{"name":"io.fusionauth/mcp-api","slug":"fusionauth-mcp-api","title":null,"description":"Preview release of FusionAuth API MCP server","url":"https://mcp.market/server/fusionauth-mcp-api","rating":null,"grade":"B","score":72,"certified":false,"status":"active","category":"other","tags":[],"presence":{"score":26,"stars":1,"forks":0,"downloads_week":342,"last_push_at":"2026-08-18T18:54:55.000Z","license":"NOASSERTION"},"uptime":null,"claimed":false,"transport":"npm","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/FusionAuth/fusionauth-mcp-api","website":null,"version":"0.1.14","remotes":[],"packages":[{"registryType":"npm","identifier":"@fusionauth/mcp-api","version":"0.1.14","transport":{"type":"stdio"},"environmentVariables":[{"description":"Your API key for FusionAuth instance","isRequired":true,"format":"string","isSecret":true,"name":"API_KEY_APIKEYAUTH"},{"description":"The URL for your FusionAuth instance","isRequired":true,"format":"string","placeholder":"http://localhost:9011","name":"API_BASE_URL"},{"description":"Prefixes of APIs to create MCP tools for, if not set defaults to all available tools","format":"string","placeholder":"retrieve,search","name":"USE_TOOLS"}]}],"tools":[{"name":"createAPIKey","description":"Creates an API key. You can optionally specify a unique Id for the key, if not provided one will be generated. an API key can only be created with equal or lesser authority. An API key cannot create another API key unless it is granted to that API key. If an API key is locked to a tenant, it can only create API Keys for that same tenant.","write_action":true,"price_micros":0,"input_schema":null},{"name":"createAPIKeyWithId","description":"Creates an API key. You can optionally specify a unique Id for the key, if not provided one will be generated. an API key can only be created with equal or lesser authority. An API key cannot create another API key unless it is granted to that API key. If an API key is locked to a tenant, it can only create API Keys for that same tenant.","write_action":true,"price_micros":0,"input_schema":null},{"name":"createApplication","description":"Creates an application. You can optionally specify an Id for the application, if not provided one will be generated.","write_action":true,"price_micros":0,"input_schema":null},{"name":"createApplicationRole","description":"Creates a new role for an application. You must specify the Id of the application you are creating the role for. You can optionally specify an Id for the role inside the ApplicationRole object itself, if not provided one will be generated.","write_action":true,"price_micros":0,"input_schema":null},{"name":"createApplicationRoleWithId","description":"Creates a new role for an application. You must specify the Id of the application you are creating the role for. You can optionally specify an Id for the role inside the ApplicationRole object itself, if not provided one will be generated.","write_action":true,"price_micros":0,"input_schema":null},{"name":"createApplicationWithId","description":"Creates an application. You can optionally specify an Id for the application, if not provided one will be generated.","write_action":true,"price_micros":0,"input_schema":null},{"name":"createConnector","description":"Creates a connector. You can optionally specify an Id for the connector, if not provided one will be generated.","write_action":true,"price_micros":0,"input_schema":null},{"name":"createConnectorWithId","description":"Creates a connector. You can optionally specify an Id for the connector, if not provided one will be generated.","write_action":true,"price_micros":0,"input_schema":null},{"name":"createConsent","description":"Creates a user consent type. You can optionally specify an Id for the consent type, if not provided one will be generated.","write_action":true,"price_micros":0,"input_schema":null},{"name":"createConsentWithId","description":"Creates a user consent type. You can optionally specify an Id for the consent type, if not provided one will be generated.","write_action":true,"price_micros":0,"input_schema":null},{"name":"createEmailTemplate","description":"Creates an email template. You can optionally specify an Id for the template, if not provided one will be generated.","write_action":true,"price_micros":0,"input_schema":null},{"name":"createEmailTemplateWithId","description":"Creates an email template. You can optionally specify an Id for the template, if not provided one will be generated.","write_action":true,"price_micros":0,"input_schema":null},{"name":"createEntity","description":"Creates an Entity. You can optionally specify