# Articles

> Practical articles on PeopleSoft security auditing, metadata research, and operations — the SQL, the tables, and the workflows.

---

Site [llms.txt](/llms.txt)

---

Practical write-ups on PeopleSoft security auditing, metadata, and operations. Each article stands on its own: the tables involved, the SQL if you want to do it by hand, and where psLens shortens the path.

---

Section pages:

- [Solving Duplicate Student Records: How an AI Agent Used psLens MCP to Reverse-Engineer PeopleSoft Name Search Normalization in 3 Minutes](/blog/debugging-peoplesoft-search-match-name-normalization-with-pslens-mcp/): How an AI coding agent connected to the psLens MCP server traced PeopleSoft's LAST_NAME_SRCH and FIRST_NAME_SRCH normalization logic across subrecords and Application Packages to stop an integration from creating duplicate EMPLIDs.
- [Tracing Every Place a PeopleSoft Field Is Updated Using an AI Agent and the psLens MCP Server](/blog/tracing-peoplesoft-field-updates-with-pslens-mcp/): A real-world walkthrough of how an AI coding agent used the psLens Model Context Protocol (MCP) server to trace every PeopleCode program, App Package, App Engine, record default, and COBOL SQL statement that sets STDNT_CAR_TERM.TUIT_CALC_REQ to 'Y'.
- [Connecting AI Coding Agents to PeopleSoft with Model Context Protocol (MCP)](/blog/connecting-ai-agents-to-peoplesoft-with-mcp/): How psLens uses an embedded Model Context Protocol (MCP) server to let Claude Code, Cursor, and Claude Desktop inspect PeopleSoft metadata, audit security, and diff environments in real time.
- [Why psLens Runs on Go, a Hypermedia UI Stack, and SWS Instead of Living Inside PeopleSoft](/blog/why-pslens-runs-on-go-hypermedia-and-sws/): Why psLens uses Go, templ, Datastar, hypermedia, and SWS: safer PeopleSoft access, simpler deployment, and faster iteration than a bolt-on PeopleTools app.
- [Which Service Operations Can Half Your Users Call?](/blog/service-operations-exposed-to-most-users/): PeopleSoft service operation access is granted by permission list (PSAUTHWS) and rides roles out to users. A single broadly-held role can expose a web service to hundreds of accounts. How to trace the chain, the gotchas that undercount it, and a faster way.
- [Your PeopleSoft Nodes Probably Don't Have Passwords](/blog/peoplesoft-nodes-without-passwords/): Most PeopleSoft environments have active message nodes with no authentication configured (AUTHOPTN='N'). How to check PSMSGNODEDEFN, why it matters, and what to fix first.
- [Who Can Access This PeopleSoft Component? The SQL, and the Gotchas](/blog/who-can-access-this-peoplesoft-component/): How to trace PeopleSoft component access through PSAUTHITEM, PSROLECLASS, and PSROLEUSER — the query, the four mistakes that produce wrong answers, and a faster way.