--- sourceDocument: Brazil Enable AI sourceDocumentLink: https://www.servicenow.com/docs/r/intelligent-experiences Release : - brazil ft:locale : - en-US ft:publication_title : - Brazil Enable AI ft:clusterId : - platai bundleId : - platai workflow : - Platform --- # Control client access # Controlling which tools clients can access {#ariaid-title1} Release version: Brazil Updated October 26, 2026 ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 3 minutes to read Limit each client to the MCP server tools that it requires by turning on access management for the server and creating client access policies. ## Client based access control {#ai-gw-controlling-client-access__ai-gw-controlling-client-access-overview} By default, clients registered for an MCP server can call any active tool on that server. Because the MCP server receives requests from AI Gateway rather than from the clients behind it, the MCP server can't tell which client sent a request. AI Gateway is the last point in the connection that can identify which client sent a request, so it's where you control which tools each client can use. Client access control works at two levels: 1. For the instance, a user with the aig_admin role turns on client access control with a system property. Until then, access management isn't available for any MCP server. 2. For each MCP server, an AI steward turns on access management on the server's record and creates client access policies. Each policy grants one client access to specific tools on that server. {#ai-gw-controlling-client-access__ol_ai-gw-controlling-client-access-levels} When access management is on for a server, a client is authorized to use only the tools that its client access policies grant through AI Gateway. A client that has no policy on the server isn't authorized to use any of the server's tools through AI Gateway. A client is authorized to use every tool that any of its policies grants, whether it has one policy or several. When access management is off, every client can use all of the server's active tools. Client access policies work alongside tool status. When a tool is inactive, AI Gateway is set up to block calls to it, even from a client that a policy grants the tool to. For details, see [Activate or deactivate a tool](https://www.servicenow.com/docs/Lmba6JcC8zArlS8zzPrtxw "Allow agents to call one MCP server tool through AI Gateway, or block every call to it."). Before you create policies, register the clients for the server. For details, see [Connecting agents through AI Gateway](https://www.servicenow.com/docs/9_0XuwsnFx54Zjo0jce2JQ "Register the clients that can connect to an approved MCP server, and then configure agents to call the server through its AI Gateway MCP server URL."). * [Turn on client access control for your instance](https://www.servicenow.com/docs/Hqnk3nUKzRsp6iPQpOgsbQ "Set a system property so that AI stewards can turn on access management and create client access policies for MCP servers."): let AI stewards use access management on this instance. * [Create a client access policy](https://www.servicenow.com/docs/A2ofdHKeiKbWTVDRxaPH8w "Grant one client access to specific tools on an MCP server."): grant a client access to specific tools. * [Turn access management on or off for an MCP server](https://www.servicenow.com/docs/EfIcaTxNIHRzz5vjec6~Yg "Turn on access management to limit each client to the tools that its policies grant, or turn it off to let every client use all active tools."): start or stop enforcing client access policies for one MCP server. * [Edit a client access policy](https://www.servicenow.com/docs/3F43p73hIawcYlyKgb~ypw "Change the name, description, or tools of a client access policy."): change a policy's name, description, or tools. * [Delete a client access policy](https://www.servicenow.com/docs/knuEir0MD81oeVZTYY6jug "Remove a client access policy and the access to tools that it grants a client."): remove the access that a policy grants. {#ai-gw-controlling-client-access__ul_ai-gw-controlling-client-access-tasks} ## Client access enforcement {#ai-gw-controlling-client-access__ai-gw-controlling-client-access-how-it-works} A client authenticates with your instance and receives an access token, which it uses for its requests to AI Gateway. The first time AI Gateway receives a request with a new token, it exchanges the token with your instance. Along with the token for the MCP server, your instance returns the list of tools that the client is allowed to use. AI Gateway is designed to show the client only those tools and deny any request for another tool. ## When changes take effect {#ai-gw-controlling-client-access__ai-gw-controlling-client-access-when-changes-apply} AI Gateway gets a client's allowed tools when it exchanges the client's access token. A client that's already connected keeps the tools from its current token until the token is renewed. Access tokens are valid for 30 minutes by default. Important: When you create, edit, or delete a client access policy, or turn access management on or off, it can take up to 30 minutes for the change to apply to clients that are already connected. ## Where you manage client access {#ai-gw-controlling-client-access__ai-gw-controlling-client-access-where-you-manage-it} You manage client access on the MCP server record. In AI Control Tower, navigate to InventoryAssetsMCP servers, select the server name, select the AI Gateway tab, and then select the Policies sub-tab. When client access control is on for the instance, the Policy categories list starts with Access management, which opens by default. Its count is the number of client access policies on the server. The Access management card shows whether access management is on for the server and has a toggle switch to turn it on or off. Below the card, the Client access list shows the server's client access policies. {#ai-gw-controlling-client-access__table_ai-gw-controlling-client-access__entry__2} | Column | Description | |-|-| | Policy name | The name of the policy. Select it to edit the policy. | | Client | The client that the policy grants access to. | | Target | The tools that the client is authorized to use under this policy. | | Updated | When the policy was last changed. | [Table 1. Client access list] {#ai-gw-controlling-client-access__table_ai-gw-controlling-client-access} Each row's actions menu has Edit and Delete. Use the Search and Filter icons above the list to find policies by keyword or by when they were last updated. *[\>]: and then