Auth0 MCP Server
Official Auth0 MCP server: tenant applications, Actions, logs and users via the Management API
- 121 ★ on the repository
- Last commit
- MIT
Broad access
Why this level
- Changes authentication tenant settings and deploys Action code
- Has access to users and login logs
Install
- Works in
In your terminal, with SkillFoxx CLI
npx skillfoxx add mcp/auth0-mcp-serverDetects the agents on your machine, shows the access level and pins the version.
Other ways to install
Access and checks
How we reviewBroad accessThe tool can change data, run commands or handle secrets.
- Changes authentication tenant settings and deploys Action code
- Has access to users and login logs
This is third-party code. Review the repository files before installing.
What it does
The server gives an agent access to an Auth0 tenant's Management API. The agent can create applications and get their domain and client ID, write and deploy Actions, and search logs, for example logins from a specific IP. Login runs in the browser via the OAuth device flow, and the init command writes the server into the chosen client's config. The --read-only and --tools flags limit the available tools.
Who it is for. For developers and admins who configure authentication in Auth0.
Good fit when
- You need to create an Auth0 application for a new project quickly
- You need to find the cause of failed logins in logs
- You need to write and deploy an Action
Not a fit when
- A production tenant where changes need review
- Your authentication is not built on Auth0
Example request
Check Auth0 logs for logins from IP 192.108.92.3 in the last dayMCP
- Transport
- stdio
- Authentication
- OAuth
Environment variables
DEBUG- Enables debug output, auth0-mcp in examples
Limitations
The project is in beta and its authors do not recommend it for production workloads. Requires Node.js 18 or newer and an Auth0 account with the right permissions. Access from Russia is not guaranteed.
How to disable. Remove the auth0 block from the client config. Revoke the granted access in the Auth0 dashboard.
FAQ
How do I limit the agent to reading?
Add --read-only or the --tools 'auth0_list_*,auth0_get_*' pattern when running init.
Discussion
No questions or reviews yet.
Related
MCP serversMCP server for the ARL-Next platform: returns ports, fingerprints, certificates, vulnerabilities and leaks for a domain, IP or URL from your asset database
A bridge between an MCP client and a Kali Linux terminal so the agent can run nmap, sqlmap, hydra and other tools for authorized pentesting and CTF
Official HashiCorp Vault MCP server: mounts, KV secrets and PKI certificates from an agent
An offensive security MCP server: the agent runs 150+ pentest and recon tools and drives automated target assessments
An MCP server that gives the agent vulnerability triage: NVD data, EPSS, the CISA KEV catalog, MITRE ATT&CK mapping and one-call CVE risk scoring
MCP Scanner
mcp-scanner
A scanner from Cisco AI Defense: checks MCP servers and their tools for threats with three engines, YARA rules, a model and the Cisco API
README in short
The README warns about the beta status and shows installation with the init command for Claude Desktop, Claude Code, Windsurf, Cursor, VS Code and Gemini CLI, plus manual setup for Codex and other clients. It covers login via the OAuth device flow and tool filtering with patterns. There are security recommendations for tool access. MIT licensed.