# Mcp Authentik

> Manage Authentik through AI assistants

- **Type:** MCP server
- **Install:** `agentstack add mcp-samik081-mcp-authentik`
- **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior
- **Seller:** [Samik081](https://agentstack.voostack.com/s/samik081)
- **Installs:** 0
- **Category:** [Integrations](https://agentstack.voostack.com/c/integrations)
- **Latest version:** 0.4.7
- **License:** MIT
- **Upstream author:** [Samik081](https://github.com/Samik081)
- **Source:** https://github.com/Samik081/mcp-authentik

## Install

```sh
agentstack add mcp-samik081-mcp-authentik
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

[](https://www.npmjs.com/package/@samik081/mcp-authentik)
[](https://ghcr.io/samik081/mcp-authentik)
[](https://opensource.org/licenses/MIT)
[](https://nodejs.org)

# MCP Authentik

MCP server for [Authentik](https://goauthentik.io/) identity management. Manage users, groups, applications, flows, policies, providers, and more through natural language in Cursor, Claude Code, and Claude Desktop.

## Features

- **297 tools** across **22 categories** covering the complete Authentik API
- **Read-only mode** via `AUTHENTIK_ACCESS_TIER=read-only` for safe monitoring
- **Category filtering** via `AUTHENTIK_CATEGORIES` to expose only the tools you need
- **Type-safe SDK client** via `@goauthentik/api`
- **Docker images** for `linux/amd64` and `linux/arm64` on [GHCR](https://ghcr.io/samik081/mcp-authentik)
- **Remote MCP** via HTTP transport (`MCP_TRANSPORT=http`) using the Streamable HTTP protocol
- **TypeScript/ESM** with full type safety

## API Compatibility

Built for Authentik **2026.5**.

## Quick Start

Run the server directly with npx:

```bash
AUTHENTIK_URL="https://auth.example.com" \
AUTHENTIK_TOKEN="your-api-token" \
npx -y @samik081/mcp-authentik
```

The server validates your Authentik connection on startup and fails immediately with a clear error if credentials are missing or invalid.

### Docker

Run with Docker (stdio transport, same as npx):

```bash
docker run --rm -i \
  -e AUTHENTIK_URL=https://auth.example.com \
  -e AUTHENTIK_TOKEN=your-api-token \
  ghcr.io/samik081/mcp-authentik
```

To run as a remote MCP server with HTTP transport:

```bash
docker run -d -p 3000:3000 \
  -e MCP_TRANSPORT=http \
  -e AUTHENTIK_URL=https://auth.example.com \
  -e AUTHENTIK_TOKEN=your-api-token \
  ghcr.io/samik081/mcp-authentik
```

The MCP endpoint is available at `http://localhost:3000` and a health check at `http://localhost:3000/health`.

## Configuration

**Claude Code CLI (recommended):**

```bash
# Using npx
claude mcp add --transport stdio authentik \
  --env AUTHENTIK_URL=https://auth.example.com \
  --env AUTHENTIK_TOKEN=your-api-token \
  -- npx -y @samik081/mcp-authentik

# Using Docker
claude mcp add --transport stdio authentik \
  --env AUTHENTIK_URL=https://auth.example.com \
  --env AUTHENTIK_TOKEN=your-api-token \
  -- docker run --rm -i ghcr.io/samik081/mcp-authentik

# Using remote HTTP (connect to a running Docker container or HTTP server)
claude mcp add --transport http authentik http://localhost:3000
```

**JSON config** (works with Claude Code `.mcp.json`, Claude Desktop `claude_desktop_config.json`, Cursor `.cursor/mcp.json`):

```json
{
  "mcpServers": {
    "authentik": {
      "command": "npx",
      "args": ["-y", "@samik081/mcp-authentik"],
      "env": {
        "AUTHENTIK_URL": "https://auth.example.com",
        "AUTHENTIK_TOKEN": "your-api-token"
      }
    }
  }
}
```

**Docker (stdio):**

