BalkanID Announces Support for Model Context Protocol (MCP), Unlocking Autonomous Identity Security and Access Governance Workflows for the AI Era
BalkanID’s adoption of MCP ushers in a new era of agent-driven, real-time identity security, accelerating risk remediation and access governance across AI-powered ecosystems
San Francisco, CA – April 28, 2025 — At RSAC 2025, BalkanID, the intelligent identity security and access governance provider, proudly announces support for the Model Context Protocol (MCP)—an emerging open standard that enables interoperable, multi-agent collaboration across AI-powered systems and security infrastructure. As identity becomes the control plane for enterprise security in the age of autonomous agents, BalkanID’s adoption of MCP positions it at the forefront of secure, intelligent, and extensible access orchestration & governance. This kind of closed-loop automation was always possible through our API-first approach. With MCP, we take it a step further—making secure, standards-based orchestration accessible to any AI agent. The result is faster remediation of risks, often in minutes instead of weeks, and the assurance that identity governance keeps pace with real-world changes. MCP also adds new actionability to the BalkanID Copilot, sitting alongside our powerful Playbooks to enable real-time, on-demand identity actions based on live discoveries.
Developed by Anthropic and supported by the broader ecosystem, the Model Context Protocol defines how agents can exchange structured context to reason, act, and collaborate across domains. BalkanID’s integration of MCP delivers bidirectional capabilities that dramatically expand the flexibility and intelligence of its platform.
Dual-Mode MCP Architecture
BalkanID introduces two foundational components to support MCP:
- MCP Server: BalkanID will expose its platform APIs as an MCP-compliant server, allowing third-party agents to invoke secure identity actions such as access reviews, risk suppression, and lifecycle workflows—via natural language or API.
- MCP Client: BalkanID’s Copilot agent will be able to connect to external MCP-compliant systems and utilize them, treating them as plugins. This will make it possible to orchestrate end-to-end workflows across identity, security, IT, and knowledge graph systems—all with natural language prompts.
This architecture empowers BalkanID to serve as both a controller and collaborator in the growing ecosystem of AI agents.
“The future of identity governance is agentic,” said Subbu Rama, CEO of BalkanID. “By supporting the Model Context Protocol, we’re unlocking a new paradigm—where autonomous agents can reason across systems, invoke identity actions, and remediate risk in real-time, without the human-in-the-loop friction that slows down today’s security operations.”
Use Cases: From Risk to Remediation in a Single Prompt
With MCP, security and IT teams can:
- Orchestrate full identity security workflows across multiple systems through the Copilot
- Dynamically assess risk with the Identity Risk Analyzer before triggering actions
- Launch access review certification campaigns and act on them with Access Reviews and Certification
- Automate onboarding/offboarding with Access Lifecycle Management
- Extend Playbooks to span across MCP-compatible services
- Use the BalkanID MCP server to enhance their own agent’s capabilities for controlling identity data on BalkanID platform, independent of the BalkanID Copilot itself.
Example prompt:
“Find all zombie identities with admin access to customer data, de-provision them in the respective applications wherever possible and open Jira tickets for the rest.”
All of this can be executed end-to-end through BalkanID Copilot using MCP-enabled agents.
Availability & Packaging
MCP support will be exclusively available through the Copilot Enterprise offering, that can be bundled with either one of the following BalkanID modules:
This ensures MCP workflows are deployed in environments with the right intelligence, context, and enforcement capabilities—while maintaining security and operational integrity. For a technical overview of how BalkanID implements MCP integration and its impact on identity security workflows, refer to our detailed blog post.
About BalkanID
BalkanID is redefining identity security and access governance with AI focused approach. Powered by a graph-based Copilot engine, the platform delivers least privilege enforcement, automated access reviews, and proactive risk remediation through natural language workflows, playbooks, and APIs. The BalkanID platform helps organizations discover identity risks, automate access reviews, and enforce role-based access policies—without the complexity of traditional IGA systems. For more information, visit www.balkan.id.