Authentik MCP Server
Connects Claude to Authentik's identity platform with 297 tools spanning user management, groups, applications, flows, policies, providers, and RBAC across 22 API categories. Built on the official @goauthentik/api SDK for Authentik 2026.5. Ships with a read-only mode that exposes 144 safe monitoring tools, plus category filtering to surface only the endpoints you need. Available via npx or Docker with both stdio and HTTP transports. The tool allowlist and blacklist let you fine-tune which operations reach your AI assistant. Reach for this when you're managing Authentik through conversational interfaces and need type-safe access to the full identity stack without writing integration code.
- GitHub stars
- 16
- tools
- 77
- auth
- Secret needed
- transport
- STDIO
- env vars
- 2
- last updated
- Nov 12, 2026
Tools
77 toolsPublic tool metadata for what this MCP can expose to an agent.
authentik_admin_system_infoGet system information including HTTP host, runtime environment, server time, and embedded outpost status
Get system information including HTTP host, runtime environment, server time, and embedded outpost status
No parameter schema in public metadata yet.
authentik_admin_versionGet Authentik version information including current version and build hash
Get Authentik version information including current version and build hash
No parameter schema in public metadata yet.
authentik_admin_settings_getGet current system settings
Get current system settings
No parameter schema in public metadata yet.
authentik_admin_settings_updateUpdate system settings (partial update)
Update system settings (partial update)
No parameter schema in public metadata yet.
authentik_admin_appsList installed Django applications in the Authentik instance
List installed Django applications in the Authentik instance
No parameter schema in public metadata yet.
authentik_admin_modelsList all data models available in the Authentik instance
List all data models available in the Authentik instance
No parameter schema in public metadata yet.
authentik_admin_version_historyList Authentik version history entries
List Authentik version history entries
No parameter schema in public metadata yet.
authentik_admin_system_task_triggerTrigger all system tasks (e.g., cleanup, cache clear)
Trigger all system tasks (e.g., cleanup, cache clear)
No parameter schema in public metadata yet.
authentik_authenticators_listList all authenticator devices across all types for the current user
List all authenticator devices across all types for the current user
No parameter schema in public metadata yet.
authentik_authenticators_admin_by_type_listList authenticator devices of a specific type (admin view)
List authenticator devices of a specific type (admin view)
No parameter schema in public metadata yet.
authentik_authenticators_admin_by_type_getGet a single authenticator device by type and ID (admin view)
Get a single authenticator device by type and ID (admin view)
No parameter schema in public metadata yet.
authentik_authenticators_admin_by_type_deleteDelete an authenticator device by type and ID (admin view)
Delete an authenticator device by type and ID (admin view)
No parameter schema in public metadata yet.
authentik_authenticators_user_by_type_listList authenticator devices of a specific type for the current user
List authenticator devices of a specific type for the current user
No parameter schema in public metadata yet.
authentik_users_listList users with optional filters for username, email, name, active status, superuser status, path, groups, and search
List users with optional filters for username, email, name, active status, superuser status, path, groups, and search
No parameter schema in public metadata yet.
authentik_users_getGet a single user by their numeric ID
Get a single user by their numeric ID
No parameter schema in public metadata yet.
authentik_users_createCreate a new user
Create a new user
No parameter schema in public metadata yet.
authentik_users_updateUpdate an existing user (partial update)
Update an existing user (partial update)
No parameter schema in public metadata yet.
authentik_users_deleteDelete a user by their numeric ID
Delete a user by their numeric ID
No parameter schema in public metadata yet.
authentik_users_meGet information about the currently authenticated user
Get information about the currently authenticated user
No parameter schema in public metadata yet.
authentik_users_set_passwordSet a new password for a user
Set a new password for a user
No parameter schema in public metadata yet.
authentik_users_create_service_accountCreate a new service account user with an optional associated group and token
Create a new service account user with an optional associated group and token
No parameter schema in public metadata yet.
authentik_users_generate_recovery_linkGenerate a temporary recovery link for a user to regain account access
Generate a temporary recovery link for a user to regain account access
No parameter schema in public metadata yet.
authentik_users_send_recovery_emailSend a recovery email to a user using a specified email stage
Send a recovery email to a user using a specified email stage
No parameter schema in public metadata yet.
authentik_users_list_pathsList all user paths configured in the system
List all user paths configured in the system
No parameter schema in public metadata yet.
