Authority Graph
Trace which groups and agents can reach each MCP, and which policies allow, condition or block that path.
In the console: Inventory › Authority Graph
Authority Graph draws your organization's access as one picture: who can reach which MCP, and the policies in between. Use it to check what a policy change opened or closed, or to find every path into an MCP before you change its access.
The graph
The graph has four columns, read left to right:
| Column | Shows |
|---|---|
| GROUPS | Where access starts. The heading reads USERS when every origin is a user or all users, and USER for a single user. |
| AGENTS | The agents those groups and users use. |
| POLICY MEMBRANE | The policies each path passes through, drawn as gates. |
| MCPs | The MCPs the agents can reach. |
Grey lines show the paths that exist. Moving dots show recent traffic over them, with a legend at the bottom left:
- allowed traffic – green dots for calls the gateway allowed.
- blocked – red diamonds for calls a policy blocked.
Each policy gate is colored by its effect: green for allow, amber for conditional, red for deny. A dashed amber outline marks a gate with at least one conditional path, allowed only when a policy condition holds.
Hover and bands
Hover over a node to highlight every path that runs through it, upstream and downstream.
When the agents or MCPs column holds more than 20 nodes, it collapses into bands, one per label. A node with several labels appears in each of their bands. Select a band to expand it and show its members. Only one band per column is open at a time, so opening another closes the first.
Empty state
With no groups, agents, policies or MCPs to draw, the screen shows Nothing to map yet and a Connect an MCP button that opens Tools & Services.
Actions
This screen is read-only. Change access on Agent Access, and connect MCPs on Tools & Services.
Permissions
The menu item needs all three of view_agent_instances, view_mcps and view_policies, for all users.
The graph itself loads from an API operation that needs view_topology.
Related
- Authority Graph concepts – how the graph is built and what each path means