Permify Connector for AI agents.
21 live capabilities
Manage complex authorization rules and fine-grained access control for your multi-tenant apps.
Waiting for input…
Why people use Permify
Permify for IAM and Access Control Auditing
With this Connector, you can just ask your agent to map out the entire relationship graph. It uses capabilities like `expand_permissions` to instantly show you every subject connected to an entity. You get a clear picture of your security landscape in seconds.
What Vinkius changes
That you get to manage complex security policies using plain English instead of manual configuration.
Use it from Claude, ChatGPT, Cursor or another AI client you already have.
One account · 5,900+ Connectors
- Real-world use case 01
Auditing a security breach
A security engineer needs to know who has access to a leaked document.
- Real-world use case 02
Rapid tenant onboarding
A DevOps lead needs to set up a new client.
- Real-world use case 03
Debugging Access Denied
A developer can't figure out why a user can't edit a page.
Complete set · 21capabilities
The complete Permify capability set.
These are the exact actions your AI can choose when you ask it to work with Permify.
01—04
4 capabilities in this set.
Part of 21 available through Permify.
- 01 Capability
List tenants
See every tenant currently in your Permify instance. Use this to get a bird's-eye view of your multi-tenant setup.
- 02 Capability
Lookup entity
Find out which resources a specific user can actually access. It helps you debug permission denied issues quickly.
- 03 Capability
Lookup subject
Identify which subjects are allowed to perform an action on a specific entity. Use this to audit specific resource access.
- 04 Capability
Read attributes
Query the attributes stored in your system. Use this to see the metadata behind your permission tuples.
05—08
4 capabilities in this set.
Part of 21 available through Permify.
- 05 Capability
Read bundle
Get the details of a specific data bundle. This is helpful for inspecting predefined permission sets.
- 06 Capability
Read relationships
Query the stored relational tuples. Use this to see the raw links between users and resources.
- 07 Capability
Read schema
Inspect a specific version of an authorization schema. This is how you verify the current state of your models.
- 08 Capability
Check permission
Perform a single resource-based authorization check. Use this to see if a specific user can perform a specific action.
09—12
4 capabilities in this set.
Part of 21 available through Permify.
- 09 Capability
Create tenant
Create a brand new Permify tenant. This helps you isolate different client environments instantly.
- 10 Capability
Delete bundle
Remove a predefined bundle of data. Use this to clean up old permission sets or temporary configurations.
- 11 Capability
Delete data
Delete specific relation tuples and attributes. This is useful for removing outdated user-to-resource links.
- 12 Capability
Delete tenant
Delete an entire Permify tenant. Use this to decommission old client environments or test environments.
13—15
3 capabilities in this set.
Part of 21 available through Permify.
- 13 Capability
Expand permissions
See every subject that has a relationship with a specific entity. It helps you map out complex permission webs.
- 14 Capability
List schemas
See all the schema versions for a specific tenant. This is your go-to for checking the history of your auth models.
- 15 Capability
Run bundle
Execute a predefined bundle of data. Use this to quickly apply a set of permissions across your system.
16—18
3 capabilities in this set.
Part of 21 available through Permify.
- 16 Capability
Subject permission
List every permission a user has on a specific entity. This is perfect for showing a user their own access rights.
- 17 Capability
Write bundle
Define or update data bundles. Use this to create reusable sets of permissions for different roles.
- 18 Capability
Write data
Create new relation tuples and attribute data. Use this to link users to resources and attributes in seconds.
19—21
3 capabilities in this set.
Part of 21 available through Permify.
- 19 Capability
Write schema
Write a completely new authorization model schema. Use this to set up the foundation for your permissions.
- 20 Capability
Bulk check permissions
Check multiple permissions in one go to save time. It's great for verifying large batches of access rights quickly.
- 21 Capability
Partial write schema
Update just one part of an authorization model. This lets you make surgical changes to your DSL without rewriting everything.
Set up in minutes
One URL. Then ask Permify to work.
Claude and ChatGPT only need the Connector URL. Copy it once, add it in settings, and use Permify from the conversation.
