Skip to main content
Watch: I Built an AI App Without Leaving Databricks

Auth and security - official Auth0 server

Auth0 MCP server

Local MCP server that connects AI clients to an Auth0 tenant through the Management API to create and update applications, APIs, client grants, Actions and Forms, read logs, and onboard a project with an Auth0 SDK quickstart. It runs locally from @auth0/auth0-mcp-server (npm) with OAuth auth.

Last verified 15 tools8 sources

Install

Claude Code

About Claude Code
Terminal
npx @auth0/auth0-mcp-server init --client claude-code

Codex

About Codex
Terminal
codex mcp add auth0 --env DEBUG=auth0-mcp --env DBUS_SESSION_BUS_ADDRESS=unix:path=/run/user/1000/bus -- npx -y @auth0/auth0-mcp-server run

Cursor

About Cursor
Terminal
npx @auth0/auth0-mcp-server init --client cursor

VS Code

Terminal
npx @auth0/auth0-mcp-server init --client vscode

Generic

JSON
{
  "mcpServers": {
    "auth0": {
      "command": "npx",
      "args": ["-y", "@auth0/auth0-mcp-server", "run"],
      "capabilities": ["tools"],
      "env": {
        "DEBUG": "auth0-mcp"
      }
    }
  }
}

Tools

auth0_list_applications
List all applications in the Auth0 tenant or search by name
auth0_get_application
Get details about a specific Auth0 application
auth0_create_application
Create a new Auth0 application
auth0_update_application
Update an existing Auth0 application
auth0_save_credentials_to_file
Save an application's credentials as environment variables to a project's .env file and add it to .gitignore
auth0_onboarding
Onboard a project with Auth0: creates an application for the given framework and saves credentials to a .env file
auth0_get_quickstart_guide
Fetch the framework quickstart prompt, resolve and update callback URLs, and return code to integrate the Auth0 SDK
auth0_list_resource_servers
List all resource servers (APIs) in the Auth0 tenant
auth0_create_resource_server
Create a new Auth0 resource server (API)
auth0_create_application_grant
Create a client grant that authorizes an application to access an API with defined scopes
auth0_list_actions
List all actions in the Auth0 tenant
auth0_create_action
Create a new Auth0 action
auth0_deploy_action
Deploy an Auth0 action
auth0_list_logs
List logs from the Auth0 tenant
auth0_publish_form
Publish an Auth0 form

As documented on October 17, 2026. A running server reports its current list through tools/list.

Notes and caveats

  • Auth0 labels it Beta ('not recommended for production use').
  • Authenticates with the OAuth 2.0 device authorization flow and stores tokens in the system keychain; device flow is not supported for Private Cloud tenants, which must use client credentials (--auth0-domain, --auth0-client-id, --auth0-client-secret). --read-only and --tools (or AUTH0_MCP_READ_ONLY / AUTH0_MCP_TOOLS) limit exposed tools.
  • Calls consume Management API rate limits per subscription plan.
  • Also documented for Claude Desktop, Windsurf and a Gemini CLI extension.

More MCP servers for auth and security

Related reading

FAQ

What does the Auth0 MCP server do?

Local MCP server that connects AI clients to an Auth0 tenant through the Management API to create and update applications, APIs, client grants, Actions and Forms, read logs, and onboard a project with an Auth0 SDK quickstart. The vendor documents 15 tools, including auth0_list_applications, auth0_get_application, auth0_create_application and auth0_update_application.

How do I add the Auth0 MCP server to Claude Code?

Run npx @auth0/auth0-mcp-server init --client claude-code, copied from Auth0's docs. This page also has snippets for Codex, Cursor, VS Code and Generic.

Does the Auth0 MCP server need authentication?

Yes, OAuth. Transport: stdio. Status: Beta, last checked October 17, 2026.

Sources

Last verified against 8 Auth0 pages, then re-checked independently.

Newsletter

New MCP servers, the week they ship

One email per week. New official MCP servers, the coding tools that support them and how developers wire them up.