Search and reporting · Security
Ask the AI assistant who can reach what
Ask what a group grants, who can reach a vault and which accounts look over-privileged.
All product updates
AI agents · Integrations · Security
Connect your own AI agents to Hydden over MCP
Connect Claude Desktop, or any agent that speaks the Model Context Protocol (MCP), to Hydden with its own credential, and it sees only the tools that credential is allowed to use.
Overview
Security teams are building their own AI agents for triage and response, and those agents need identity context: who owns an account, what it can reach and what changed. Handing an agent a broad admin token to get those answers creates the kind of unreviewed access Hydden is there to find.
Hydden now runs an MCP server that any agent can connect to with its own API credential. The agent sees only the tools its roles grant, every action it takes is recorded against that credential, and a suspended credential is refused on its next call.
What's new
- Read the identity record: Accounts, groups, roles, owners, resources and events from every connected system.
- Trace who can reach what: Access paths for any account, group, role or resource, including through vaults.
- Act through your connectors: Disable an account or run another connector action you have allowed.
- Bound by its roles: Each agent sees only the tools its credential may call.
How it works
An administrator creates an API credential for the agent and gives it roles to read the identity record, view access reviews or run connector actions. Grants can be as narrow as one action on one connector, so a credential allowed to disable accounts can never enable one. Role changes reach a running agent within seconds, each credential has its own rate limit, and every action lands in that credential's audit trail.
Getting started
The MCP endpoint is part of Hydden Control for all customers. Create an API credential for your agent, assign its roles and add Hydden to the agent's MCP servers.
Need configuration detail? Technical documentation is available to customers after sign-in.
Related updates
All updatesIntegrations
Guided connector setup and a public API
New connectors open into a four-step checklist, and integrations can use the documented API.
NewAI agents · Security
AI agent profiles and blast radius
See every AI agent, what it has done, and how much any identity can reach.
Give your agents the identity record
Request a trial and connect your first agent to Hydden.