect Legito to your AI

FAQ

How the audit behaves

  • 01

    Can my AI change document permissions?

    No. The agent can only read and report on existing permissions. You must make any changes manually in Legito.

  • 02

    Can the AI delete users from Legito?

    No. The agent has no capability to delete users or modify account settings.

  • 03

    How does the AI know which users exist?

    It uses the list_users tool to pull the current user directory from your Legito account.

  • 04

    Can I audit a specific folder's permissions?

    Yes, by asking the agent to check the shares and permissions for documents within that folder.

  • 05

    Does the AI see all my contract content?

    The agent focuses on the permission and sharing metadata. It doesn't need to read the full text of the contract to tell you who can see it.

  • More questions about Legito? The Connector page answers them. See everything the Legito Connector can do

Connect Legito to Claude, Cursor, ChatGPT & more