• SCHEMA UPDATES
  • INSPECTION
  • HUMAN REVIEW
  • AUDIT

How to update authorization models with your AI

Connect Permify to your agent to manage your DSL-based authorization schemas. Once connected, you can modify your permission logic using plain English.

Ask AI about this page

Short answer

Can my AI update my Permify authorization schemas?

Yes. Your agent uses Permify tools to read, list, and write your DSL schemas. You can describe changes in natural language and your agent handles the schema updates.

The outcomes

What you get from the connection

Your agent handles the heavy lifting of schema management.

SCHEMA UPDATES

Direct DSL changes

The AI writes or partially updates your authorization schemas based on your instructions. You get updated permission logic without manual coding.

INSPECTION

Instant schema visibility

Your agent reads and lists existing schemas. You can quickly check how permissions are currently structured.

HUMAN REVIEW

Manual oversight required

The AI proposes changes, but you remain responsible for the final logic. You decide when a schema update is safe to apply.

AUDIT

Schema inventory

The agent can pull a full list of your current schemas. This makes it easy to audit your authorization setup via chat.

The workflow

What your AI does when a schema change is requested.

The agent translates your intent into Permify DSL commands.

  1. Check current state

    The agent looks at your existing authorization setup to understand the current permission structure.

    list_schemas

  2. Draft changes

    The agent prepares the new DSL logic based on the specific permission updates you want to make.

    partial_write_schema

  3. Apply updates

    The agent pushes the new schema configuration to Permify to make the changes live.

    write_schema

  4. Verify results

    The agent pulls the updated schema to ensure the new rules are correctly implemented.

    read_schema

Try it

Copy these to start.

Use these prompts to begin managing your Permify schemas.

Starting points

These are opening lines. Swap out the bracketed text with your actual schema names or specific permission requirements.

Permify Connector

You're all set. Choose your MCP client and follow the setup instructions.

Connector linkhttps://edge.vinkius.com/vk_preview_Lj3zVVVKVoHoqSvO650xPkcUTwv8Ivlhnr8cxNaW/mcp

Claude Desktop

Follow the steps below to connect in seconds.

  1. 1In Claude Desktop, open Settings → Connectors.
  2. 2Click “Add custom connector” and paste the connector link above as the remote MCP server URL.
  3. 3Click Add and start a new chat — Permify capabilities are ready to use.
Configuration · claude_desktop_config.jsonCopy
{
  "mcpServers": {
    "permify-mcp": {
      "url": "https://edge.vinkius.com/vk_preview_Lj3zVVVKVoHoqSvO650xPkcUTwv8Ivlhnr8cxNaW/mcp"
    }
  }
}
Copy into chat04

  • List all my current Permify schemas so I can see what's active.

  • Read the 'user_permissions' schema and tell me how 'admin' roles are defined.

  • Add a new relation to the 'document_access' schema that allows 'editors' to delete files.

  • Update the 'tenant_isolation' schema to include a new 'sub_organization' entity.

  • Claude
  • ChatGPT
  • Cursor
  • VS Code
  • Windsurf
  • Claude Code
  • JetBrains
  • Cline

Start here

Connect Permify once, then ask.

One connection gives your agent access to your Permify environment. Your credentials stay encrypted and secure.

Connect Permify to your AI

FAQ

How the Permify Connector behaves

  • 01

    Can the AI delete my entire schema?

    No. The available tools only allow for reading, listing, writing, or partially updating schemas. There is no tool to delete a schema.

  • 02

    Does the AI decide when to push changes?

    No. The AI performs the actions you request. You control the timing and the content of every schema update.

  • 03

    Can I see the schema before it updates?

    Yes. You can ask the agent to read the schema first so you can review the current state before requesting a change.

  • 04

    Can the AI manage my actual user data?

    No. This MCP is strictly for managing Permify DSL schemas. It does not have tools to manage individual user identities or check specific access requests.

  • 05

    What happens if the DSL syntax is wrong?

    The agent will attempt to write the schema, but the success of the operation depends on Permify accepting the DSL. If the syntax is invalid, the write will fail.

  • More questions about Permify? See everything the Permify Connector can do

Connect Permify to Claude, Cursor, ChatGPT & more