Aserto Connector for AI agents.
7 live capabilities
Manage and audit fine-grained access control policies with Rego.
Waiting for input…
Why people use Aserto
Aserto for Fine-Grained Access Control Auditing
This Connector changes that. You can just ask your agent to check a permission or pull a log. It handles the heavy lifting of interacting with the API, giving you a direct line to your authorization data without the friction of manual capability switching.
What Vinkius changes
You get a direct line to your Aserto policies without the manual overhead of switching capabilities.
Use it from Claude, ChatGPT, Cursor or another AI client you already have.
One account · 5,900+ Connectors
- Real-world use case 01
Debugging a 'Permission Denied' error
A developer asks the agent why a user can't access a file.
- Real-world use case 02
Quick security auditing
A compliance officer asks to see the last 50 decisions to verify a recent change.
- Real-world use case 03
Syncing policies to the edge
An engineer needs to push a new policy to a specific Edge Authorizer.
Complete set · 7capabilities
The complete Aserto capability set.
These are the exact actions your AI can choose when you ask it to work with Aserto.
01—04
4 capabilities in this set.
Part of 7 available through Aserto.
- 01 Capability
List decision logs
List available decision log storage objects. Use this to see what audit logs are available for your policies.
- 02 Capability
Authz decisiontree
Get decision tree values across all policy modules. This is useful for seeing the exact logic path of a policy.
- 03 Capability
Authz is
Determine if a user is authorized to perform an action. Use this to check permissions instantly.
- 04 Capability
Authz query
Execute a general Rego query against the Authorizer. Use this to inspect policy data or evaluate complex logic.
05—07
3 capabilities in this set.
Part of 7 available through Aserto.
- 05 Capability
Control plane exec
Send commands to a connected Edge Authorizer. This helps you sync policy instances or directories quickly.
- 06 Capability
Get decision log
Retrieve a signed download URL for a specific log object. Use this to grab specific audit data.
- 07 Capability
Query decision logs
Query the last N decisions from decision logs. This is great for a quick look at recent authorization events.
Set up in minutes
One URL. Then ask Aserto to work.
Claude and ChatGPT only need the Connector URL. Copy it once, add it in settings, and use Aserto from the conversation.
Choose your client
Live previewAdvanced clients IDE · CLI
Claude · Web + desktop
Connector URL · ready to paste
Streamable HTTPhttps://edge.vinkius.com/vk_preview_XOpJU2PJe7LAxPuGtGU6XTuW4mAiWsbg1RviddXw/mcp - Step 01
Open Connectors
In Claude Web or Claude Desktop, open Settings and choose Connectors.
- Step 02
Add the URL
Choose Add custom connector, name it Aserto, and paste the URL above.
- Step 03
Turn it on in chat
Select +, open Connectors, and enable Aserto for the conversation.
ChatGPT · Web + desktop
Connector URL · ready to paste
Streamable HTTPhttps://edge.vinkius.com/vk_preview_XOpJU2PJe7LAxPuGtGU6XTuW4mAiWsbg1RviddXw/mcp - Step 01
Open MCP settings
On desktop, open Settings and MCP servers. On web, open your workspace app or connector settings.
- Step 02
Add the URL
Choose Add server with Streamable HTTP, or create a custom MCP app, then paste the Aserto URL.
- Step 03
Save and start
Save the connection and enable Aserto in your conversation. Desktop may ask you to restart once.
Cursor · IDE configuration
Advanced setup
{
"mcpServers": {
"aserto": {
"url": "https://edge.vinkius.com/vk_preview_XOpJU2PJe7LAxPuGtGU6XTuW4mAiWsbg1RviddXw/mcp"
}
}
} - Step 01
Open MCP Settings
Press Cmd+Shift+P (macOS) or Ctrl+Shift+P (Windows/Linux) → search "MCP Settings"
- Step 02
Add the server config
Paste the JSON configuration above into the mcp.json file that opens
- Step 03
Save the file
Cursor will automatically detect the new Connector
- Step 04
Start using Aserto
Open Agent mode in chat and ask: "Using Aserto, help me...". 7 tools available
VS Code Copilot · IDE configuration
Advanced setup
{
"mcpServers": {
"aserto": {
"url": "https://edge.vinkius.com/vk_preview_XOpJU2PJe7LAxPuGtGU6XTuW4mAiWsbg1RviddXw/mcp"
}
}
} - Step 01
Create MCP config
Create a .vscode/mcp.json file in your project root
- Step 02
Add the server config
Paste the JSON configuration above
- Step 03
Enable Agent mode
Open GitHub Copilot Chat and switch to Agent mode using the dropdown
- Step 04
Start using Aserto
Ask Copilot: "Using Aserto, help me...". 7 tools available
Windsurf · IDE configuration
Advanced setup
{
"mcpServers": {
"aserto": {
"url": "https://edge.vinkius.com/vk_preview_XOpJU2PJe7LAxPuGtGU6XTuW4mAiWsbg1RviddXw/mcp"
}
}
} - Step 01
Open MCP Settings
Go to Settings → MCP Configuration or press Cmd+Shift+P and search "MCP"
- Step 02
Add the server
Paste the JSON configuration above into mcp_config.json
- Step 03
Save and reload
Windsurf will detect the new server automatically
- Step 04
Start using Aserto
Open Cascade and ask: "Using Aserto, help me...". 7 tools available
Cline · IDE configuration
Advanced setup
{
"mcpServers": {
"aserto": {
"url": "https://edge.vinkius.com/vk_preview_XOpJU2PJe7LAxPuGtGU6XTuW4mAiWsbg1RviddXw/mcp"
}
}
} - Step 01
Open Cline MCP Settings
Click the Connectors icon in the Cline sidebar panel
- Step 02
Add remote server
Click "Add Connector" and paste the configuration above
- Step 03
Enable the server
Toggle the server switch to ON
- Step 04
Start using Aserto
Ask Cline: "Using Aserto, help me...". 7 tools available
Claude Code · Terminal command
Advanced setup
claude mcp add aserto --transport http "https://edge.vinkius.com/vk_preview_XOpJU2PJe7LAxPuGtGU6XTuW4mAiWsbg1RviddXw/mcp" - Step 01
Install Claude Code
Run npm install -g @anthropic-ai/claude-code if not already installed
- Step 02
Add the Connector
Run the command above in your terminal
- Step 03
Verify the connection
Run claude mcp to list connected servers, or type /mcp inside a session
- Step 04
Start using Aserto
Ask Claude: "Using Aserto, show me...". 7 tools are ready
Where the request belongs
Work Aserto can move forward.