```json
{
  "mcpServers": {
    "authentik": {
      "command": "docker",
      "args": ["run", "--rm", "-i",
        "-e", "AUTHENTIK_URL=https://auth.example.com",
        "-e", "AUTHENTIK_TOKEN=your-api-token",
        "ghcr.io/samik081/mcp-authentik"
      ]
    }
  }
}
```

**Remote MCP** (connect to a running Docker container or HTTP server):

```json
{
  "mcpServers": {
    "authentik": {
      "type": "streamable-http",
      "url": "http://localhost:3000"
    }
  }
}
```

## Access Tiers

Control which tools are available using the `AUTHENTIK_ACCESS_TIER` environment variable:

| Tier | Tools | Description |
|------|-------|-------------|
| `full` (default) | 297 | Read and write -- full control |
| `read-only` | 144 | Read only -- safe for monitoring, no state changes |

- **full**: All 297 tools. Includes creating, updating, and deleting users, groups, applications, flows, providers, and all other resources.
- **read-only**: 144 tools. Listing and viewing resources only. No state changes.

Tools that are not available in your tier are not registered with the MCP server. They will not appear in your AI tool's tool list, keeping the context clean.

## Environment Variables

| Variable | Required | Default | Description |
|----------|----------|---------|-------------|
| `AUTHENTIK_URL` | Yes | -- | Authentik instance URL (e.g., `https://auth.example.com`) |
| `AUTHENTIK_TOKEN` | Yes | -- | API token with appropriate permissions |
| `AUTHENTIK_ACCESS_TIER` | No | `full` | `read-only` for read-only tools only, `full` for all tools |
| `AUTHENTIK_CATEGORIES` | No | *(all)* | Comma-separated category allowlist (e.g., `core,admin,flows`) |
| `AUTHENTIK_TOOL_BLACKLIST` | No | *(none)* | Comma-separated list of tool names to exclude (e.g., `authentik_users_delete`) |
| `AUTHENTIK_TOOL_WHITELIST` | No | *(none)* | Comma-separated list of tool names to force-include, bypassing access tier and category filters |
| `DEBUG` | No | `false` | Enable debug logging to stderr |
| `MCP_TRANSPORT` | No | `stdio` | Transport mode: `stdio` (default) or `http` |
| `MCP_PORT` | No | `3000` | HTTP server port (only used when `MCP_TRANSPORT=http`) |
| `MCP_HOST` | No | `0.0.0.0` | HTTP server bind address (only used when `MCP_TRANSPORT=http`) |
| `MCP_EXCLUDE_TOOL_TITLES` | No | `false` | Set `true` to omit tool titles from registration (saves tokens) |

### Available Categories

`admin`, `authenticators`, `core`, `crypto`, `endpoints`, `enterprise`, `events`, `flows`, `managed`, `oauth2`, `outposts`, `policies`, `property-mappings`, `providers`, `rac`, `rbac`, `reports`, `root`, `sources`, `ssf`, `stages`, `tenants`

## Tools

mcp-authentik provides 297 tools organized by category. Each tool's Access column shows the minimum tier required: `read-only` (available in both tiers) or `full` (requires `full` tier). The Hints column shows tool behavior: `read-only` (no state changes), `destructive` (modifies existing state), `idempotent` (same result if called twice).

Admin (8 tools)

| Tool | Description | Access | Hints |
|------|-------------|--------|-------|
| `authentik_admin_system_info` | Get system information including HTTP host, runtime environment, server time, and embedded outpost status | read-only | read-only, idempotent |
| `authentik_admin_version` | Get Authentik version information including current version and build hash | read-only | read-only, idempotent |
| `authentik_admin_settings_get` | Get current system settings | read-only | read-only, idempotent |
| `authentik_admin_settings_update` | Update system settings (partial update) | full | destructive, idempotent |
| `authentik_admin_apps` | List installed Django applications in the Authentik instance | read-only | read-only, idempotent |
| `authentik_admin_models` | List all data models available in the Authentik instance | read-only | read-only, idempotent |
| `authentik_admin_version_history` | List Authentik version history entries | read-only | read-only, idempotent |
| `authentik_admin_system_task_trigger` | Trigger all system tasks (e.g., cleanup, cache clear) | full | — |

Authenticators (5 tools)

| Tool | Description | Access | Hints |
|------|-------------|--------|-------|
| `authentik_authenticators_list` | List all authenticator devices across all types for the current user | read-only | read-only, idempotent |
| `authentik_authenticators_admin_by_type_list` | List authenticator devices of a specific type (admin view) | read-only | read-only, idempotent |
| `authentik_authenticators_admin_by_type_get` | Get a single authenticator device by type and ID (admin view) | read-only | read-only, idempotent |
