View a markdown version of this page

Manage MCP tool access - Automated Security Response on AWS

Manage MCP tool access

You can deploy the optional Model Context Protocol (MCP) server. Set EnableMcpServer to yes (see MCP server for AI clients), then connect an AI client as one of your Web UI users. That client can call only the tools you granted that user. Managing these grants is an administrator-only task.

To manage a user’s tool access, open the View Users page in the Web UI and choose the user. Then use the Tool Permissions list. The list groups tools into seven categories: Discovery and triage, Reporting, Notifications, Remediation, Infrastructure and deployment, Policy and controls, and Other. You can grant or revoke an entire category at once, or grant or revoke an individual tool within it.

To grant a tool, select its Granted check box. To revoke the tool, clear the check box. A category’s check box grants or revokes every tool in that category. Choose Save to apply your changes.

The following screenshot shows the Tool Permissions list for a delegated administrator. Each category row shows a count of its granted tools, such as 0 of 3 granted. Each tool row shows its minimum tier and a Granted check box.

Tool Permissions for a user on the View Users page

Tool Permissions list with per-category grant counts and each tool’s minimum tier and Granted check box.

Each tool shows its minimum tier, the lowest role tier that you can grant it to. Grants are tier-scoped. You cannot grant an Account Operator a tool whose minimum tier is Delegated Admin. The list shows only the tools that the user’s role tier allows. Administrators receive every tool automatically and don’t need grants. A user can call a tool through the MCP server only when both of these conditions hold:

  • You granted the user that tool.

  • The user’s role tier includes that tool.

Revoking a grant takes effect for new tool calls. The MCP server checks the user’s current grants on each call. For how a user connects a client once you have granted them tools, see Connect an AI client to the MCP server.