authentik_users_account_lockdownLock down a user account, deactivating it and terminating its active sessions
Lock down a user account, deactivating it and terminating its active sessions
No parameter schema in public metadata yet.
authentik_users_exportTrigger an export of users with optional filters, producing a downloadable export artifact
Trigger an export of users with optional filters, producing a downloadable export artifact
No parameter schema in public metadata yet.
authentik_groups_listList groups with optional filters for name, superuser status, members, and search
List groups with optional filters for name, superuser status, members, and search
No parameter schema in public metadata yet.
authentik_groups_getGet a single group by its UUID
Get a single group by its UUID
No parameter schema in public metadata yet.
authentik_groups_createCreate a new group with optional parent group UUIDs, superuser status, users, and custom attributes
Create a new group with optional parent group UUIDs, superuser status, users, and custom attributes
No parameter schema in public metadata yet.
authentik_groups_updateUpdate an existing group (partial update)
Update an existing group (partial update)
No parameter schema in public metadata yet.
authentik_groups_deleteDelete a group by its UUID
Delete a group by its UUID
No parameter schema in public metadata yet.
authentik_groups_add_userAdd a user to a group by group UUID and user ID
Add a user to a group by group UUID and user ID
No parameter schema in public metadata yet.
authentik_groups_remove_userRemove a user from a group by group UUID and user ID
Remove a user from a group by group UUID and user ID
No parameter schema in public metadata yet.
authentik_apps_listList applications with optional filters for name, slug, group, search, and more
List applications with optional filters for name, slug, group, search, and more
No parameter schema in public metadata yet.
authentik_apps_getGet a single application by its slug
Get a single application by its slug
No parameter schema in public metadata yet.
authentik_apps_createCreate a new application with name, slug, and optional provider, group, and metadata
Create a new application with name, slug, and optional provider, group, and metadata
No parameter schema in public metadata yet.
authentik_apps_updateUpdate an existing application (partial update)
Update an existing application (partial update)
No parameter schema in public metadata yet.
authentik_apps_set_icon_urlSet an application's icon to an external URL (sets the meta_icon field), or clear the current icon with `clear: true`
Set an application's icon to an external URL (sets the meta_icon field), or clear the current icon with `clear: true`
No parameter schema in public metadata yet.
authentik_apps_deleteDelete an application by its slug
Delete an application by its slug
No parameter schema in public metadata yet.
authentik_apps_check_accessCheck whether a specific user has access to an application
Check whether a specific user has access to an application
No parameter schema in public metadata yet.
authentik_apps_update_transactionalCreate or update an application and its provider in a single atomic transaction
Create or update an application and its provider in a single atomic transaction
No parameter schema in public metadata yet.
authentik_app_entitlements_listList application entitlements with optional filters
List application entitlements with optional filters
No parameter schema in public metadata yet.
authentik_app_entitlements_getGet a single application entitlement by its UUID
Get a single application entitlement by its UUID
No parameter schema in public metadata yet.
authentik_app_entitlements_createCreate a new application entitlement
Create a new application entitlement
No parameter schema in public metadata yet.
authentik_app_entitlements_updateUpdate an existing application entitlement (partial update)
Update an existing application entitlement (partial update)
No parameter schema in public metadata yet.
authentik_app_entitlements_deleteDelete an application entitlement by its UUID
Delete an application entitlement by its UUID
No parameter schema in public metadata yet.
authentik_tokens_listList tokens with optional filters for identifier, intent, managed status, and search
List tokens with optional filters for identifier, intent, managed status, and search
No parameter schema in public metadata yet.
authentik_tokens_getGet a single token by its identifier
Get a single token by its identifier
No parameter schema in public metadata yet.
authentik_tokens_createCreate a new token with an identifier, optional intent, description, and expiration settings
Create a new token with an identifier, optional intent, description, and expiration settings
No parameter schema in public metadata yet.
authentik_tokens_updateUpdate an existing token (partial update)
Update an existing token (partial update)
No parameter schema in public metadata yet.
authentik_tokens_deleteDelete a token by its identifier
Delete a token by its identifier
No parameter schema in public metadata yet.
authentik_tokens_view_keyView the raw key value of a token (privileged, logged)
View the raw key value of a token (privileged, logged)
No parameter schema in public metadata yet.
authentik_tokens_set_keySet a custom key value for a token
Set a custom key value for a token
No parameter schema in public metadata yet.
authentik_brands_listList brands with optional filters for UUID, domain, and search
List brands with optional filters for UUID, domain, and search
No parameter schema in public metadata yet.