Choose your client
Live previewAdvanced clients IDE · CLI
Claude · Web + desktop
Connector URL · ready to paste
Streamable HTTPhttps://edge.vinkius.com/vk_preview_Lj3zVVVKVoHoqSvO650xPkcUTwv8Ivlhnr8cxNaW/mcp - Step 01
Open Connectors
In Claude Web or Claude Desktop, open Settings and choose Connectors.
- Step 02
Add the URL
Choose Add custom connector, name it Permify, and paste the URL above.
- Step 03
Turn it on in chat
Select +, open Connectors, and enable Permify for the conversation.
ChatGPT · Web + desktop
Connector URL · ready to paste
Streamable HTTPhttps://edge.vinkius.com/vk_preview_Lj3zVVVKVoHoqSvO650xPkcUTwv8Ivlhnr8cxNaW/mcp - Step 01
Open MCP settings
On desktop, open Settings and MCP servers. On web, open your workspace app or connector settings.
- Step 02
Add the URL
Choose Add server with Streamable HTTP, or create a custom MCP app, then paste the Permify URL.
- Step 03
Save and start
Save the connection and enable Permify in your conversation. Desktop may ask you to restart once.
Cursor · IDE configuration
Advanced setup
{
"mcpServers": {
"permify": {
"url": "https://edge.vinkius.com/vk_preview_Lj3zVVVKVoHoqSvO650xPkcUTwv8Ivlhnr8cxNaW/mcp"
}
}
} - Step 01
Open MCP Settings
Press Cmd+Shift+P (macOS) or Ctrl+Shift+P (Windows/Linux) → search "MCP Settings"
- Step 02
Add the server config
Paste the JSON configuration above into the mcp.json file that opens
- Step 03
Save the file
Cursor will automatically detect the new Connector
- Step 04
Start using Permify
Open Agent mode in chat and ask: "Using Permify, help me...". 21 tools available
VS Code Copilot · IDE configuration
Advanced setup
{
"mcpServers": {
"permify": {
"url": "https://edge.vinkius.com/vk_preview_Lj3zVVVKVoHoqSvO650xPkcUTwv8Ivlhnr8cxNaW/mcp"
}
}
} - Step 01
Create MCP config
Create a .vscode/mcp.json file in your project root
- Step 02
Add the server config
Paste the JSON configuration above
- Step 03
Enable Agent mode
Open GitHub Copilot Chat and switch to Agent mode using the dropdown
- Step 04
Start using Permify
Ask Copilot: "Using Permify, help me...". 21 tools available
Windsurf · IDE configuration
Advanced setup
{
"mcpServers": {
"permify": {
"url": "https://edge.vinkius.com/vk_preview_Lj3zVVVKVoHoqSvO650xPkcUTwv8Ivlhnr8cxNaW/mcp"
}
}
} - Step 01
Open MCP Settings
Go to Settings → MCP Configuration or press Cmd+Shift+P and search "MCP"
- Step 02
Add the server
Paste the JSON configuration above into mcp_config.json
- Step 03
Save and reload
Windsurf will detect the new server automatically
- Step 04
Start using Permify
Open Cascade and ask: "Using Permify, help me...". 21 tools available
Cline · IDE configuration
Advanced setup
{
"mcpServers": {
"permify": {
"url": "https://edge.vinkius.com/vk_preview_Lj3zVVVKVoHoqSvO650xPkcUTwv8Ivlhnr8cxNaW/mcp"
}
}
} - Step 01
Open Cline MCP Settings
Click the Connectors icon in the Cline sidebar panel
- Step 02
Add remote server
Click "Add Connector" and paste the configuration above
- Step 03
Enable the server
Toggle the server switch to ON
- Step 04
Start using Permify
Ask Cline: "Using Permify, help me...". 21 tools available
Claude Code · Terminal command
Advanced setup
claude mcp add permify --transport http "https://edge.vinkius.com/vk_preview_Lj3zVVVKVoHoqSvO650xPkcUTwv8Ivlhnr8cxNaW/mcp" - Step 01
Install Claude Code
Run npm install -g @anthropic-ai/claude-code if not already installed
- Step 02
Add the Connector
Run the command above in your terminal
- Step 03
Verify the connection
Run claude mcp to list connected servers, or type /mcp inside a session
- Step 04
Start using Permify
Ask Claude: "Using Permify, show me...". 21 tools are ready
Where the request belongs
Work Permify can move forward.
