Required Permissions & Access Control

To connect and execute actions via the MCP Server, administrators must meet specific permission requirements:

Platform Authentication: The administrator connecting the AI application must log in with an active Forcepoint account holding the AI Admin entitlement.
Role-Based Access Control (RBAC): All tool executions via the MCP Server are strictly governed by the authenticated user's assigned RBAC scopes.

Note: The MCP Server operates with a strict 1:1 mapping to the logged-in user's credentials. An AI application cannot view or modify any resource that the authenticated user lacks explicit permission to access in the Forcepoint Data Security Cloud portal.

Note: Your LLM application may enforce its own additional MCP server controls, separate from the controls enforced by the Forcepoint MCP Server.