MCP Authentik

MCP server for Authentik identity management. Manage users, groups, applications, flows, policies, providers, and more through natural language in Cursor, Claude Code, and Claude Desktop.

Features

• 297 tools across 22 categories covering the complete Authentik API
• Read-only mode via AUTHENTIK_ACCESS_TIER=read-only for safe monitoring
• Category filtering via AUTHENTIK_CATEGORIES to expose only the tools you need
• Type-safe SDK client via @goauthentik/api
• Docker images for linux/amd64 and linux/arm64 on GHCR
• Remote MCP via HTTP transport (MCP_TRANSPORT=http) using the Streamable HTTP protocol
• TypeScript/ESM with full type safety

API Compatibility

Built for Authentik 2026.5.

Quick Start

Run the server directly with npx:

AUTHENTIK_URL="https://auth.example.com" \
AUTHENTIK_TOKEN="your-api-token" \
npx -y @samik081/mcp-authentik

The server validates your Authentik connection on startup and fails immediately with a clear error if credentials are missing or invalid.

Docker

Run with Docker (stdio transport, same as npx):

docker run --rm -i \
  -e AUTHENTIK_URL=https://auth.example.com \
  -e AUTHENTIK_TOKEN=your-api-token \
  ghcr.io/samik081/mcp-authentik

To run as a remote MCP server with HTTP transport:

docker run -d -p 3000:3000 \
  -e MCP_TRANSPORT=http \
  -e AUTHENTIK_URL=https://auth.example.com \
  -e AUTHENTIK_TOKEN=your-api-token \
  ghcr.io/samik081/mcp-authentik

The MCP endpoint is available at http://localhost:3000 and a health check at http://localhost:3000/health.

Configuration

Claude Code CLI (recommended):

# Using npx
claude mcp add --transport stdio authentik \
  --env AUTHENTIK_URL=https://auth.example.com \
  --env AUTHENTIK_TOKEN=your-api-token \
  -- npx -y @samik081/mcp-authentik

# Using Docker
claude mcp add --transport stdio authentik \
  --env AUTHENTIK_URL=https://auth.example.com \
  --env AUTHENTIK_TOKEN=your-api-token \
  -- docker run --rm -i ghcr.io/samik081/mcp-authentik

# Using remote HTTP (connect to a running Docker container or HTTP server)
claude mcp add --transport http authentik http://localhost:3000

JSON config (works with Claude Code .mcp.json, Claude Desktop claude_desktop_config.json, Cursor .cursor/mcp.json):

{
  "mcpServers": {
    "authentik": {
      "command": "npx",
      "args": ["-y", "@samik081/mcp-authentik"],
      "env": {
        "AUTHENTIK_URL": "https://auth.example.com",
        "AUTHENTIK_TOKEN": "your-api-token"
      }
    }
  }
}

Docker (stdio):

{
  "mcpServers": {
    "authentik": {
      "command": "docker",
      "args": ["run", "--rm", "-i",
        "-e", "AUTHENTIK_URL=https://auth.example.com",
        "-e", "AUTHENTIK_TOKEN=your-api-token",
        "ghcr.io/samik081/mcp-authentik"
      ]
    }
  }
}

Remote MCP (connect to a running Docker container or HTTP server):

{
  "mcpServers": {
    "authentik": {
      "type": "streamable-http",
      "url": "http://localhost:3000"
    }
  }
}

Access Tiers

Control which tools are available using the AUTHENTIK_ACCESS_TIER environment variable:

Tier	Tools	Description
full (default)	297	Read and write -- full control
read-only	144	Read only -- safe for monitoring, no state changes

• full: All 297 tools. Includes creating, updating, and deleting users, groups, applications, flows, providers, and all other resources.
• read-only: 144 tools. Listing and viewing resources only. No state changes.

Tools that are not available in your tier are not registered with the MCP server. They will not appear in your AI tool's tool list, keeping the context clean.

Environment Variables

Variable	Required	Default	Description
AUTHENTIK_URL	Yes	--	Authentik instance URL (e.g., https://auth.example.com)
AUTHENTIK_TOKEN	Yes	--	API token with appropriate permissions
AUTHENTIK_ACCESS_TIER	No	full	read-only for read-only tools only, full for all tools
AUTHENTIK_CATEGORIES	No	(all)	Comma-separated category allowlist (e.g., core,admin,flows)
AUTHENTIK_TOOL_BLACKLIST	No	(none)	Comma-separated list of tool names to exclude (e.g., authentik_users_delete)
AUTHENTIK_TOOL_WHITELIST	No	(none)	Comma-separated list of tool names to force-include, bypassing access tier and category filters
DEBUG	No	false	Enable debug logging to stderr
MCP_TRANSPORT	No	stdio	Transport mode: stdio (default) or http
MCP_PORT	No	3000	HTTP server port (only used when MCP_TRANSPORT=http)
MCP_HOST	No	0.0.0.0	HTTP server bind address (only used when MCP_TRANSPORT=http)
MCP_SESSION_IDLE_TIMEOUT	No	1800	Seconds of inactivity after which an HTTP session is closed and its memory released (sessions with a connected SSE stream are never closed). 0 disables. Only used when MCP_TRANSPORT=http
MCP_EXCLUDE_TOOL_TITLES	No	false	Set true to omit tool titles from registration (saves tokens)

