Enhancing Security Visibility with Salt Claude Connect for MCP Servers

Introduction

In an ever-evolving technological landscape, securing data at every level is paramount for organizations leveraging AI. Salt Security, renowned for its innovation in agentic and API security, has stepped up to address critical challenges faced by enterprises. With the introduction of Salt Claude Connect, security teams can now have continuous visibility into their Model Context Protocol (MCP) servers connected to the Claude Enterprise ecosystem.

What is Salt Claude Connect?

Salt Claude Connect is a new integration leveraging Claude's Compliance API. It offers security teams a real-time, read-only inventory of the MCP servers associated with their Claude organizations. This integration allows IT professionals to see essential details about their servers, including their addition or removal timeline, update status, and overall operation health. Given that MCP servers often grow rapidly within AI environments, being able to track these assets is crucial for maintaining a secure organization.

The Growing Challenge of MCP Servers

As companies adopt AI technologies, security and IT teams are faced with an existential query: "What is actually connected to our AI systems?" MCP servers provide expansive access within AI frameworks, but their swift integration can outpace security measures. According to Trend Micro research, the exposure of MCP servers on the public internet has surged alarmingly. In just a few months, the instances of such servers without proper authentication or encryption have nearly tripled, now standing at 1,467. Many of these servers are hosted by leading cloud providers, posing a significant risk as they often permit direct read access to sensitive data. A lack of contemporary inventory renders organizations powerless to govern their AI landscape or investigate anomalies when they arise.

Features of Salt Claude Connect

The Salt Claude Connect integration automatically collates activity data via Claude's Compliance API, presenting a live overview of the organization-managed MCP servers. This feature proves invaluable for security teams, as it grants them insight into when servers were added or removed while continuously updating their status. The Salt Agentic inventory categorizes these servers by their source, clearly marking each with its name, current operating status, and date of the last lifecycle event.

One notable aspect of this integration is its design for least-privilege access. Salt Claude Connect operates with a single read-only scope that solely tracks MCP server lifecycle activity, ensuring that it neither prompts Claude for any information nor reads the content of chats, files, or project data. Only essential lifecycle events are logged.

Statement from Salt Security

Roey Eliyahu, co-founder and CEO of Salt Security, stated: "MCP servers represent one of the fastest-growing aspects of the enterprise's attack surface. Unfortunately, many security teams still struggle to visualize what’s connected to their AI environments. With Salt Claude Connect, we transform that blind spot into an accessible, continuous inventory." This innovation means security teams can view connected MCP servers, monitor any changes, and apply rigorous governance efforts traditionally reserved for other areas of their security framework.

Availability and Implementation

Salt Claude Connect is currently available to Salt Security customers utilizing a Claude Enterprise infrastructure. Setting it up requires a Compliance Access Key with a read-only scope alongside the organization's ID, which can be easily configured through the Salt dashboard. For comprehensive instructions, users can refer to salt.security.

About Salt Security

Founded in 2016, Salt Security is a leader in the realms of agentic and API security, dedicated to shielding leading enterprises from threats associated with AI agents and API vulnerabilities. The shift in AI technology from passive chatbot interactions to active agent behaviors necessitates thorough protective measures. Salt ensures security across the agentic pathway including AI-generated code, runtime functionalities, and downstream APIs. Their financial backing includes prominent investors such as Sequoia Capital and Salesforce Ventures, solidifying their position in the market. For further details, please visit salt.security.