Access Center

See who can use the vault, for how long, and revoke without editing project files.

Remote JIT

Approve or deny from a paired iPhone when you are away from the Mac.

Investigation flags

Info / Review / Warning are local display cues. They do not revoke or authorize.

Click to focus

Insights summarize recent access by item and folder so you can drill in quickly.

MCP proxy grants

Access Center’s MCP proxy filter lists runtime admission and proxy grants. Server setup, protection coverage, and catalogs live in MCP Manager. Open it from the Local MCP strip on that filter.

Calls that never received a grant — for example a denied or unavailable upstream — appear in MCP Manager Activity with inspector Grants: None recorded. They are rejected before Authsia creates a grant.