Ask who owes what.
Locally.

Grantory speaks MCP. Your agent reads the ledger on your machine and writes the answer in whatever shape you need.

.cursor/mcp.json
{ "mcpServers": { "grantwatch": {
    "url": "https://grantory.pro/mcp",
    "headers": { "Authorization": "Bearer gw_…" }
} } }
  1. Create a keySettings, MCP keys. Shown once, stored as a hash.
  2. Add it to your clientOne JSON block. Cursor, Claude, any MCP client.
  3. Ask in plain wordsThe agent picks the tools. You get the answer.

Seventeen tools.
Two of them record findings.

list_members

Everyone in the organization, with role and grant count.

list_resources

Every system, scope and permission name.

list_access_inventory

Every documented grant, without paging.

record_finding

A grant that differs from the live system.

record_undocumented_access

Live access nobody recorded, and who gave it.

get_user_access_profile

What one person holds, asked for, and decided.

list_user_access

Every grant a person has had.

list_access_approved_by_user

Every yes, with the role behind it.

list_access_provisioned_by_user

What someone granted, and where.

list_access_revoked_by_user

Removals someone confirmed.

list_user_findings

Findings that name the person and the step.

list_user_security_events

The audit trail for one person.

list_privileged_users

Who holds privileged or critical access.

list_privileged_access

Privileged grants, verified or not.

get_user_expected_access_state

Documented level next to the recorded one.

list_former_members_with_access

Leavers who still hold something.

list_repeated_violations

Patterns over time, not a leaderboard.

The agent sees what you see.

Scoped by role

A key acts as the person who created it. A member's agent reads like a member.

Findings only

Keys are read-only unless you allow findings. Even then an agent cannot approve, grant, revoke, or close anything.

Attributed

Every key belongs to a named person and records when it was last used.

Revocable

Delete the key in Settings and the next call is refused.

Your agent. Your machine.
Our ledger.

$12 per person, per month. Every feature included.

Get started See pricing