Auth0 MCP server for AI agents

The Auth0 MCP Server enables LLMs and AI agents to perform Auth0 management operations using natural language. It implements the Model Context Protocol, creating a standardized way for models to interact with your Auth0 tenant.

Installation

Prerequisites

Node.js v18 or higher
An MCP Client (Claude Desktop, Windsurf, Cursor, etc.)
Auth0 account with appropriate permissions

Basic Installation

To install Auth0 MCP Server with all tools available:

npx @auth0/auth0-mcp-server init

Installation with Limited Tool Access

For read-only access (recommended for security):

npx @auth0/auth0-mcp-server init --read-only

Or explicitly select tools:

npx @auth0/auth0-mcp-server init --tools 'auth0_list_*,auth0_get_*'

Client-Specific Installation

For Claude Desktop:

npx @auth0/auth0-mcp-server init

For Windsurf:

npx @auth0/auth0-mcp-server init --client windsurf

For Cursor:

npx @auth0/auth0-mcp-server init --client cursor

Authorization

After installation, your browser will open automatically to initiate the OAuth 2.0 device authorization flow. Log into your Auth0 account and grant the requested permissions.

Verification

Restart your MCP Client (Claude Desktop, Windsurf, Cursor, etc.) and ask it to help you manage your Auth0 tenant. For example, try asking "Show me all my Auth0 applications" to verify the integration is working.

Available Tools

Applications

auth0_list_applications: List all applications or search by name
auth0_get_application: Get details about a specific application
auth0_create_application: Create a new application
auth0_update_application: Update an existing application

Resource Servers

auth0_list_resource_servers: List all resource servers (APIs)
auth0_get_resource_server: Get details about a specific resource server
auth0_create_resource_server: Create a new resource server
auth0_update_resource_server: Update an existing resource server

Actions

auth0_list_actions: List all actions
auth0_get_action: Get details about a specific action
auth0_create_action: Create a new action
auth0_update_action: Update an existing action
auth0_deploy_action: Deploy an action

Logs

auth0_list_logs: List logs from the Auth0 tenant
auth0_get_log: Get a specific log entry by ID

Forms

auth0_list_forms: List all forms
auth0_get_form: Get details about a specific form
auth0_create_form: Create a new form
auth0_update_form: Update an existing form
auth0_publish_form: Publish a form

Security Best Practices

It's recommended to limit tool access based on your specific needs:

# Enable only read-only operations
npx @auth0/auth0-mcp-server run --read-only

# Limit to specific tool types
npx @auth0/auth0-mcp-server run --tools 'auth0_*_application*'

# Restrict to only log viewing
npx @auth0/auth0-mcp-server run --tools 'auth0_list_logs,auth0_get_log'

When both --read-only and --tools flags are used together, the --read-only flag takes priority for security.

Authentication Management

Check Session Status

npx @auth0/auth0-mcp-server session

Log Out

npx @auth0/auth0-mcp-server logout

Troubleshooting

Enable Debug Mode

export DEBUG=auth0-mcp
npx @auth0/auth0-mcp-server run

View Client Logs

tail -n 20 -F ~/Library/Logs/Claude/mcp*.log

Common Issues

Authentication Failures: Try re-initializing with npx @auth0/auth0-mcp-server init
Connection Issues: Restart both the server and your MCP client
API Errors: Check your Auth0 token status with npx @auth0/auth0-mcp-server session
Invalid Auth0 Configuration: If your token is expired or missing, run npx @auth0/auth0-mcp-server init to authenticate

For more help, view all available commands:

npx @auth0/auth0-mcp-server help

How to install this MCP server

For Claude Code

To add this MCP server to Claude Code, run this command in your terminal:

claude mcp add-json "auth0" '{"command":"npx","args":["-y","@auth0/auth0-mcp-server","run"],"capabilities":["tools"],"env":{"DEBUG":"auth0-mcp"}}'

See the official Claude Code MCP documentation for more details.

For Cursor

There are two ways to add an MCP server to Cursor. The most common way is to add the server globally in the ~/.cursor/mcp.json file so that it is available in all of your projects.

If you only need the server in a single project, you can add it to the project instead by creating or adding it to the .cursor/mcp.json file.

Adding an MCP server to Cursor globally

To add a global MCP server go to Cursor Settings > Tools & Integrations and click "New MCP Server".

When you click that button the ~/.cursor/mcp.json file will be opened and you can add your server like this:

{
    "mcpServers": {
        "auth0": {
            "command": "npx",
            "args": [
                "-y",
                "@auth0/auth0-mcp-server",
                "run"
            ],
            "capabilities": [
                "tools"
            ],
            "env": {
                "DEBUG": "auth0-mcp"
            }
        }
    }
}

Adding an MCP server to a project

To add an MCP server to a project you can create a new .cursor/mcp.json file or add it to the existing one. This will look exactly the same as the global MCP server example above.

How to use the MCP server

Once the server is installed, you might need to head back to Settings > MCP and click the refresh button.

The Cursor agent will then be able to see the available tools the added MCP server has available and will call them when it needs to.

You can also explicitly ask the agent to use the tool by mentioning the tool name and describing what the function does.

For Claude Desktop

To add this MCP server to Claude Desktop:

1. Find your configuration file:

macOS: ~/Library/Application Support/Claude/claude_desktop_config.json
Windows: %APPDATA%\Claude\claude_desktop_config.json
Linux: ~/.config/Claude/claude_desktop_config.json

2. Add this to your configuration file:

{
    "mcpServers": {
        "auth0": {
            "command": "npx",
            "args": [
                "-y",
                "@auth0/auth0-mcp-server",
                "run"
            ],
            "capabilities": [
                "tools"
            ],
            "env": {
                "DEBUG": "auth0-mcp"
            }
        }
    }
}

3. Restart Claude Desktop for the changes to take effect