Auth 0 MCP server

Connect Auth 0 to Claude, ChatGPT, Cursor, Claude Code, Codex, Gemini, GitHub Copilot and any other MCP client, for your whole team. Metorial adds security, governance, and tracing, and gives everyone one Magic MCP URL to connect.

Deploy Auth 0Book a demo

What you can do with the Auth 0 MCP server

Ask your agent in plain language. Each of these maps to a real tool on the server.

  • Use the search users tool in Auth 0
  • Use the manage organizations tool in Auth 0
  • Use the manage applications tool in Auth 0
  • Use the manage organization members tool in Auth 0
  • Use the get user tool in Auth 0
  • Use the create user tool in Auth 0

Supported Tools

search_users

Search Users

Search and list users in your Auth0 tenant. Supports Lucene query syntax for filtering by email, name, connection, metadata, and other user attributes. Returns paginated results with up to 50 users per page.

manage_organizations

Manage Organizations

Create, update, delete, or list organizations for multi-tenant B2B scenarios. Organizations group users and can have their own connections, branding, and member roles.

manage_applications

Manage Applications

Create, update, delete, or list applications (clients) in Auth0. Applications represent the apps and services that use Auth0 for authentication. Supports native, SPA, regular web, and machine-to-machine app types.

manage_organization_members

Manage Organization Members

List, add, or remove members from an organization. Members are Auth0 users associated with an organization for multi-tenant B2B scenarios.

get_user

Get User

Retrieve a single user by their ID. Returns the full user profile including metadata, identities, roles, and permissions.

create_user

Create User

Create a new user in Auth0. The user will be created in the specified connection (e.g., "Username-Password-Authentication"). Depending on the connection type, different fields may be required.

manage_client_grants

Manage Client Grants

Create, update, delete, or list client grants. Client grants authorize applications to request access tokens for specific APIs with defined scopes.

manage_connections

Manage Connections

Create, update, delete, or list identity provider connections. Connections define how users authenticate — database, social (Google, Facebook), enterprise (SAML, OIDC), or passwordless (SMS, email).

update_user

Update User

Update an existing user's profile, metadata, or account status. Can update email, password, profile fields, metadata, and blocked status.

manage_resource_servers

Manage Resource Servers

Create, update, delete, or list API resource servers. Resource servers represent APIs protected by Auth0, with defined scopes/permissions and token settings.

manage_roles

Manage Roles

Create, update, delete, or list roles. Roles define sets of permissions that can be assigned to users for role-based access control (RBAC).

get_logs

Get Logs

Retrieve tenant log events for authentication activity, user actions, and administrative operations. Supports Lucene query syntax filtering, pagination, and cursor-based retrieval.

manage_user_roles

Manage User Roles

List, assign, or remove roles for a user. Use the action parameter to specify the operation: "list" to get current roles, "assign" to add roles, or "remove" to remove roles.

delete_user

Delete User

Permanently delete a user from Auth0. This action is irreversible and removes all associated data.

manage_actions

Manage Actions

Create, update, deploy, delete, or list Auth0 Actions. Actions are serverless functions that execute during authentication flows (login, registration, password change, etc.) to add custom logic.

manage_user_permissions

Manage User Permissions

List, assign, or remove direct Auth0 permissions for a user. Permissions reference API resource-server identifiers and scope names.

manage_organization_member_roles

Manage Organization Member Roles

List, assign, or remove roles for a user inside a specific Auth0 Organization membership.

manage_role_permissions

Manage Role Permissions

List, assign, or remove Auth0 permissions granted to a role. Permissions reference API resource-server identifiers and scope names.

manage_log_streams

Manage Log Streams

Create, update, delete, get, or list Auth0 log streams for delivering tenant logs to HTTP webhooks and supported event destinations.

Connect Auth 0 to your AI client

Every client uses the same Magic MCP URL, and so does any other MCP client. Add it once and sign in with SSO.

  1. Enable Auth 0 in Metorial. In your Metorial portal, enable the Auth 0 MCP server and sign in with the account that owns the data. Access stays governed by your team policies.
  2. Add a custom connector. Open Customize, then Connectors. Select Add, then Custom, then Web.
  3. Paste your Metorial MCP URL. Name it Metorial, paste your Magic MCP URL (<your-magic-mcp-url>) and continue.
  4. Sign in. Select Add and sign in to load Auth 0 tools.

Run Auth 0 through the Metorial gateway

One governed layer for every app your agents reach, not a separate connector per tool.

  • Give Auth 0 and every other app to your whole team through one MCP gateway, behind your SSO.
  • Scope which teams and agents can use Auth 0 tools with role-based access control, and trace every call.
  • Prefer to run it yourself? Metorial is open source and self-hostable.

More integrations teams use with Auth 0

Supabase

Manage PostgreSQL databases, authenticate users, store files, and run edge functions on Supabase. Perform CRUD operations on database tables via auto-generated REST and GraphQL APIs with row-level security. Create and manage user accounts with password, magic link, OTP, social login, and SSO authentication. Upload, download, list, and delete files organized in storage buckets. Deploy and invoke server-side TypeScript edge functions. Listen to realtime database changes, broadcast messages, and track user presence. Configure database webhooks for INSERT, UPDATE, and DELETE events. Programmatically manage Supabase organizations and projects, including creating/deleting projects, managing API keys, configuring auth settings, custom domains, network restrictions, and Edge Function secrets.