| `authentik_authenticators_admin_by_type_delete` | Delete an authenticator device by type and ID (admin view) | full | destructive |
| `authentik_authenticators_user_by_type_list` | List authenticator devices of a specific type for the current user | read-only | read-only, idempotent |

Core (45 tools)

**Users**

| Tool | Description | Access | Hints |
|------|-------------|--------|-------|
| `authentik_users_list` | List users with optional filters for username, email, name, active status, superuser status, path, groups, and search | read-only | read-only, idempotent |
| `authentik_users_get` | Get a single user by their numeric ID | read-only | read-only, idempotent |
| `authentik_users_create` | Create a new user | full | — |
| `authentik_users_update` | Update an existing user (partial update) | full | destructive, idempotent |
| `authentik_users_delete` | Delete a user by their numeric ID | full | destructive |
| `authentik_users_me` | Get information about the currently authenticated user | read-only | read-only, idempotent |
| `authentik_users_set_password` | Set a new password for a user | full | destructive, idempotent |
| `authentik_users_create_service_account` | Create a new service account user with an optional associated group and token | full | — |
| `authentik_users_generate_recovery_link` | Generate a temporary recovery link for a user to regain account access | full | — |
| `authentik_users_send_recovery_email` | Send a recovery email to a user using a specified email stage | full | — |
| `authentik_users_list_paths` | List all user paths configured in the system | read-only | read-only, idempotent |
| `authentik_users_account_lockdown` | Lock down a user account, deactivating it and terminating its active sessions | full | destructive |
| `authentik_users_export` | Trigger an export of users with optional filters, producing a downloadable export artifact | full | — |

**Groups**

| Tool | Description | Access | Hints |
|------|-------------|--------|-------|
| `authentik_groups_list` | List groups with optional filters for name, superuser status, members, and search | read-only | read-only, idempotent |
| `authentik_groups_get` | Get a single group by its UUID | read-only | read-only, idempotent |
| `authentik_groups_create` | Create a new group with optional parent group UUIDs, superuser status, users, and custom attributes | full | — |
| `authentik_groups_update` | Update an existing group (partial update) | full | destructive, idempotent |
| `authentik_groups_delete` | Delete a group by its UUID | full | destructive |
| `authentik_groups_add_user` | Add a user to a group by group UUID and user ID | full | idempotent |
| `authentik_groups_remove_user` | Remove a user from a group by group UUID and user ID | full | destructive |

**Applications**

| Tool | Description | Access | Hints |
|------|-------------|--------|-------|
| `authentik_apps_list` | List applications with optional filters for name, slug, group, search, and more | read-only | read-only, idempotent |
| `authentik_apps_get` | Get a single application by its slug | read-only | read-only, idempotent |
| `authentik_apps_create` | Create a new application with name, slug, and optional provider, group, and metadata | full | — |
| `authentik_apps_update` | Update an existing application (partial update) | full | destructive, idempotent |
| `authentik_apps_set_icon_url` | Set an application's icon to an external URL (sets the meta_icon field), or clear the current icon with `clear: true` | full | destructive, idempotent |
| `authentik_apps_delete` | Delete an application by its slug | full | destructive |
| `authentik_apps_check_access` | Check whether a specific user has access to an application | read-only | read-only, idempotent |
| `authentik_apps_update_transactional` | Create or update an application and its provider in a single atomic transaction | full | destructive, idempotent |
| `authentik_app_entitlements_list` | List application entitlements with optional filters | read-only | read-only, idempotent |
| `authentik_app_entitlements_get` | Get a single application entitlement by its UUID | read-only | read-only, idempotent |
| `authentik_app_entitlements_create` | Create a new application entitlement | full | — |
| `authentik_app_entitlements_update` | Update an existing application entitlement (partial update) | full | destructive, idempotent |
| `authentik_app_entitlements_delete` | Delete an application entitlement by its UUID | full | destructive |