authentik_brands_getGet a single brand by its UUID
Get a single brand by its UUID
No parameter schema in public metadata yet.
authentik_brands_createCreate a new brand with domain, branding settings, flow assignments, and optional attributes
Create a new brand with domain, branding settings, flow assignments, and optional attributes
No parameter schema in public metadata yet.
authentik_brands_updateUpdate an existing brand (partial update)
Update an existing brand (partial update)
No parameter schema in public metadata yet.
authentik_brands_deleteDelete a brand by its UUID
Delete a brand by its UUID
No parameter schema in public metadata yet.
authentik_brands_currentGet the brand configuration for the current domain
Get the brand configuration for the current domain
No parameter schema in public metadata yet.
authentik_crypto_listList certificate keypairs with optional filters
List certificate keypairs with optional filters
No parameter schema in public metadata yet.
authentik_crypto_getGet a single certificate keypair by its UUID
Get a single certificate keypair by its UUID
No parameter schema in public metadata yet.
authentik_crypto_createCreate a new certificate keypair from PEM-encoded certificate and optional private key data
Create a new certificate keypair from PEM-encoded certificate and optional private key data
No parameter schema in public metadata yet.
authentik_crypto_updateUpdate an existing certificate keypair (partial update)
Update an existing certificate keypair (partial update)
No parameter schema in public metadata yet.
authentik_crypto_deleteDelete a certificate keypair by its UUID
Delete a certificate keypair by its UUID
No parameter schema in public metadata yet.
authentik_crypto_generateGenerate a new self-signed certificate keypair (RSA, ECDSA, ED25519, or ED448)
Generate a new self-signed certificate keypair (RSA, ECDSA, ED25519, or ED448)
No parameter schema in public metadata yet.
authentik_crypto_view_certificateView the PEM-encoded certificate data for a keypair
View the PEM-encoded certificate data for a keypair
No parameter schema in public metadata yet.
authentik_crypto_view_private_keyView the PEM-encoded private key data for a keypair (sensitive)
View the PEM-encoded private key data for a keypair (sensitive)
No parameter schema in public metadata yet.
authentik_endpoints_devices_listList managed endpoint devices with optional filtering by name or identifier, search, and ordering
List managed endpoint devices with optional filtering by name or identifier, search, and ordering
No parameter schema in public metadata yet.
authentik_endpoints_devices_getRetrieve a single endpoint device by its UUID
Retrieve a single endpoint device by its UUID
No parameter schema in public metadata yet.
authentik_endpoints_devices_summaryRetrieve aggregate summary statistics about managed endpoint devices
Retrieve aggregate summary statistics about managed endpoint devices
No parameter schema in public metadata yet.
authentik_endpoints_devices_updateUpdate an endpoint device (partial update)
Update an endpoint device (partial update)
No parameter schema in public metadata yet.
authentik_endpoints_devices_deleteDelete an endpoint device by its UUID (irreversible)
Delete an endpoint device by its UUID (irreversible)
No parameter schema in public metadata yet.
authentik_endpoints_device_access_groups_listList device access groups with optional filtering by name, search, and ordering
List device access groups with optional filtering by name, search, and ordering
No parameter schema in public metadata yet.
authentik_endpoints_device_access_groups_getRetrieve a single device access group by its UUID
Retrieve a single device access group by its UUID
No parameter schema in public metadata yet.
authentik_endpoints_device_access_groups_createCreate a new device access group (bundles devices for policy targeting)
Create a new device access group (bundles devices for policy targeting)
No parameter schema in public metadata yet.
authentik_endpoints_device_access_groups_updateUpdate a device access group (partial update)
Update a device access group (partial update)
No parameter schema in public metadata yet.
authentik_endpoints_device_access_groups_deleteDelete a device access group by its UUID (irreversible)
Delete a device access group by its UUID (irreversible)
No parameter schema in public metadata yet.
Sponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageConfiguration
AUTHENTIK_URL*URL of the Authentik instance (e.g. https://auth.example.com)
AUTHENTIK_TOKEN*secretAuthentik API token
Readme
MCP Authentik
MCP server for Authentik identity management. Manage users, groups, applications, flows, policies, providers, and more through natural language in Cursor, Claude Code, and Claude Desktop.
Features
Details
- Repository
- github.com/samik081/mcp-authentik
- Package
@samik081/mcp-authentik- Transport
- STDIO
- Auth
- Required
- Registry
- MCP registry, active