MCP Server Prerequisites

Complete the following preparation before you configure an AI client:

• Portal functions — An administrator assigns the portal functions listed in Table 2 to the users who need the access token and the log pages.

• Node.js and npx — Install Node.js on the workstation that runs the AI client, because the mcp-remote package runs through npx.

• Endpoint address — Obtain the Kron PAM address and the MCP port. The default port is 18443.

• Access token — Generate a bearer token in the Kron PAM interface, as described in "Generating an MCP Access Token."

Required Portal Functions

Kron PAM controls access to the MCP features through the portal functions listed in the following table.

Table 2. Portal Functions for the MCP Features

Portal Function	Grants Access To	Assign To
kronpam.user.profile.mcpAccessToken.moduleVisibility	The MCP Access Token tab under User Profile.	Every user who connects an AI client.
kronpam.mcp.server.logs.moduleVisibility	The MCP Server Logs page under Logging.	Administrators and auditors who review MCP requests and responses.