Civic MCP Server

Civic provides comprehensive identity and access management through an MCP interface, focusing on security, authorization, and compliance tracking. This service enables AI agents to manage user permissions, audit access patterns, and maintain secure application environments.

Core Capabilities

Identity & Access Management: Create and manage user accounts, handle OAuth and API key authorizations, and control access permissions across different toolkits and profiles.

Security Governance: Configure data policies and guardrails that control what data can be accessed or transformed, ensuring compliance with organizational security requirements.

Audit & Compliance: Query execution logs to track tool usage, monitor access patterns, and maintain detailed audit trails for security and compliance purposes.

Profile Management: Organize users into profiles with specific toolkits, skills, and configurations. Switch between different operational contexts while maintaining proper authorization boundaries.

Skill & Script Management: Load business-specific instruction sets and manage reusable code snippets that can be executed within secure contexts.

Domain Model

Profiles serve as the primary organizational unit, containing toolkits (tool collections), skills (instruction sets), and scripts (reusable code). Authorizations link users to resources with specific permission levels. Guardrails and policies enforce data access constraints, while audit logs provide comprehensive tracking of all activities.

Key Considerations

Authentication flows may require browser-based OAuth completion. Profile switching affects available tools and permissions. Audit logs are profile-scoped and paginated. Data policies are constraints on access, while configuration settings control tool behavior.