an Id for the Entity. If not provided one will be generated.","write_action":true,"price_micros":0,"input_schema":null},{"name":"createEntityType","description":"Creates a Entity Type. You can optionally specify an Id for the Entity Type, if not provided one will be generated.","write_action":true,"price_micros":0,"input_schema":null},{"name":"createEntityTypePermission","description":"Creates a new permission for an entity type. You must specify the Id of the entity type you are creating the permission for. You can optionally specify an Id for the permission inside the EntityTypePermission object itself, if not provided one will be generated.","write_action":true,"price_micros":0,"input_schema":null},{"name":"createEntityTypePermissionWithId","description":"Creates a new permission for an entity type. You must specify the Id of the entity type you are creating the permission for. You can optionally specify an Id for the permission inside the EntityTypePermission object itself, if not provided one will be generated.","write_action":true,"price_micros":0,"input_schema":null},{"name":"createEntityTypeWithId","description":"Creates a Entity Type. You can optionally specify an Id for the Entity Type, if not provided one will be generated.","write_action":true,"price_micros":0,"input_schema":null},{"name":"createEntityWithId","description":"Creates an Entity. You can optionally specify an Id for the Entity. If not provided one will be generated.","write_action":true,"price_micros":0,"input_schema":null},{"name":"createForm","description":"Creates a form. You can optionally specify an Id for the form, if not provided one will be generated.","write_action":true,"price_micros":0,"input_schema":null},{"name":"createFormField","description":"Creates a form field. You can optionally specify an Id for the form, if not provided one will be generated.","write_action":true,"price_micros":0,"input_schema":null},{"name":"createFormFieldWithId","description":"Creates a form field. You can optionally specify an Id for the form, if not provided one will be generated.","write_action":true,"price_micros":0,"input_schema":null},{"name":"createFormWithId","description":"Creates a form. You can optionally specify an Id for the form, if not provided one will be generated.","write_action":true,"price_micros":0,"input_schema":null},{"name":"createGroup","description":"Creates a group. You can optionally specify an Id for the group, if not provided one will be generated.","write_action":true,"price_micros":0,"input_schema":null},{"name":"createGroupMembersWithId","description":"Creates a member in a group.","write_action":true,"price_micros":0,"input_schema":null},{"name":"createGroupWithId","description":"Creates a group. You can optionally specify an Id for the group, if not provided one will be generated.","write_action":true,"price_micros":0,"input_schema":null},{"name":"createOAuthScope","description":"Creates a new custom OAuth scope for an application. You must specify the Id of the application you are creating the scope for. You can optionally specify an Id for the OAuth scope on the URL, if not provided one will be generated.","write_action":true,"price_micros":0,"input_schema":null},{"name":"createOAuthScopeWithId","description":"Creates a new custom OAuth scope for an application. You must specify the Id of the application you are creating the scope for. You can optionally specify an Id for the OAuth scope on the URL, if not provided one will be generated.","write_action":true,"price_micros":0,"input_schema":null},{"name":"deleteAPIKeyWithId","description":"Deletes the API key for the given Id.","write_action":true,"price_micros":0,"input_schema":null},{"name":"deleteApplicationRoleWithId","description":"Hard deletes an application role. This is a dangerous operation and should not be used in most circumstances. This permanently removes the given role from all users that had it.","write_action":true,"price_micros":0,"input_schema":null},{"name":"deleteApplicationWithId","description":"Hard deletes an application. This is a dangerous operation and should not be used in most circumstances. This will delete the application, any registrations for that application, metrics and reports for the application, all the roles for the application, and any other data associated with the application. This operation could take a very long time, depending on the amount of data in your database.","write_action":true,"price_micros":0,"input_schema":null},{"name":"deleteConnectorWithId","description":"Deletes the connector for the given Id.","write_action":true,"price_micros":0,"input_schema":null},{"name":"deleteConsentWithId","description":"Deletes the consent for the given Id.","write_action":true,"price_micros":0,"input_schema":null},{"name":"deleteEmailTemplateWithId","description":"Deletes the email template for the given Id.","write_action":true,"price_micros":0,"input_schema":null},{"name":"deleteEntityGrantWithId","description":"Deletes an Entity Grant for the given User or Entity.","write_action":true,"price_micros":0,"input_schema":null},{"name":"deleteEntityTypePermissionWithId","description":"Hard deletes a permission. This is a dangerous operation and should not be used in most circumstances. This permanently removes the given permission from all grants that had it.","write_action":true,"price_micros":0,"input_schema":null},{"name":"deleteEntityTypeWithId","description":"Deletes the Entity Type for the given Id.","write_action":true,"price_micros":0,"input_schema":null},{"name":"deleteEntityWithId","description":"Deletes the Entity for the given Id.","write_action":true,"price_micros":0,"input_schema":null},{"name":"deleteFormFieldWithId","description":"Deletes the form field for the given Id.","write_action":true,"price_micros":0,"input_schema":null},{"name":"deleteFormWithId","description":"Deletes the form for the given Id.","write_action":true,"price_micros":0,"input_schema":null},{"name":"deleteGroupMembersWithId","description":"Removes users as members of a group.","write_action":true,"price_micros":0,"input_schema":null},{"name":"deleteGroupWithId","description":"Deletes the group for the given Id.","write_action":true,"price_micros":0,"input_schema":null},{"name":"deleteOAuthScopeWithId","description":"Hard deletes a custom OAuth scope. OAuth workflows that are still requesting the deleted OAuth scope may fail depending on the application's unknown scope policy.","write_action":true,"price_micros":0,"input_schema":null},{"name":"patchAPIKeyWithId","description":"Updates an API key with the given Id.","write_action":true,"price_micros":0,"input_schema":null},{"name":"patchApplicationRoleWithId","description":"Updates, via PATCH, the application role with the given Id for the application.","write_action":true,"price_micros":0,"input_schema":null},{"name":"patchApplicationWithId","description":"Updates, via PATCH, the application with the given Id.","write_action":true,"price_micros":0,"input_schema":null},{"name":"patchConnectorWithId","description":"Updates, via PATCH, the connector with the given Id.","write_action":true,"price_micros":0,"input_schema":null},{"name":"patchConsentWithId","description":"Updates, via PATCH, the consent with the given Id.","write_action":true,"price_micros":0,"input_schema":null},{"name":"patchEmailTemplateWithId","description":"Updates, via PATCH, the email template with the given Id.","write_action":true,"price_micros":0,"input_schema":null},{"name":"patchEntityTypePermissionWithId","description":"Patches the permission with the given Id for the entity type.","write_action":true,"price_micros":0,"input_schema":null},{"name":"patchEntityTypeWithId","description":"Updates, via PATCH, the Entity Type with the given Id.","write_action":true,"price_micros":0,"input_schema":null},{"name":"patchEntityWithId","description":"Updates, via PATCH, the Entity with the given Id.","write_action":true,"price_micros":0,"input_schema":null},{"name":"patchFormFieldWithId","description":"Patches the form field with the given Id.","write_action":true,"price_micros":0,"input_schema":null},{"name":"patchFormWithId","description":"Patches the form with the given Id.","write_action":true,"price_micros":0,"input_schema":null},{"name":"patchGroupWithId","description":"Updates, via PATCH, the group with the given Id.","write_action":true,"price_micros":0,"input_schema":null},{"name":"patchOAuthScopeWithId","description":"Updates, via PATCH, the custom OAuth scope with the given Id for the application.","write_action":true,"price_micros":0,"input_schema":null},{"name":"retrieveAPIKeyWithId","description":"Retrieves an authentication API key for the given Id.","write_action":false,"price_micros":0,"input_schema":null},{"name":"retrieveApplication","description":"Retrieves all the applications that are currently inactive. OR Retrieves the application for the given Id or all the applications if the Id is null.","write_action":false,"price_micros":0,"input_schema":null},{"name":"retrieveApplicationWithId","description":"Retrieves the application for the given Id or all the applications if the Id is null.","write_action":false,"price_micros":0,"input_schema":null},{"name":"retrieveConnectorWithId","description":"Retrieves the connector with the given Id.","write_action":false,"price_micros":0,"input_schema":null},{"name":"retrieveConsentWithId","description":"Retrieves the Consent for the given Id.","write_action":false,"price_micros":0,"input_schema":null},{"name":"retrieveEmailTemplate","description":"Retrieves the email template for the given Id. If you don't specify the Id, this will return all the email templates.","write_action":true,"price_micros":0,"input_schema":null},{"name":"retrieveEmailTemplatePreviewWithId","description":"Creates a preview of the email template provided in the request. This allows you to preview an email template that hasn't been saved to the database yet. The entire email template does not need to be provided on the request. This will create the preview based on whatever is given.","write_action":true,"price_micros":0,"input_schema":null},{"name":"retrieveEmailTemplateWithId","description":"Retrieves the email template for the given Id. If you don't specify the Id, this will return all the email templates.","write_action":true,"price_micros":0,"input_schema":null},{"name":"retrieveEntityGrantWithId","description":"Retrieves an Entity Grant for the given Entity and User/Entity.","write_action":false,"price_micros":0,"input_schema":null},{"name":"retrieveEntityTypeWithId","description":"Retrieves the Entity Type for the given Id.","write_action":false,"price_micros":0,"input_schema":null},{"name":"retrieveEntityWithId","description":"Retrieves the Entity for the given Id.","write_action":false,"price_micros":0,"input_schema":null},{"name":"retrieveFormFieldWithId","description":"Retrieves the form field with the given Id.","write_action":false,"price_micros":0,"input_schema":null},{"name":"retrieveFormWithId","description":"Retrieves the form with the given Id.","write_action":false,"price_micros":0,"input_schema":null},{"name":"retrieveGroupWithId","description":"Retrieves the group for the given Id.","write_action":false,"price_micros":0,"input_schema":null},{"name":"retrieveIdentityProviderByTypeWithId","description":"Retrieves one or more identity provider for the given type. For types such as Google, Facebook, Twitter and LinkedIn, only a single identity provider can exist. For types such as OpenID Connect and SAMLv2 more than one identity provider can be configured so this request may return multiple identity providers.","write_action":false,"price_micros":0,"input_schema":null},{"name":"retrieveJsonWebKeySetWithId","description":"Returns public keys used by FusionAuth to cryptographically verify JWTs using the JSON Web Key format.","write_action":false,"price_micros":0,"input_schema":null},{"name":"retrieveOAuthScopeWithId","description":"Retrieves a custom OAuth scope.","write_action":false,"price_micros":0,"input_schema":null},{"name":"retrieveOauthConfigurationWithId","description":"Retrieves the Oauth2 configuration for the application for the given Application Id.","write_action":false,"price_micros":0,"input_schema":null},{"name":"retrieveOpenIdConfigurationWithId","description":"Returns the well known OpenID Configuration JSON document","write_action":false,"price_micros":0,"input_schema":null},{"name":"retrieveSystemHealthWithId","description":"Retrieves the FusionAuth system health. This API will return 200 if the system is healthy, and 500 if the system is un-healthy.","write_action":false,"price_micros":0,"input_schema":null},{"name":"searchApplicationsWithId","description":"Searches applications with the specified criteria and pagination.","write_action":false,"price_micros":0,"input_schema":null},{"name":"searchConsentsWithId","description":"Searches consents with the specified criteria and pagination.","write_action":false,"price_micros":0,"input_schema":null},{"name":"searchEmailTemplatesWithId","description":"Searches email templates with the specified criteria and pagination.","write_action":true,"price_micros":0,"input_schema":null},{"name":"searchEntitiesByIdsWithId","description":"Retrieves the entities for the given Ids. If any Id is invalid, it is ignored.","write_action":false,"price_micros":0,"input_schema":null},{"name":"searchEntitiesWithId","description":"Searches entities with the specified criteria and pagination.","write_action":false,"price_micros":0,"input_schema":null},{"name":"searchEntityGrantsWithId","description":"Searches Entity Grants with the specified criteria and pagination.","write_action":false,"price_micros":0,"input_schema":null},{"name":"searchEntityTypesWithId","description":"Searches the entity types with the specified criteria and pagination.","write_action":false,"price_micros":0,"input_schema":null},{"name":"searchGroupMembersWithId","description":"Searches group members with the specified criteria and pagination.","write_action":false,"price_micros":0,"input_schema":null},{"name":"searchGroupsWithId","description":"Searches groups with the specified criteria and pagination.","write_action":false,"price_micros":0,"input_schema":null},{"name":"sendEmailWithId","description":"Send an email using an email template Id. You can optionally provide <code>requestData</code> to access key value pairs in the email template.","write_action":true,"price_micros":0,"input_schema":null},{"name":"updateAPIKeyWithId","description":"Updates an API key with the given Id.","write_action":true,"price_micros":0,"input_schema":null},{"name":"updateApplicationRoleWithId","description":"Updates the application role with the given Id for the application.","write_action":true,"price_micros":0,"input_schema":null},{"name":"updateApplicationWithId","description":"Updates the application with the given Id. OR Reactivates the application with the given Id.","write_action":true,"price_micros":0,"input_schema":null},{"name":"updateConnectorWithId","description":"Updates the connector with the given Id.","write_action":true,"price_micros":0,"input_schema":null},{"name":"updateConsentWithId","description":"Updates the consent with the given Id.","write_action":true,"price_micros":0,"input_schema":null},{"name":"updateEmailTemplateWithId","description":"Updates the email template with the given Id.","write_action":true,"price_micros":0,"input_schema":null},{"name":"updateEntityTypePermissionWithId","description":"Updates the permission with the given Id for the entity type.","write_action":true,"price_micros":0,"input_schema":null},{"name":"updateEntityTypeWithId","description":"Updates the Entity Type with the given Id.","write_action":true,"price_micros":0,"input_schema":null},{"name":"updateEntityWithId","description":"Updates the Entity with the given Id.","write_action":true,"price_micros":0,"input_schema":null},{"name":"updateFormFieldWithId","description":"Updates the form field with the given Id.","write_action":true,"price_micros":0,"input_schema":null},{"name":"updateFormWithId","description":"Updates the form with the given Id.","write_action":true,"price_micros":0,"input_schema":null},{"name":"updateGroupMembersWithId","description":"Creates a member in a group.","write_action":true,"price_micros":0,"input_schema":null},{"name":"updateGroupWithId","description":"Updates the group with the given Id.","write_action":true,"price_micros":0,"input_schema":null},{"name":"updateOAuthScopeWithId","description":"Updates the OAuth scope with the given Id for the application.","write_action":true,"price_micros":0,"input_schema":null},{"name":"upsertEntityGrantWithId","description":"Creates or updates an Entity Grant. This is when a User/Entity is granted permissions to an Entity.","write_action":true,"price_micros":0,"input_schema":null}],"scan":{"score":72,"grade":"B","scanned_at":"2026-09-27T23:15:15.643Z","report":{"scannerVersion":"0.1.9","scannedAt":"2026-09-27T23:15:15.587Z","components":{"code":{"score":20,"max":25,"notes":["4 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":6,"max":15,"notes":["static API keys via environment variables"]},"maintenance":{"score":12,"max":15,"notes":["last push 40 days ago"]},"identity":{"score":9,"max":10,"notes":["registry namespace matches repository owner","GitHub account older than a year"]}},"findings":[{"id":"exec.eval","severity":"medium","component":"code","title":"eval / new Function used","evidence":"build/index.js: …(jsonSchema); const zodSchema = eval(zodSchemaString); if (typeof zod…"}],"inputs":{"packages":[{"registryType":"npm","identifier":"@fusionauth/mcp-api","version":"0.1.14","found":true,"license":"Apache-2.0","hasInstallScripts":false,"dependencyCount":5,"publishedAt":"2025-11-11T20:23:31.531Z","repositoryUrl":"git+https://github.com/FusionAuth/fusionauth-mcp-api.git","weeklyDownloads":342}],"repo":{"found":true,"owner":"FusionAuth","repo":"fusionauth-mcp-api","archived":false,"pushedAt":"2026-08-18T18:54:55Z","stars":1,"forks":0,"openIssues":0,"ownerType":"Organization","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/41974756?v=4","ownerCreatedAt":"2018-07-31T23:26:23Z","license":"NOASSERTION"},"icon":{"url":"https://cdn.prod.website-files.com/617b1b1f42c1da41aeae3413/63ed72f064971357c145001b_webclip.png","source":"site","width":256,"height":256},"presence":{"stars":1,"forks":0,"downloadsWeek":342,"license":"NOASSERTION","lastPushAt":"2026-08-18T18:54:55.000Z","score":26}}}},"grade_history":[],"reviews":[]}