**Tokens**

| Tool | Description | Access | Hints |
|------|-------------|--------|-------|
| `authentik_tokens_list` | List tokens with optional filters for identifier, intent, managed status, and search | read-only | read-only, idempotent |
| `authentik_tokens_get` | Get a single token by its identifier | read-only | read-only, idempotent |
| `authentik_tokens_create` | Create a new token with an identifier, optional intent, description, and expiration settings | full | — |
| `authentik_tokens_update` | Update an existing token (partial update) | full | destructive, idempotent |
| `authentik_tokens_delete` | Delete a token by its identifier | full | destructive |
| `authentik_tokens_view_key` | View the raw key value of a token (privileged, logged) | full | read-only, idempotent |
| `authentik_tokens_set_key` | Set a custom key value for a token | full | destructive, idempotent |

**Brands**

| Tool | Description | Access | Hints |
|------|-------------|--------|-------|
| `authentik_brands_list` | List brands with optional filters for UUID, domain, and search | read-only | read-only, idempotent |
| `authentik_brands_get` | Get a single brand by its UUID | read-only | read-only, idempotent |
| `authentik_brands_create` | Create a new brand with domain, branding settings, flow assignments, and optional attributes | full | — |
| `authentik_brands_update` | Update an existing brand (partial update) | full | destructive, idempotent |
| `authentik_brands_delete` | Delete a brand by its UUID | full | destructive |
| `authentik_brands_current` | Get the brand configuration for the current domain | read-only | read-only, idempotent |

Crypto (8 tools)

| Tool | Description | Access | Hints |
|------|-------------|--------|-------|
| `authentik_crypto_list` | List certificate keypairs with optional filters | read-only | read-only, idempotent |
| `authentik_crypto_get` | Get a single certificate keypair by its UUID | read-only | read-only, idempotent |
| `authentik_crypto_create` | Create a new certificate keypair from PEM-encoded certificate and optional private key data | full | — |
| `authentik_crypto_update` | Update an existing certificate keypair (partial update) | full | destructive, idempotent |
| `authentik_crypto_delete` | Delete a certificate keypair by its UUID | full | destructive |
| `authentik_crypto_generate` | Generate a new self-signed certificate keypair (RSA, ECDSA, ED25519, or ED448) | full | — |
| `authentik_crypto_view_certificate` | View the PEM-encoded certificate data for a keypair | read-only | read-only, idempotent |
| `authentik_crypto_view_private_key` | View the PEM-encoded private key data for a keypair (sensitive) | full | read-only, idempotent |

Endpoints (41 tools)

Enterprise device and endpoint management: managed devices, device access groups, device-to-policy bindings, and connectors for agents, enrollment, Fleet, Google Chrome, and Apple ISE-PSSO.

**Devices**

| Tool | Description | Access | Hints |
|------|-------------|--------|-------|
| `authentik_endpoints_devices_list` | List managed endpoint devices with optional filtering by name or identifier, search, and ordering | read-only | read-only, idempotent |
| `authentik_endpoints_devices_get` | Retrieve a single endpoint device by its UUID | read-only | read-only, idempotent |
| `authentik_endpoints_devices_summary` | Retrieve aggregate summary statistics about managed endpoint devices | read-only | read-only, idempotent |
| `authentik_endpoints_devices_update` | Update an endpoint device (partial update) | full | destructive, idempotent |
| `authentik_endpoints_devices_delete` | Delete an endpoint device by its UUID (irreversible) | full | destructive |

**Device Access Groups**

| Tool | Description | Access | Hints |
|------|-------------|--------|-------|
| `authentik_endpoints_device_access_groups_list` | List device access groups with optional filtering by name, search, and o

…

## Source & license

This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [Samik081](https://github.com/Samik081)
- **Source:** [Samik081/mcp-authentik](https://github.com/Samik081/mcp-authentik)
- **License:** MIT

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.4.7 — what this tool can access:

- **Network access:** no
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** no
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.4.7** — security scan: passed — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/mcp-samik081-mcp-authentik
- Seller: https://agentstack.voostack.com/s/samik081
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.