> For the complete documentation index, see [llms.txt](https://docs.balkan.id/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.balkan.id/balkanid-mcp/getting-started-with-mcp.md).

# Getting started with MCP

{% hint style="info" %}
**Early Access:** BalkanID MCP is available as an Early Access capability. To enable MCP (Early Access) for your tenant, contact Customer Support or your BalkanID customer success representative.
{% endhint %}

### What is BalkanID MCP?

BalkanID MCP connects your BalkanID tenant to AI assistants that support the [Model Context Protocol (MCP)](https://modelcontextprotocol.io/) — for example Claude, Claude Code, Cursor, and VS Code.

Once connected, you can ask natural-language questions and have the assistant securely call BalkanID tools on your behalf: discover identities and credentials, manage user access reviews, work with access requests, Purposes, and Constraints, and more — with the same authorization boundaries you already have in BalkanID.

You do not need to build custom integrations for each AI client. BalkanID hosts the MCP server; your assistant connects to it over HTTPS.

{% embed url="<https://vimeo.com/1185800283>" %}
BalkanID MCP Demo
{% endembed %}

### Who is it for?

* **Security and identity administrators** investigating identities, connections, resources, and credentials across connected applications — including non-human identities (service accounts, bots) and credential risk
* **Integrations and platform owners** listing application integrations and triggering syncs when data needs a refresh
* **HR / people operations admins** listing and maintaining employee (HRIS) records used for ownership, requests, and reviews
* **Risk managers** monitoring user access review (UAR) campaigns and managing JITPBAC Constraints
* **Reviewers and approvers** working their review queue — approving, rejecting, or delegating access reviews and access requests
* **Employees and requesters** creating Purpose requests and assigning or unassigning themselves from eligible Purposes under JITPBAC
* **Anyone** who wants to run BalkanID workflows from their AI assistant without leaving the chat

### Capabilities

With BalkanID MCP you can:

* Discover identities, connections, resources, and credentials across connected applications
* List and sync application integrations
* Manage employee (HRIS) records (where your role allows)
* Work with user access review (UAR) campaigns and review items
* List, inspect, approve, reject, or delegate access requests
* Work with JITPBAC Purposes and Constraints

For detailed scenarios and example prompts, see [Workflows and Example Prompts](/balkanid-mcp/workflows-and-example-prompts.md).

### How it works

1. An administrator enables MCP for your tenant (if it is not already enabled).
2. You connect your AI client to BalkanID — **OAuth is the preferred method** when your client supports it. API keys remain available for clients that need a static Bearer token.
3. You ask the assistant to perform BalkanID tasks in natural language.
4. The assistant calls BalkanID tools. Every call is authorized using your connection scopes and your BalkanID role.

```
AI assistant (Claude / Claude Code / Cursor / VS Code)
        │
        │  MCP (HTTPS) — OAuth or Bearer API key
        ▼
BalkanID MCP Server
        │
        ▼
Your BalkanID tenant (identities, reviews, requests, Purposes, …)
```

### Before you begin

* An active BalkanID tenant with MCP enabled
* A BalkanID user account (Reviewer, Risk Manager, or Administrator, depending on the tools you need)
* An MCP-compatible AI client

Continue to Installation and Setup to connect your client. For org-wide deployment (Claude Enterprise, managed Claude Code), see Enterprise Rollout.

### Related Documentation

* [Installation and Setup](/balkanid-mcp/installation-and-setup.md)
* [Enterprise Rollout](/balkanid-mcp/enterprise-rollout.md)
* [Workflows and Example Prompts](/balkanid-mcp/workflows-and-example-prompts.md)
* [Authentication and Permissions](/balkanid-mcp/authentication-and-permissions.md)
* [Tools Reference](/balkanid-mcp/tools-reference.md)


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.balkan.id/balkanid-mcp/getting-started-with-mcp.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.