Datadog

Monitor infrastructure, applications, and services across cloud environments. Submit, discover, and query metrics; create and manage monitors and alerts; build and clean up dashboards; search and analyze logs; manage incidents; track SLOs; run synthetic tests; inspect users and hosts; and schedule or cancel monitor downtimes.

Cloudflare

Manage internet infrastructure including DNS records, domains, and zone settings. Deploy and configure serverless Workers scripts, R2 object storage buckets, and Pages deployments. Configure security rules including WAF, firewall rules, rate limiting, DDoS protection, and IP access controls. Manage SSL/TLS certificates, load balancers, origin pools, and health monitors. Upload and deliver video content via Cloudflare Stream. Access traffic, DNS, and security analytics via GraphQL. Configure Zero Trust Access applications, Gateway policies, and Tunnel connections. Set up alerting and webhook notifications for security events, health checks, certificate status, and usage thresholds. Register and manage domains, account members, roles, and API tokens.

Firebase

Manage backend services for mobile and web applications. Create, read, update, and delete documents in Cloud Firestore and Realtime Database. Manage user accounts including creating, updating, deleting, and listing users with authentication support. Send push notifications and data messages to devices, topics, and device groups via Cloud Messaging (FCM). Upload, download, and delete files in Cloud Storage. Read and publish Remote Config templates to change app behavior remotely. Deploy and manage serverless Cloud Functions triggered by database events, authentication events, storage events, and HTTP requests. Stream real-time database changes via Server-Sent Events. Query databases with filters, ordering, and pagination. Perform batch writes and transactions in Firestore. Generate and verify custom tokens and ID tokens for user authentication.

Kibana

Manage Kibana resources and the Elastic Stack visualization layer programmatically. Create, import, export, and organize saved objects such as dashboards, visualizations, and data views across spaces. Configure alerting rules with threshold, query, and metric conditions, and connect them to actions via connectors (email, Slack, PagerDuty, webhook, Jira, ServiceNow, and more). Manage data views (index patterns) that define which Elasticsearch indices Kibana queries. Create and organize spaces to separate dashboards and objects into meaningful categories. Track incidents with cases, define and monitor Service Level Objectives (SLOs), manage Fleet agent policies and enrollments, configure security detection rules for SIEM, and control role-based access with Kibana feature privileges.

Kubernetes

Manage and orchestrate containerized applications on Kubernetes clusters. Create, update, scale, and delete workloads including Pods, Deployments, StatefulSets, DaemonSets, Jobs, and CronJobs. Configure service discovery and load balancing through Services, Ingress, and Endpoints. Manage configuration and storage with ConfigMaps, Secrets, PersistentVolumes, and StorageClasses. Control access with Namespaces, RBAC roles and bindings, ServiceAccounts, and NetworkPolicies. Administer cluster infrastructure including Nodes, ResourceQuotas, LimitRanges, and PriorityClasses. Autoscale workloads with HorizontalPodAutoscaler and VerticalPodAutoscaler. Define and manage Custom Resource Definitions (CRDs) to extend cluster functionality. Watch resources in real time for create, modify, and delete events. Configure admission webhooks to validate or mutate resources before persistence.

Technical notes for Auth 0

Manage users, roles, permissions, and identity provider connections for authentication and authorization. Create, read, update, and delete users across identity connections. Configure social, enterprise, and passwordless authentication methods. Assign roles and permissions using role-based access control (RBAC). Register and manage applications and API resource servers. Set up multi-factor authentication (MFA) including SMS, email, TOTP, and WebAuthn. Create organizations for multi-tenant B2B scenarios and invite members. Build custom serverless Actions for login, registration, and password change flows. Configure custom domains, email templates, branding, and attack protection. Import and export users in bulk. Retrieve authentication logs and audit events. Manage client grants and log streams for event delivery.

Frequently asked questions

Common questions about connecting Auth 0 to AI agents with Metorial.

  1. How many tools does the Auth 0 MCP server have?
    The Auth 0 MCP server exposes 19 tools, including Search Users, Manage Organizations, Manage Applications. Each one is governed and traced through Metorial.
  2. Auth 0 exposes tools your agents call on demand; it does not publish event triggers yet. Everything still runs through one governed MCP URL.
  3. Any MCP client, including VS Code, Windsurf, Zed, OpenCode and Grok. Each one reaches the Auth 0 MCP server through the same Metorial URL.
  4. Use role-based access control to decide which teams, users, and agents can use Auth 0 and which of its tools they can call.
  5. Yes. Metorial is open source, so you can run the Auth 0 MCP server yourself or use the hosted gateway.

Connect Auth 0 to production AI agents

See how Metorial gives your team governed access to Auth 0, with tracing and security controls built in.

Book a demoDeploy Auth 0