Auth and security - official Clerk server
Clerk MCP server
Remote MCP server that lets AI agents work with a Clerk account, including creating and configuring applications, managing users, checking domains and setting up production instances, and returns Clerk SDK snippets. Clerk hosts it at https://mcp.clerk.com/mcp with OAuth auth.
Last verified 15 tools6 sources
Install
Claude Code
About Claude Codeclaude mcp add clerk --transport http https://mcp.clerk.com/mcpCodex
About Codexcodex mcp add clerk --url https://mcp.clerk.com/mcpCursor
About Cursor{
"mcpServers": {
"clerk": {
"url": "https://mcp.clerk.com/mcp"
}
}
}VS Code
npx mcp-remote https://mcp.clerk.com/mcpGeneric
{
"mcpServers": {
"clerk": {
"command": "npx",
"args": ["-y", "mcp-remote", "https://mcp.clerk.com/mcp"]
}
}
}Tools
whoami- Show the connected user, workspace, and granted permissions
list_applications- List applications; results include each instance's publishable key
get_application- Inspect an application
create_application- Create an application
get_instance_config- Read instance configuration
patch_instance_config- Update instance configuration, with dry-run preview
put_instance_config- Replace instance configuration, with dry-run preview
list_users- Find users with filters in an instance
create_user- Create users in an instance
check_domain_dns- Request a new DNS check for a domain
create_production_instance- Create a production instance from development; requires confirm: true
set_oauth_provider_credentials- Configure production OAuth credentials
clerk_sdk_snippet- Get a code snippet for a Clerk feature, or a bundle of snippets for a common setup
list_clerk_sdk_snippets- List the available snippets and bundles, optionally filtered by tag
submit_feedback- Report problems and missing documentation to the Clerk team
As documented on October 17, 2026. A running server reports its current list through tools/list.
Notes and caveats
- Launched in public beta on 2026-01-20 with SDK snippet tools only.
- The 2026-10-15 revamp added account tools, and the current docs give no release stage.
- All tools require OAuth sign-in with a Clerk Dashboard account and act within the selected workspace's Role.
- Scopes include applications:manage, users:manage and application_domains:manage.
- Supports Streamable HTTP only (no SSE); clients without MCP OAuth connect through mcp-remote.
- It never returns secret keys.
- Per the docs, the server sends a short agent-written context summary per tool call to Clerk for product analytics.
- The VS Code entry is the stdio option; the HTTP option is a UI step that takes the URL.
- The generic snippet is the Claude Desktop config.
- Hosted only, with no public repo.
More MCP servers for auth and security
- 1Password
1Password Device Trust MCP server
Self-hosted Python MCP server that exposes the 1Password Device Trust (formerly Kolide) API so agents can query devices, people, checks, issues and live query campaigns, with auto-pagination and aggregation helpers. It runs locally over Streamable HTTP or stdio.
Transport: Streamable HTTP, stdioAuth: API key - 1PasswordStatus: Beta
1Password Environments MCP server
Local stdio MCP server built into the 1Password desktop app that lets agents create, list and rename 1Password Environments, list variable names, add variables and create locally mounted .env files. It never returns secret values to the client.
Transport: stdioAuth: Other - 1Password
MCP server for 1Password SaaS Manager
MCP server exposing the 1Password SaaS Manager (formerly Trelica) API, covering audit logs, applications, workflows, people and teams, contracts and assets. Available as a hosted read-only remote server or a local sm-mcp binary that can optionally enable writes.
Transport: Streamable HTTP, stdioAuth: OAuth - Auth0Status: Beta
Auth0 MCP server
Local MCP server that connects AI clients to an Auth0 tenant through the Management API to create and update applications, APIs, client grants, Actions and Forms, read logs, and onboard a project with an Auth0 SDK quickstart.
Transport: stdioAuth: OAuth - Cloudflare
Cloudflare One CASB MCP server
A remote MCP server for inspecting Cloudflare One CASB integrations, assets and asset categories to find security misconfigurations in SaaS applications.
Transport: Streamable HTTPAuth: OAuth or API key - DatadogStatus: Preview
Datadog Code Security MCP server
A local stdio MCP server that wraps Datadog security binaries to run SAST, secrets detection, SCA, IaC scanning and SBOM generation on source code from an AI coding assistant.
Transport: stdioAuth: API key
Related reading
- 38 Apps in One Day: Migrating an Empire from Replit to CoolifyMigrating 38 apps from Replit to Coolify in one day with parallel Claude Code subagents, gh and neonctl - the recipe and real stats on stubs and false-empties.
- What's New in Mastra (Late 2026): Harness, AgentController GA, Eval Gates and MCP 2.xMastra in late 2026: goals, schedules, signals, AgentController GA, eval gates and MCP 2.x, with type-checked TypeScript examples and honest tradeoffs.
- MCP vs A2A vs Function Calling: Which Layer Does What in 2026MCP vs A2A vs function calling compared on the 2026-07-28 MCP spec and A2A 1.0: what each protocol does, where they overlap, and how to stack them.
- Pydantic AI V2 in Late 2026: Capabilities, Graphs, Evals and MCPPydantic AI V2 explained through v2.57.0: capabilities, typed output, Conversation storage, caching, graphs, evals, MCP Apps and Logfire, with checked code.
- Reverse Engineer Anything (REA): What the MCP Server Does and Where the Line IsREA (Reverse Engineer Anything) is an MIT-licensed MCP server that lets Claude Code, Codex or Cursor inspect binaries, Electron apps and APKs. How to try it.
- Claude Opus 5.5 Built a Browser 3D World: The Higgsfield MCP WorkflowClaude Opus 5.5 and Higgsfield MCP built an interactive 3D Library of Alexandria in the browser. The verified connector setup and where the workflow holds up.
FAQ
What does the Clerk MCP server do?
Remote MCP server that lets AI agents work with a Clerk account, including creating and configuring applications, managing users, checking domains and setting up production instances, and returns Clerk SDK snippets. The vendor documents 15 tools, including whoami, list_applications, get_application and create_application.
How do I add the Clerk MCP server to Claude Code?
Run claude mcp add clerk --transport http https://mcp.clerk.com/mcp, copied from Clerk's docs. This page also has snippets for Codex, Cursor, VS Code and Generic.
Does the Clerk MCP server need authentication?
Yes, OAuth. Transport: Streamable HTTP. Status: Unlabelled, last checked October 17, 2026.
Sources
Last verified against 6 Clerk pages, then re-checked independently.
- clerk.comhttps://clerk.com/docs/guides/ai/mcp/clerk-mcp-server
- raw.githubusercontent.comhttps://raw.githubusercontent.com/clerk/clerk-docs/main/docs/guides/ai/mcp/clerk-mcp-server.mdx
- clerk.comhttps://clerk.com/changelog/2026-10-15-revamped-clerk-mcp-server
- clerk.comhttps://clerk.com/changelog/2026-01-20-clerk-mcp-server
- clerk.comhttps://clerk.com/blog/clerk-mcp-server-account-tools
- clerk.comhttps://clerk.com/docs/guides/ai/overview
Newsletter
New MCP servers, the week they ship
One email per week. New official MCP servers, the coding tools that support them and how developers wire them up.