Auth0 MCP Server

Overview

The Auth0 MCP Server is an official Model Context Protocol server that enables AI assistants to interact with Auth0's identity and access management platform. It provides secure access to Auth0 Management API functionality through natural language, allowing you to manage applications, APIs, actions, logs, and forms.

Key Features

Available Tools

Quick Reference

Detailed Usage

use_mcp_tool({
  server_name: "auth0",
  tool_name: "list_applications",
  arguments: {
    per_page: 50,
    page: 0
  }
});

use_mcp_tool({
  server_name: "auth0",
  tool_name: "create_application",
  arguments: {
    name: "My SPA Application",
    app_type: "spa",
    callbacks: ["http://localhost:3000/callback"],
    allowed_origins: ["http://localhost:3000"]
  }
});

use_mcp_tool({
  server_name: "auth0",
  tool_name: "list_resource_servers",
  arguments: {}
});

use_mcp_tool({
  server_name: "auth0",
  tool_name: "create_resource_server",
  arguments: {
    name: "My API",
    identifier: "https://api.example.com",
    scopes: [
      { value: "read:data", description: "Read data" },
      { value: "write:data", description: "Write data" }
    ]
  }
});

use_mcp_tool({
  server_name: "auth0",
  tool_name: "list_actions",
  arguments: {
    triggerId: "post-login"
  }
});

use_mcp_tool({
  server_name: "auth0",
  tool_name: "create_action",
  arguments: {
    name: "Add Custom Claims",
    trigger_id: "post-login",
    code: `exports.onExecutePostLogin = async (event, api) => {
      api.idToken.setCustomClaim('role', 'admin');
    };`
  }
});

use_mcp_tool({
  server_name: "auth0",
  tool_name: "deploy_action",
  arguments: {
    action_id: "act_abc123"
  }
});

use_mcp_tool({
  server_name: "auth0",
  tool_name: "list_logs",
  arguments: {
    q: "type:f",
    per_page: 100
  }
});

use_mcp_tool({
  server_name: "auth0",
  tool_name: "list_forms",
  arguments: {}
});

use_mcp_tool({
  server_name: "auth0",
  tool_name: "create_form",
  arguments: {
    name: "Custom Signup Form",
    nodes: [
      {
        type: "input",
        config: {
          label: "Company Name",
          name: "company",
          required: true
        }
      }
    ]
  }
});

Installation

npx @auth0/mcp-server init

{
  "mcpServers": {
    "auth0": {
      "command": "npx",
      "args": ["-y", "@auth0/mcp-server"]
    }
  }
}

{
  "mcpServers": {
    "auth0": {
      "command": "npx",
      "args": ["-y", "@auth0/mcp-server", "--readonly"]
    }
  }
}

{
  "mcpServers": {
    "auth0": {
      "command": "npx",
      "args": [
        "-y",
        "@auth0/mcp-server",
        "--limit-tools",
        "list_*,get_*"
      ]
    }
  }
}

Security Features

OAuth 2.0 Device Authorization Flow

The Auth0 MCP server uses OAuth 2.0 Device Authorization Flow for secure authentication:

1. Run npx @auth0/mcp-server init
2. Browser opens with authentication prompt
3. Grant necessary permissions to the MCP application
4. Credentials stored in system keychain (never in config files)

Least Privilege Access

Control what AI can access through configuration:

• Read-only mode: Prevent any write operations
• Tool limiting: Allow only specific tools (e.g., list_* for read operations)
• Glob patterns: Use wildcards to define tool access (e.g., get_*, list_applications)

Credential Management

• Credentials stored in system keychain (macOS Keychain, Windows Credential Manager, Linux Secret Service)
• No API keys or tokens in configuration files
• Automatic token refresh handled by server
• Revoke access anytime through Auth0 dashboard

Common Use Cases

Application Management

Create and configure Auth0 applications:

"Create a new SPA application called 'Marketing Dashboard' with callback URL https://marketing.example.com/callback"

API Configuration

Set up API resource servers:

"Create an API called 'Orders API' with identifier https://api.example.com/orders and scopes read:orders and write:orders"

Custom Authentication Logic

Build and deploy Actions:

"Create a post-login Action that adds a 'department' claim to the ID token based on the user's email domain"

Security Monitoring

Query and analyze logs:

"Show me all failed login attempts in the last hour"

User Experience Customization

Manage authentication forms:

"Create a signup form that collects company name and department during registration"

Troubleshooting

Authentication Issues

Problem: "Failed to authenticate with Auth0"

Solution:

1. Verify your Auth0 domain is correct
2. Re-run npx @auth0/mcp-server init
3. Check Auth0 M2M application has Management API access
4. Ensure required scopes are granted (read:applications, create:applications, etc.)

Permission Errors

Problem: "Insufficient permissions to perform action"

Solution:

1. Check your Auth0 M2M application has necessary Management API scopes
2. In Auth0 Dashboard: Applications → MCP Application → APIs → Auth0 Management API
3. Grant required scopes for the tools you need to use

Tool Not Available

Problem: "Tool not found or disabled"

Solution:

1. Check if you're using --limit-tools flag
2. Verify the tool name matches exactly (case-sensitive)
3. Remove read-only mode if you need write operations
4. Restart MCP client after config changes

Connection Timeout

Problem: "Connection to Auth0 timed out"

Solution:

1. Check internet connectivity
2. Verify Auth0 domain is accessible
3. Check firewall/proxy settings
4. Try re-authenticating with npx @auth0/mcp-server init

Sources