PIM Manager settings · Settings > Features & edition

MCP server (AI assistants and agents)

What it does

Opens the Model Context Protocol endpoint on PIM Manager, so an AI assistant or agent signed in with an Entra account can read who has what, pending changes, jobs and problems. It can also stage and commit changes through the same checks as the PIM Manager page. The signed-in person's PIM Manager role decides what it may do. PIM Manager checks the switch on every call, so a change applies at once.

When enabled

Signed-in assistants can call the endpoint. Every tool call, reads included, is written to the audit trail. Demo viewers stay refused.

When disabled

Every call to the endpoint is refused with 'the MCP server is switched off'.

Risk and how to reverse it

Switching it on gives an AI assistant the same reach as the person it signs in as. An Admin or SuperAdmin session can stage and commit privileged changes through it, and the data it reads (who holds which privileged access) leaves PIM Manager to the assistant. Reversible: switch it off and calls are refused at once.

Requires

A Pro licence (switching it on, or calling it, without one is refused). SuperAdmin to change it. The endpoint's Entra sign-in set up for PIM Manager.

Recommended

Off unless you use an assistant with PIM Manager. If on, use it with accounts that have the lowest PIM Manager role that does the job.

Documented for PIM Manager 3.0.70. Written by the PIM Manager team; Invardia publishes it. · All settings · Security review pack