This is for security engineers and backend developers who are tired of manual API calls to verify permissions or hunt through Rego files to debug access issues.
Security Engineer
Tests policy changes and verifies authorization logic in real-time without manual API calls.
Backend Developer
Integrates and debugs fine-grained access control during the development lifecycle.
Compliance Officer
Audits decision logs and verifies that access control policies meet regulatory requirements.
Build the capability set
Add more capabilities.
Each Connector adds new actions and data without changing how you work.
Browse ConnectorsCerbos (Access Control)
Decouple authorization from your code. Manage policies, check permissions, and audit access control directly through your AI agent.
Cerbos
Decouple authorization logic from your application. Evaluate permissions, generate query plans, and manage access control via AI.
Permit.io
Orchestrate full-stack authorization, manage RBAC/ReBAC policies, and evaluate permissions in real-time via Permit.io.
Authing
Cloud-native identity and access management platform. manage users, roles, and security logs via AI.
OpenFGA (Fine-Grained Auth)
Manage fine-grained authorization with OpenFGA. create stores, define authorization models, and manage relationship tuples directly from your AI agent.
Permify
Manage fine-grained authorization and access control via Permify. write schemas, manage relation tuples, and perform real-time permission checks.
Bring your own AI
Change the model, client or framework. Keep Aserto connected.
-
Claude -
ChatGPT -
Gemini -
Cursor -
VS Code -
Windsurf -
ZCode -
Cline -
Zed -
Continue -
Kiro -
Roo Code -
Zencoder -
Goose -
Void -
Augment Code -
Amp -
Qodo -
Tabnine -
Pieces -
Sourcegraph Cody -
JetBrains -
Warp -
Amazon Q -
Antigravity -
BoltAI -
Raycast -
Jan -
LM Studio -
AnythingLLM -
Open WebUI -
Msty -
Cherry Studio -
LibreChat -
TypingMind -
Chorus -
5ire -
n8n -
LangChain -
LlamaIndex -
CrewAI -
Vercel AI SDK
Before you connect
Questions about Aserto.
The practical details behind the request, access and result.
What is the Aserto MCP for?
The Aserto MCP lets you manage and evaluate fine-grained access control policies using natural language. You can check permissions, run Rego queries, and audit logs through your AI agent.
Can I use Aserto MCP to check if a user has permission?
Yes, you can ask your agent to check if a specific user is authorized to perform an action. It will evaluate the current policy and give you a direct answer.
Does the Aserto MCP support Rego queries?
Yes, it allows you to execute custom Rego queries against your authorizer. This is great for inspecting policy data or testing complex logic.
How do I audit my authorization decisions with Aserto MCP?
You can ask your agent to list or query your decision logs. It will pull the recent events so you can see who was allowed or denied access.
Is Aserto MCP good for security engineers?
It's perfect for security engineers because it removes the need for manual API calls. You can verify policy changes and audit logs much faster.
Can I use Aserto MCP to manage my control plane?
Yes, it can send commands to your connected Edge Authorizers. This makes it easy to sync policy instances or directories via your AI agent.
How do I verify a specific permission for a user?
Use the authz_is capability. You need to provide the identity context (user), the policy context (the path to the rule), and any relevant resource context to get a boolean decision.
Can I execute complex Rego logic through the agent?
Yes! The authz_query capability allows you to run any valid Rego query against your authorizer, enabling you to inspect data or evaluate custom logic on the fly.
Is it possible to trigger a policy sync on an Edge Authorizer?
Yes. Use the control_plane_exec capability with the instance ID and the appropriate command (e.g., {"discovery": {}}) to manage your connected authorizers.
One connection away
Give your agent a direct line to Aserto.
Connect Aserto once. Keep it beside 5,900+ managed Connectors when the next task needs more.
Explore every Connector No credit card required · Free tier available