Delinea has introduced Fastpath MCP Server, a capability that connects access governance data with artificial intelligence (AI) assistants. It allows finance, information technology (IT), audit, and compliance teams to query access risks, segregation of duties conflicts, and review status using natural language. The read-only capability works across more than 100 connected cloud and on-premises applications, with responses based on existing, governed Fastpath data.
The launch addresses a common challenge in enterprise resource planning (ERP) security. Large business applications can generate thousands of segregation of duties (SoD) conflicts, making it difficult for finance and compliance teams to identify priority risks and prepare for audits.
Fastpath MCP Server allows users to query live data from connected applications without exporting and reconciling spreadsheets. Teams can identify unresolved access reviews, pending reviewer actions, and SoD risks without mitigating controls. The company says this approach can help prioritise remediation and reduce audit preparation time.
Jason Mitchell, Executive Vice President of Product and Technology at Delinea, said the capability would help customers turn access data into actionable decisions. Users can ask questions in their own words and receive prioritised answers based on the data already used by their auditors, he added.
Access visibility across more than 100 applications
The new capability provides cross-application visibility into users, roles, access risks, controls, and review status. According to Delinea, Fastpath supports more than 100 connected cloud and on-premises applications, including Microsoft Dynamics 365, NetSuite, Oracle, SAP, Salesforce, and Workday.
The company also cites more than 30 native connections that provide detailed risk insights down to the lowest securable object. These connections use application-specific SoD and sensitive-access rulesets developed by audit experts.
Delinea says its rulesets draw on the Committee of Sponsoring Organizations of the Treadway Commission (COSO) framework and remediation best practices from the Information Systems Audit and Control Association (ISACA).
The aim is to help organisations identify access risks at a more granular level instead of relying on broad summaries or manually combining information from separate systems.
Read-only access keeps governance controls in place
Security and data governance are central to the announcement. Delinea says Fastpath MCP Server does not require data migration to connect with an AI assistant. Responses reflect the current data available in each connected environment.
The capability is read-only and operates within each user’s existing permissions. This means a connected AI assistant cannot make changes to Fastpath data through the server, according to the company.
Fastpath is independently audited under System and Organization Controls (SOC) 1 Type 2 and SOC 2 Type 2. Delinea says its reports are used by major audit and consulting firms to assess information technology general controls and access controls supporting financial reporting.
Neil Poynton, Director of Enterprise Resource Planning at Chromalox, said teams previously relied on Excel lookups and manually combined data points to answer access governance questions. He said the new capability would allow users to retrieve information from Fastpath through natural-language queries in less time.
Focus on audit preparation and access risk
Fastpath MCP Server is intended to help organisations reduce manual work in access analysis, prioritise remediation, and maintain audit readiness across business applications.
By connecting existing governance data to AI assistants, Delinea is extending access to information that finance, IT, and compliance teams need to assess risk. The company has not disclosed pricing or broader deployment details in the supplied announcement.