Okta

This Okta MCP Server lets Claude interact with Okta organizations by exposing a set of built-in actions to manage users, groups, and applications. You can list, create, update, or delete users, manage group memberships, assign users or groups to applications, and control applications directly from natural language prompts. Use it to automate common Okta administration tasks through a conversational interface.

How to use

You interact with the Okta MCP Server by sending natural language requests to Claude. Ask questions or give commands that map to the available actions, such as listing users, creating a user, updating profiles, managing groups, and associating users or groups with applications. These interactions translate into the corresponding Okta API operations under the hood.

How to install

Prerequisites you need before installation:

• Node.js (LTS version) is installed on your system
• npm or yarn is available for package installation
• Access to your Okta domain and a valid API token for the Okta organization you will manage

Install the MCP server using the provided runtime configuration snippet. This runs the server via npx and points to the Okta MCP server package.

{
  "mcpServers": {
    "okta": {
      "command": "npx",
      "args": [
        "-y",
        "@yiyang.1i/okta-mcp-server"
      ],
      "env": {
        "OKTA_DOMAIN": "your-domain.okta.com",
        "API_TOKEN": "your-api-token"
      }
    }
  }
}

Additional setup steps

Create an Okta API Token and retrieve your Okta domain to enable the MCP server to communicate with your Okta organization.

• Create an API token by logging in to Okta as an administrator, going to Security → API → Tokens, and selecting Create Token.
• Identify your Okta domain from the dashboard URL, typically in the form dev-123456.okta.com

Available tools

okta_list_users_make_request

List users in the Okta organization with optional limit and query parameters to search by first name, last name, or email.

okta_create_user_make_request

Create a new user with a profile including firstName, lastName, email, and login, with optional credentials for a password.

okta_get_user_make_request

Retrieve detailed information about a specific user by userId (or login).

okta_update_user_make_request

Update an existing user's profile fields such as firstName, lastName, email, and login using userId.

okta_delete_user_make_request

Delete a user (automatic deactivation first) by userId and return a confirmation.

okta_list_groups_make_request

List groups in the Okta organization with optional limit and search expression.

okta_create_group_make_request

Create a new group with a name and optional description.

okta_assign_user_to_group_make_request

Add a user to a group by providing groupId and userId.

okta_list_applications_make_request

List applications in the Okta organization with optional limit and query for name or label.

okta_assign_user_to_application_make_request

Assign a user to an application by appId and userId with optional profile data.

okta_assign_group_to_application_make_request

Assign a group to an application using appId and groupId.

okta_deactivate_application_make_request

Deactivate an application by appId and return a confirmation.

okta_delete_application_make_request

Delete an application by appId and return a confirmation.