diagrid mcpserver access user-identity
Manage the user identity requirement for an MCP server
Description
Manage whether calls to an MCP server must carry an end user's identity.
An agent normally calls an MCP server as itself, and the server has no way to tell which person the work is being done for. Requiring a user identity changes that: every call must also carry the identity of the person it acts for, and a call without one is refused before it reaches the server.
Turn it on when the server's data or actions belong to individual users rather than to the agent — so the server can apply that person's permissions, and so its audit trail names them.
Requiring an identity is also what causes one to be sent: with no requirement set, no user identity reaches the server at all.
This is separate from how the server authenticates to its own upstream, which is configured on the MCPServer. Turning this on does not change that.
Options
-h, --help help for user-identity
Options inherited from parent commands
--api-key string Diagrid Cloud API key
SEE ALSO
- diagrid mcpserver access - Manage authorization for an MCP server
- diagrid mcpserver access user-identity get - Show the user identity requirement for an MCP server
- diagrid mcpserver access user-identity none - Remove the user identity requirement from an MCP server
- diagrid mcpserver access user-identity require - Require an authenticated user on calls to an MCP server