SaaS Access & Offboarding Review Pack

Turn local user and SaaS access exports into a deterministic offboarding, orphan-access and privileged-access review packet before an administrator changes accounts.

This downloadable local package turns authorized buyer-supplied files into a fixed, reproducible review packet. It includes an installable Python CLI, a local stdio MCP adapter and a companion Agent Skill.

Outputs

result.json, action-matrix.csv, orphan-access.csv, privileged-access.csv, issues.jsonl, ACCESS_REVIEW.md and evidence-receipt.json

The core is deterministic, rejects unsafe paths and malformed inputs, never overwrites an existing packet, escapes formula-active CSV cells and binds each input and output with SHA-256. Processing stays local. No API key, login, upload, telemetry or live external action is included.

Best for

Small IT teams, MSPs and operations consultants reviewing exported SaaS access before offboarding

Requirements

Windows 11 and Python 3.11–3.14; authorized local evidence files in the documented schemas; optional mcp==2.2.0 for the local MCP adapter.

Limitations

No directory login, identity inference, account disablement, access revocation, entitlement change, license cancellation or compliance certification. Demand and sales are not guaranteed; this is a one-time local V1.