Available Categories

admin, authenticators, core, crypto, endpoints, enterprise, events, flows, managed, oauth2, outposts, policies, property-mappings, providers, rac, rbac, reports, root, sources, ssf, stages, tenants

Tools

mcp-authentik provides 297 tools organized by category. Each tool's Access column shows the minimum tier required: read-only (available in both tiers) or full (requires full tier). The Hints column shows tool behavior: read-only (no state changes), destructive (modifies existing state), idempotent (same result if called twice).

Tool	Description	Access	Hints
authentik_admin_system_info	Get system information including HTTP host, runtime environment, server time, and embedded outpost status	read-only	read-only, idempotent
authentik_admin_version	Get Authentik version information including current version and build hash	read-only	read-only, idempotent
authentik_admin_settings_get	Get current system settings	read-only	read-only, idempotent
authentik_admin_settings_update	Update system settings (partial update)	full	destructive, idempotent
authentik_admin_apps	List installed Django applications in the Authentik instance	read-only	read-only, idempotent
authentik_admin_models	List all data models available in the Authentik instance	read-only	read-only, idempotent
authentik_admin_version_history	List Authentik version history entries	read-only	read-only, idempotent
authentik_admin_system_task_trigger	Trigger all system tasks (e.g., cleanup, cache clear)	full	—

Tool	Description	Access	Hints
authentik_authenticators_list	List all authenticator devices across all types for the current user	read-only	read-only, idempotent
authentik_authenticators_admin_by_type_list	List authenticator devices of a specific type (admin view)	read-only	read-only, idempotent
authentik_authenticators_admin_by_type_get	Get a single authenticator device by type and ID (admin view)	read-only	read-only, idempotent
authentik_authenticators_admin_by_type_delete	Delete an authenticator device by type and ID (admin view)	full	destructive
authentik_authenticators_user_by_type_list	List authenticator devices of a specific type for the current user	read-only	read-only, idempotent

Users

Tool	Description	Access	Hints
authentik_users_list	List users with optional filters for username, email, name, active status, superuser status, path, groups, and search	read-only	read-only, idempotent
authentik_users_get	Get a single user by their numeric ID	read-only	read-only, idempotent
authentik_users_create	Create a new user	full	—
authentik_users_update	Update an existing user (partial update)	full	destructive, idempotent
authentik_users_delete	Delete a user by their numeric ID	full	destructive
authentik_users_me	Get information about the currently authenticated user	read-only	read-only, idempotent
authentik_users_set_password	Set a new password for a user	full	destructive, idempotent
authentik_users_create_service_account	Create a new service account user with an optional associated group and token	full	—
authentik_users_generate_recovery_link	Generate a temporary recovery link for a user to regain account access	full	—
authentik_users_send_recovery_email	Send a recovery email to a user using a specified email stage	full	—
authentik_users_list_paths	List all user paths configured in the system	read-only	read-only, idempotent
authentik_users_account_lockdown	Lock down a user account, deactivating it and terminating its active sessions	full	destructive
authentik_users_export	Trigger an export of users with optional filters, producing a downloadable export artifact	full	—

Groups

Tool	Description	Access	Hints
authentik_groups_list	List groups with optional filters for name, superuser status, members, and search	read-only	read-only, idempotent
authentik_groups_get	Get a single group by its UUID	read-only	read-only, idempotent
authentik_groups_create	Create a new group with optional parent group UUIDs, superuser status, users, and custom attributes	full	—
authentik_groups_update	Update an existing group (partial update)	full	destructive, idempotent
authentik_groups_delete	Delete a group by its UUID	full	destructive
authentik_groups_add_user	Add a user to a group by group UUID and user ID	full	idempotent
authentik_groups_remove_user	Remove a user from a group by group UUID and user ID	full	destructive

