Okta MCP server

Connect Okta to Claude, ChatGPT, Cursor, Claude Code, Codex, Gemini, GitHub Copilot and any other MCP client, for your whole team. Metorial adds security, governance, and tracing, and gives everyone one Magic MCP URL to connect.

What you can do with the Okta MCP server

Ask your agent in plain language. Each of these maps to a real tool on the server.

  • Use the update user tool in Okta
  • Use the list applications tool in Okta
  • Use the get user tool in Okta
  • Use the list groups tool in Okta
  • Use the query system log tool in Okta
  • Use the manage group tool in Okta

Supported Tools

update_user

Update User

Update an existing Okta user's profile attributes. Only the provided fields will be updated; omitted fields remain unchanged.

list_applications

List Applications

Search and list applications registered in your Okta organization. Supports keyword search and filter expressions.

get_user

Get User

Retrieve detailed information about a specific Okta user by their user ID or login. Returns full profile, status, credentials provider, and group/app memberships.

list_groups

List Groups

Search and list groups in your Okta organization. Supports keyword search by name, filter expressions, and SCIM search queries.

query_system_log

Query System Log

Query the Okta System Log for audit events. Supports filtering by time range, event type, keyword search, and Okta filter expressions. Useful for auditing, security monitoring, and troubleshooting.

manage_group

Manage Group

Create, update, or delete an Okta group. Use this to manage group lifecycle and profile attributes.

user_lifecycle

User Lifecycle

Perform lifecycle operations on an Okta user: **activate**, **deactivate**, **suspend**, **unsuspend**, **unlock**, **reset_password**, **reset_factors**, or **delete**. Each action transitions the user to a new status.

list_policies

List Policies

List policies of a given type in your Okta organization. Returns sign-on, password, MFA enrollment, or access policies depending on the specified type.

list_users

List Users

Search and list users in your Okta organization. Supports keyword search, Okta filter expressions, and SCIM search queries for flexible lookups by name, email, status, or any profile attribute.

create_user

Create User

Create a new user in Okta. Supports setting profile attributes, optional password/recovery question, and optionally assigning the user to groups during creation.

manage_app_assignment

Manage App Assignment

Assign or unassign users and groups to/from an Okta application. Also supports listing current user and group assignments for an app.

manage_user_factors

Manage User Factors

List, enroll, or reset MFA factors for an Okta user. Supports SMS, email, TOTP, push, and other factor types.

manage_group_membership

Manage Group Membership

Add or remove users from an Okta group, or list current group members. Use this to manage who belongs to a group.

manage_event_hook

Manage Event Hook

Create, read, update, delete, list, and run lifecycle operations for Okta event hooks. Event hooks deliver selected Okta system events to an HTTPS endpoint.

Connect Okta to your AI client

Every client uses the same Magic MCP URL, and so does any other MCP client. