Auth0 MCP Server

by auth0.com·com.auth0/mcp·v0.1.0-beta.10·122 stars

No reviews yet

Auth0 MCP Server: Manage Auth0 applications, APIs, actions, logs, and forms using natural language

A94/100grade A

Write a review Install

What users say

No reviews yet

Be the first

Safety scan

A94/100

full report

Adoption

Established

122 stars9.1k downloads/wk

Reviews

Write one

Nobody has reviewed Auth0 MCP Server yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Auth0 MCP Server tools (21, 10 write)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

auth0_create_actionwrite action
Create a new Auth0 action
auth0_create_applicationwrite action
Create a new Auth0 application with the tenant. Prefer OIDC compliant unless otherwise specified.
auth0_create_application_grantwrite action
Create a client grant that authorizes an Auth0 application to access a specific API with defined scopes. Required for machine-to-machine (M2M) communication using the client credentials flow. Use auth0_list_resource_servers to discover available APIs (audiences) and auth0_get_resource_server to look up available scopes before creating the grant.
auth0_create_formwrite action
Create a new Auth0 form
auth0_create_resource_serverwrite action
Create a new Auth0 resource server (API). Use RS256 for the signing_alg unless otherwise specified.
auth0_deploy_actionwrite action
Deploy an Auth0 action
auth0_get_action
Get details about a specific Auth0 action
auth0_get_application
Get details about a specific Auth0 application
auth0_get_form
Get details about a specific Auth0 form
auth0_get_log
Get a specific log entry by ID
auth0_get_resource_server
Get details about a specific Auth0 resource server
auth0_list_actions
List all actions in the Auth0 tenant
auth0_list_applications
List all applications in the Auth0 tenant or search by name
auth0_list_forms
List all forms in the Auth0 tenant
auth0_list_logs
List logs from the Auth0 tenant
auth0_list_resource_servers
List all resource servers (APIs) in the Auth0 tenant
auth0_save_credentials_to_file
Save Auth0 application credentials to a file. Only use this when you are in a project directory. This retrieves the client_secret from Auth0 and saves it locally. Requires explicit file path to prevent accidental file creation. If the file already exists, credentials are appended (existing content is preserved). Additionally, .gitignore entry is automatically added for the target file.
auth0_update_actionwrite action
Update an existing Auth0 action
auth0_update_applicationwrite action
Update an existing Auth0 application
auth0_update_formwrite action
Update an existing Auth0 form
auth0_update_resource_serverwrite action
Update an existing Auth0 resource server

Public scan report

scanner v0.1.9 · 2026-09-27 · same rubric, same numbers if you re-run it

no findings

Code scan79 source files scanned25/25
–Live reliabilityno gateway calls yet and no remote to proben/a
–Tool poisoningtools not inspected (local package is not executed); not countedn/a
Auth qualitylocal package, no credentials required12/15
Maintenancelast push 6 days ago15/15
Maintainer identityregistry namespace matches repository owner; GitHub account older than a year9/10

Overall 94/100. Components that don't apply are left out of the denominator. Any critical finding is an F.Rubric Appeal a finding JSON

How Auth0 MCP Server compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score: 94/100; higher than 96% of 48,255 servers
Tools: 21; the typical server has 7
Tools that change things: 48%; typical: 0%. Fewer write tools means less an agent can break
GitHub stars: 122; more than 95% of 28,688 servers
Downloads a week: 9,064; more than 95% of 12,191 servers with a package

What its tools let an agent do: 11 read · 10 change

Install Auth0 MCP Server in Claude Code, Cursor or VS Code

Runs npx -y @auth0/auth0-mcp-server on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add mcp -- npx -y @auth0/auth0-mcp-server

Add to Cursor

What the publisher says

From the Auth0 MCP Server repository's README, as published. We do not edit it. Read it on GitHub

📚 Documentation • 🚀 Getting Started • 💻 Supported Tools • 💬 Feedback

MCP (Model Context Protocol) is an open protocol introduced by Anthropic that standardizes how large language models communicate with external tools, resources or remote services.

Connect Claude, Cursor, or Windsurf to your Auth0 tenant to create apps, deploy Actions, debug logs, and manage users — all without touching the dashboard.

[!CAUTION]

Beta Software Notice: This software is currently in beta and is provided AS IS without any warranties.

- Features, APIs, and functionality may change at any time without notice

- Not recommended for production use or critical workloads

- Support during the beta period is limited

- Issues and feedback can be reported through the GitHub issue tracker

By using this beta software, you acknowledge and accept these conditions.

The Auth0 MCP Server integrates with LLMs and AI agents, allowing you to perform various Auth0 management operations using natural language. For instance, you could simply ask Claude Desktop to perform Auth0 management operations:

> Create a new Auth0 app and get the domain and client ID
> Create and deploy a new Auth0 action to generate a JWT token
> Could you check Auth0 logs for logins from 192.108.92.3 IP address?

🚀 Getting Started

Prerequisites:

Node.js v18 or higher
Claude Desktop or any other MCP Client
Auth0 account with appropriate permissions

Install the Auth0 MCP Server

Install Auth0 MCP Server and configure it to work with your preferred MCP Client. The --tools parameter specifies which tools should be available (defaults to * if not provided).

Claude Desktop with all tools

npx @auth0/auth0-mcp-server init

Claude Desktop with read-only tools

npx @auth0/auth0-mcp-server init --read-only

You can also explicitly select read-only tools:

npx @auth0/auth0-mcp-server init --tools 'auth0_list_*,auth0_get_*'

Claude Code

Initialize the Auth0 MCP server for Claude Code

npx @auth0/auth0-mcp-server init --client claude-code

You will be prompted to choose a configuration scope:

User — written to ~/.claude.json and available across all your projects.
Project — written to .mcp.json at a project folder you specify, intended to be checked into version control and shared with your team.

Windsurf

npx @auth0/auth0-mcp-server init --client windsurf

Cursor

Step 1:

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Auth0 MCP Server: common questions

Is Auth0 MCP Server safe?: Yes, by our scan: it is graded A (94/100). Read the Auth0 MCP Server safety report
How do I install Auth0 MCP Server?: It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Auth0 MCP Server need an API key?: Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Auth0 MCP Server maintained?: The last commit was 43 days ago (2026-09-22). The latest release is v0.1.0-beta.10.
How does Auth0 MCP Server compare with other MCP servers?: safety score 94/100 (higher than 96% of 48,255 servers); tools 21 (the typical server has 7); tools that change things 48% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.