Applications

Tool	Description	Access	Hints
authentik_apps_list	List applications with optional filters for name, slug, group, search, and more	read-only	read-only, idempotent
authentik_apps_get	Get a single application by its slug	read-only	read-only, idempotent
authentik_apps_create	Create a new application with name, slug, and optional provider, group, and metadata	full	—
authentik_apps_update	Update an existing application (partial update)	full	destructive, idempotent
authentik_apps_set_icon_url	Set an application's icon to an external URL (sets the meta_icon field), or clear the current icon with clear: true	full	destructive, idempotent
authentik_apps_delete	Delete an application by its slug	full	destructive
authentik_apps_check_access	Check whether a specific user has access to an application	read-only	read-only, idempotent
authentik_apps_update_transactional	Create or update an application and its provider in a single atomic transaction	full	destructive, idempotent
authentik_app_entitlements_list	List application entitlements with optional filters	read-only	read-only, idempotent
authentik_app_entitlements_get	Get a single application entitlement by its UUID	read-only	read-only, idempotent
authentik_app_entitlements_create	Create a new application entitlement	full	—
authentik_app_entitlements_update	Update an existing application entitlement (partial update)	full	destructive, idempotent
authentik_app_entitlements_delete	Delete an application entitlement by its UUID	full	destructive

Tokens

Tool	Description	Access	Hints
authentik_tokens_list	List tokens with optional filters for identifier, intent, managed status, and search	read-only	read-only, idempotent
authentik_tokens_get	Get a single token by its identifier	read-only	read-only, idempotent
authentik_tokens_create	Create a new token with an identifier, optional intent, description, and expiration settings	full	—
authentik_tokens_update	Update an existing token (partial update)	full	destructive, idempotent
authentik_tokens_delete	Delete a token by its identifier	full	destructive
authentik_tokens_view_key	View the raw key value of a token (privileged, logged)	full	read-only, idempotent
authentik_tokens_set_key	Set a custom key value for a token	full	destructive, idempotent

Brands

Tool	Description	Access	Hints
authentik_brands_list	List brands with optional filters for UUID, domain, and search	read-only	read-only, idempotent
authentik_brands_get	Get a single brand by its UUID	read-only	read-only, idempotent
authentik_brands_create	Create a new brand with domain, branding settings, flow assignments, and optional attributes	full	—
authentik_brands_update	Update an existing brand (partial update)	full	destructive, idempotent
authentik_brands_delete	Delete a brand by its UUID	full	destructive
authentik_brands_current	Get the brand configuration for the current domain	read-only	read-only, idempotent

Tool	Description	Access	Hints
authentik_crypto_list	List certificate keypairs with optional filters	read-only	read-only, idempotent
authentik_crypto_get	Get a single certificate keypair by its UUID	read-only	read-only, idempotent
authentik_crypto_create	Create a new certificate keypair from PEM-encoded certificate and optional private key data	full	—
authentik_crypto_update	Update an existing certificate keypair (partial update)	full	destructive, idempotent
authentik_crypto_delete	Delete a certificate keypair by its UUID	full	destructive
authentik_crypto_generate	Generate a new self-signed certificate keypair (RSA, ECDSA, ED25519, or ED448)	full	—
authentik_crypto_view_certificate	View the PEM-encoded certificate data for a keypair	read-only	read-only, idempotent
authentik_crypto_view_private_key	View the PEM-encoded private key data for a keypair (sensitive)	full	read-only, idempotent

Enterprise device and endpoint management: managed devices, device access groups, device-to-policy bindings, and connectors for agents, enrollment, Fleet, Google Chrome, and Apple ISE-PSSO.

Devices

Tool	Description	Access	Hints
authentik_endpoints_devices_list	List managed endpoint devices with optional filtering by name or identifier, search, and ordering	read-only	read-only, idempotent
authentik_endpoints_devices_get	Retrieve a single endpoint device by its UUID	read-only	read-only, idempotent
authentik_endpoints_devices_summary	Retrieve aggregate summary statistics about managed endpoint devices	read-only	read-only, idempotent
authentik_endpoints_devices_update	Update an endpoint device (partial update)	full	destructive, idempotent
authentik_endpoints_devices_delete	Delete an endpoint device by its UUID (irreversible)	full	destructive

Device Access Groups

Tool	Description	Access	Hints
authentik_endpoints_device_access_groups_list	List device access groups with optional filtering by name, search, and ordering	read-only	read-only, idempotent
authentik_endpoints_device_access_groups_get	Retrieve a single device access group by its UUID	read-only	read-only, idempotent
authentik_endpoints_device_access_groups_create	Create a new device access group (bundles devices for policy targeting)	full	—
authentik_endpoints_device_access_groups_update	Update a device access group (partial update)	full	destructive, idempotent
authentik_endpoints_device_access_groups_delete	Delete a device access group by its UUID (irreversible)	full	destructive

