• ROLE CHECK
  • MFA STATUS
  • ACCESS MAP
  • HUMAN ACTION

How to audit user permissions with your AI

Connect Logto to your agent to start querying your user database. You can check specific roles or MFA settings through a simple chat interface.

Ask AI about this page

Short answer

Can my AI check Logto user permissions?

Yes. Your agent uses Logto tools to pull lists of user roles and MFA verification statuses. You'll get a clear view of who has access and who hasn't enabled multi-factor authentication.

Audit outcomes

Security insights

Your agent pulls data from Logto to highlight specific risks.

ROLE CHECK

Identify privileged users

The AI pulls role data to show you exactly which users hold administrative permissions.

MFA STATUS

Spot security gaps

Your agent checks which accounts lack multi-factor authentication, showing you where to enforce stricter rules.

ACCESS MAP

Verify permission logic

By comparing roles against users, your AI confirms that your permission hierarchy is working as intended.

HUMAN ACTION

Review and remediate

The AI flags the risks, but you decide which roles to strip or which users to force into MFA enrollment.

The workflow

What your AI does when the request arrives.

Your agent acts as a bridge between your chat interface and the Logto API.

  1. Fetch role definitions

    The agent looks up all available roles in your Logto instance to understand the permission structure.

    list_roles

  2. Map roles to users

    It scans your user list to see which specific individuals are assigned to each role.

    list_user_roles

  3. Check MFA compliance

    The agent pulls verification data to see if users have set up their secondary security layers.

    list_mfa_verifications

  4. Summarize findings

    The AI organizes the role and MFA data into a readable report for your review.

    list_user_roleslist_mfa_verifications

Try it

Copy these to start.

Use these prompts to kick off your audit.

Starting points

These are opening lines. Swap out the specific user names or role titles to match your actual Logto setup.

Logto Connector

You're all set. Choose your MCP client and follow the setup instructions.

Connector linkhttps://edge.vinkius.com/vk_preview_u6lgjC60ylv2DAB2TNiAX6cACbdDwEdBFrHQ2LmZ/mcp

Claude Desktop

Follow the steps below to connect in seconds.

  1. 1In Claude Desktop, open Settings → Connectors.
  2. 2Click “Add custom connector” and paste the connector link above as the remote MCP server URL.
  3. 3Click Add and start a new chat — Logto capabilities are ready to use.
Configuration · claude_desktop_config.jsonCopy
{
  "mcpServers": {
    "logto-auth-platform-mcp": {
      "url": "https://edge.vinkius.com/vk_preview_u6lgjC60ylv2DAB2TNiAX6cACbdDwEdBFrHQ2LmZ/mcp"
    }
  }
}
Copy into chat04

  • Show me all users who have the admin role.

  • Which users in Logto do not have MFA enabled?

  • List all the roles currently defined in my Logto instance.

  • Check the MFA status for user alex@example.com.

  • Claude
  • ChatGPT
  • Cursor
  • VS Code
  • Windsurf
  • Claude Code
  • JetBrains
  • Cline

Start here

Connect Logto once, then ask.

Just link your Logto account to Vinkius. Your credentials stay encrypted, and you can immediately start asking your agent about your users.

Connect Logto to your AI

FAQ

How this task behaves

  • 01

    Can my AI change user roles?

    No. The current tools only allow the AI to list and read roles and MFA status. You must manually change permissions in the Logto dashboard.

  • 02

    Can the AI delete users?

    No. This MCP is designed for auditing and visibility. It does not have tools to delete or modify user accounts.

  • 03

    Does the AI see my Logto password?

    No. Your connection is handled securely, and the AI only interacts with the data exposed by the specific tools.

  • 04

    Can I audit specific users one by one?

    Yes. You can ask the agent to check the roles or MFA status for a specific email address.

  • 05

    How does the AI know which roles exist?

    It uses the list_roles tool to pull the full directory of roles from your Logto instance.

  • More questions about Logto? The Connector page answers them. See everything the Logto Connector can do

Connect Logto to Claude, Cursor, ChatGPT & more