• ACCESS
  • GROUPS
  • SECURITY
  • HUMAN

How to audit user permissions with your AI

Connect Retool to your agent to scan your workspace. Once connected, you can ask your AI to find specific users or check who belongs to which permission group.

Ask AI about this page

Short answer

How can I audit my Retool user permissions using AI?

Your agent pulls the full list of users and group memberships directly from Retool. It then compares these lists against your security requirements to flag any discrepancies. You'll get a clear breakdown of who has access to what.

Where every issue lands.

Audit outcomes

The AI organizes its findings into these specific categories.

ACCESS

User list exports

The agent pulls a complete directory of everyone in your workspace. You get a clean list of names and IDs.

GROUPS

Group membership maps

The AI maps out which users belong to which permission groups. This shows you exactly how access is distributed.

SECURITY

Permission gaps

The agent identifies users who shouldn't be in certain groups. This highlights potential security risks for you to review.

HUMAN

Manual cleanup needed

The AI flags accounts that need your direct attention. You decide whether to remove a user or change their group.

The workflow

What your AI does when the audit starts.

The agent performs a sequence of lookups to build a complete picture of your Retool environment.

  1. Gather user data

    The agent pulls a list of every person registered in your Retool workspace.

    list_users

  2. Map group structures

    The agent retrieves all existing permission groups to understand your hierarchy.

    list_groups

  3. Cross-reference memberships

    The agent checks which users are assigned to which groups to find overlaps or errors.

    list_userslist_groups

  4. Report findings

    The agent presents a summary of users with suspicious or excessive permissions.

    list_users

Try it

Copy these to start.

Use these prompts to kick off your audit.

Starting points

These are opening lines. Swap out the specific group names or user roles to match your Retool setup.

Retool API Connector

You're all set. Choose your MCP client and follow the setup instructions.

Connector linkhttps://edge.vinkius.com/vk_preview_8TOzUk5rwBuCVynRIWiPQzHXexicUKuV93Rui7AI/mcp

Claude Desktop

Follow the steps below to connect in seconds.

  1. 1In Claude Desktop, open Settings → Connectors.
  2. 2Click “Add custom connector” and paste the connector link above as the remote MCP server URL.
  3. 3Click Add and start a new chat — Retool API capabilities are ready to use.
Configuration · claude_desktop_config.jsonCopy
{
  "mcpServers": {
    "retool-mcp": {
      "url": "https://edge.vinkius.com/vk_preview_8TOzUk5rwBuCVynRIWiPQzHXexicUKuV93Rui7AI/mcp"
    }
  }
}
Copy into chat04

  • List all users in my Retool workspace and tell me who is in the Admin group.

  • Check the membership of the 'Developers' group and see if any non-engineers are in it.

  • Show me a list of all users who don't belong to any permission groups.

  • Are there any users in the 'Billing' group that I should know about?

  • Claude
  • ChatGPT
  • Cursor
  • VS Code
  • Windsurf
  • Claude Code
  • JetBrains
  • Cline

Start here

Connect Retool once, then ask.

Just link your Retool account. Your credentials stay encrypted, and you can immediately start asking your agent about your users and groups.

Connect Retool to your AI

FAQ

How this task behaves

  • 01

    Can the AI remove users from groups?

    No. The AI can only read user and group data. You must manually change permissions in Retool.

  • 02

    Can the AI create new permission groups?

    No. The tools only allow the agent to list existing users and groups.

  • 03

    Does the AI see my Retool passwords?

    No. The connection uses secure tokens, and your login credentials are never exposed to the AI.

  • 04

    Can I use this to audit specific user roles?

    Yes. By listing users and groups, the agent can identify which users hold specific group memberships.

  • 05

    Will the AI delete any data in Retool?

    No. This connector is read-only. It cannot delete users, groups, or any other workspace data.

  • More questions about Retool? The Connector page answers them. See everything the Retool Connector can do

Connect Retool API to Claude, Cursor, ChatGPT & more