This is for the security engineer who's tired of manual audits, the backend dev who wants to test permissions without hardcoding, and the DevOps lead managing dozens of client environments.
Security Engineer
Auditing relationship graphs and checking access logic without manual API calls.
Backend Developer
Testing relationship tuples and updating schemas during active development cycles.
DevOps Engineer
Automating tenant provisioning and policy bundle deployments for multi-tenant apps.
Build the capability set
Add more capabilities.
Each Connector adds new actions and data without changing how you work.
Browse ConnectorsPermify
Manage fine-grained authorization and access control via Permify. write schemas, manage relation tuples, and perform real-time permission checks.
Cerbos
Decouple authorization logic from your application. Evaluate permissions, generate query plans, and manage access control via AI.
Permit.io
Orchestrate full-stack authorization, manage RBAC/ReBAC policies, and evaluate permissions in real-time via Permit.io.
Cerbos (Access Control)
Decouple authorization from your code. Manage policies, check permissions, and audit access control directly through your AI agent.
OpenFGA (Fine-Grained Auth)
Manage fine-grained authorization with OpenFGA. create stores, define authorization models, and manage relationship tuples directly from your AI agent.
Authing
Cloud-native identity and access management platform. manage users, roles, and security logs via AI.
Bring your own AI
Change the model, client or framework. Keep Permify connected.
-
Claude -
ChatGPT -
Gemini -
Cursor -
VS Code -
Windsurf -
ZCode -
Cline -
Zed -
Continue -
Kiro -
Roo Code -
Zencoder -
Goose -
Void -
Augment Code -
Amp -
Qodo -
Tabnine -
Pieces -
Sourcegraph Cody -
JetBrains -
Warp -
Amazon Q -
Antigravity -
BoltAI -
Raycast -
Jan -
LM Studio -
AnythingLLM -
Open WebUI -
Msty -
Cherry Studio -
LibreChat -
TypingMind -
Chorus -
5ire -
n8n -
LangChain -
LlamaIndex -
CrewAI -
Vercel AI SDK
Before you connect
Questions about Permify.
The practical details behind the request, access and result.
Can the Permify MCP help me audit user permissions?
Yes, it allows your agent to see every subject that has a relationship with a specific entity. This makes it easy to spot unauthorized access or find out exactly who can see your data.
How does Permify MCP handle multiple clients?
It manages isolated environments for different clients. You can use the agent to create, list, and delete these tenants so each client stays completely separated.
Can I use this to update my security rules without a redeploy?
Yes, you can use the agent to partially update your authorization models. This means you can change specific rules on the fly without having to push new code to your servers.
Does Permify MCP support complex access controls like ReBAC?
It's designed specifically for that. It handles relationship-based and attribute-based access control, letting you define complex rules like 'users can edit documents if they are the owner or a member of the team.'
Can my agent check permissions for a large group of users?
Yes, the Connector includes a way to perform bulk permission checks. This is perfect for verifying that a whole group of users has the correct access rights at once.
Is it easy to see who has access to a specific resource?
Absolutely. You can ask your agent to expand the permissions for any entity, and it will list every person or group that has a relationship with it.
Can I check permissions for multiple users or resources at once?
Yes! Use the bulk_check_permissions capability. It allows you to send a list of check requests in a single call, making it efficient for auditing complex views or batch processing.
How do I update only a small part of my authorization model?
You can use the partial_write_schema capability. Instead of overwriting the entire model, you provide a map of entity updates to modify specific parts of your schema.
Is it possible to manage isolated environments for different customers?
Absolutely. Use the create_tenant capability to spin up new isolated authorization silos. You can then use list_tenants to keep track of all active environments.
One connection away
Give your agent a direct line to Permify.
Connect Permify once. Keep it beside 5,900+ managed Connectors when the next task needs more.
Explore every Connector No credit card required · Free tier available