Device Bindings

Tool	Description	Access	Hints
authentik_endpoints_device_bindings_list	List device-to-user policy bindings with optional filtering	read-only	read-only, idempotent
authentik_endpoints_device_bindings_get	Retrieve a single device binding by its UUID	read-only	read-only, idempotent
authentik_endpoints_device_bindings_create	Create a new device binding linking a policy, group, or user to a target with an evaluation order	full	—
authentik_endpoints_device_bindings_update	Update a device binding (partial update)	full	destructive, idempotent
authentik_endpoints_device_bindings_delete	Delete a device binding by its UUID (irreversible)	full	destructive

Agent Connectors

Tool	Description	Access	Hints
authentik_endpoints_agent_connectors_list	List endpoint agent connectors with optional filtering	read-only	read-only, idempotent
authentik_endpoints_agent_connectors_get	Retrieve a single agent connector by its UUID	read-only	read-only, idempotent
authentik_endpoints_agent_connectors_create	Create a new endpoint agent connector	full	—
authentik_endpoints_agent_connectors_update	Update an agent connector (partial update)	full	destructive, idempotent
authentik_endpoints_agent_connectors_delete	Delete an agent connector by its UUID (irreversible)	full	destructive

Enrollment Tokens

Tool	Description	Access	Hints
authentik_endpoints_enrollment_tokens_list	List agent enrollment tokens with optional filtering	read-only	read-only, idempotent
authentik_endpoints_enrollment_tokens_get	Retrieve a single enrollment token by its UUID	read-only	read-only, idempotent
authentik_endpoints_enrollment_tokens_create	Create a new agent enrollment token bound to a connector (used to enroll devices)	full	—
authentik_endpoints_enrollment_tokens_update	Update an enrollment token (partial update)	full	destructive, idempotent
authentik_endpoints_enrollment_tokens_delete	Delete an enrollment token by its UUID (irreversible)	full	destructive

Fleet Connectors

Tool	Description	Access	Hints
authentik_endpoints_fleet_connectors_list	List Fleet device-management connectors with optional filtering	read-only	read-only, idempotent
authentik_endpoints_fleet_connectors_get	Retrieve a single Fleet connector by its UUID	read-only	read-only, idempotent
authentik_endpoints_fleet_connectors_create	Create a new Fleet connector pointing at a Fleet device-management instance	full	—
authentik_endpoints_fleet_connectors_update	Update a Fleet connector (partial update)	full	destructive, idempotent
authentik_endpoints_fleet_connectors_delete	Delete a Fleet connector by its UUID (irreversible)	full	destructive

Google Chrome Connectors

Tool	Description	Access	Hints
authentik_endpoints_google_chrome_connectors_list	List Google Chrome device-management connectors with optional filtering	read-only	read-only, idempotent
authentik_endpoints_google_chrome_connectors_get	Retrieve a single Google Chrome connector by its UUID	read-only	read-only, idempotent
authentik_endpoints_google_chrome_connectors_create	Create a new Google Chrome connector with service-account credentials	full	—
authentik_endpoints_google_chrome_connectors_update	Update a Google Chrome connector (partial update)	full	destructive, idempotent
authentik_endpoints_google_chrome_connectors_delete	Delete a Google Chrome connector by its UUID (irreversible)	full	destructive

ISE-PSSO Agents

Tool	Description	Access	Hints
authentik_endpoints_psso_ise_list	List Apple Independent Secure Enclave (ISE-PSSO) agents with optional filtering	read-only	read-only, idempotent
authentik_endpoints_psso_ise_get	Retrieve a single ISE-PSSO agent by its UUID	read-only	read-only, idempotent
authentik_endpoints_psso_ise_delete	Delete an ISE-PSSO agent by its UUID (irreversible)	full	destructive

Connectors (generic registry)

Tool	Description	Access	Hints
authentik_endpoints_connectors_list	List all endpoint connectors across types (generic registry view)	read-only	read-only, idempotent
authentik_endpoints_connectors_get	Retrieve a single endpoint connector by its UUID from the generic registry	read-only	read-only, idempotent
authentik_endpoints_connectors_delete	Delete an endpoint connector by its UUID from the generic registry (irreversible)	full	destructive

Tool	Description	Access	Hints
authentik_enterprise_license_list	List enterprise licenses with optional filters	read-only	read-only, idempotent
authentik_enterprise_license_get	Get a single enterprise license by its UUID	read-only	read-only, idempotent
authentik_enterprise_license_create	Install a new enterprise license key	full	—
authentik_enterprise_license_update	Update an existing enterprise license (partial update)	full	destructive, idempotent
authentik_enterprise_license_delete	Delete an enterprise license by its UUID	full	destructive
authentik_enterprise_license_summary	Get the total enterprise license status summary	read-only	read-only, idempotent
authentik_enterprise_license_forecast	Forecast how many users will be required in a year based on current growth	read-only	read-only, idempotent
authentik_enterprise_install_id	Get the authentik installation ID (used for license generation)	read-only	read-only, idempotent

Events