docs

The full access inventory over MCP

2026.09-mcp-access-inventory-list2026-09-17

The full access inventory over MCP

Plans: Free and above, so every plan (backend 2.6.0). Where: the /mcp endpoint — new tool access_inventory_list; the TypeScript and Python SDKs (access.inventoryList / access.inventory_list)

Until now the access inventory — every current grant of an employee to an asset — was reachable only from the console’s Access Inventory page and its CSV export. The MCP access_* tools returned findings about the inventory (stale, dormant, offboarding violations, …), never the inventory itself. Customers building a per-employee entitlement list for an ISO 27001 A.5.18 / A.8.2 control had no machine-readable source.

What changed

access_inventory_list returns one row per employee × asset grant, paged like every other list tool (limit default 50, max 200; offset; { grants, total, truncated }):

Field Meaning
employeeId, assetId the join keys — never a name or e-mail
assetName, assetCriticality from the asset record (organisational data)
identityType HUMAN or SERVICE_ACCOUNT
roleLevel, roleOrigin, roleConfidence, isPrivileged the normalised role, the role as the source system named it, and isPrivileged = roleLevel == ADMIN
status ACTIVE or REVOKED
firstObservedAt the first time AutoCISO observed the grant — not the date it was granted in the source system. null when no observation event exists
lastDetectedAt, lastUsedAt, lastVerifiedAt null when unknown
isDormant, dormantDays, riskScore, riskFactors the current risk signals

Filters: employeeId, assetId, status (ACTIVE by default; REVOKED; ALL), identityType, roleLevel, isDormant. Grants held by terminated employees are included. Unknown arguments and wrong-typed values are rejected with INVALID_ARGUMENTS rather than ignored.

Building a complete entitlement list

  1. Page with status: "ALL" and limit: 200, advancing offset by the number of grants returned until the response has no truncated flag.
  2. Collect the distinct employeeId values and resolve them in batches of up to 50 with employee_resolve — a token with the Owner-granted pii:read scope is required, and every resolution is written to your audit trail. See About pii:read.
  3. Keep the name mapping on your side; the inventory rows never carry it.

Counts

The catalog now has 65 tools (60 read-only, 5 write). A Free-plan mcp:read token sees three tools: access_inventory_list, maturity_scores and posture_summary.

Notes

  • REVOKED rows appear only when a revocation was recorded; today most revocations remove the grant, so status: "ALL" is usually the same set as the default.
  • Full reference: MCP Tool Catalog — Access.
Last reviewed: 2026-10-08

Was this page helpful?

Esc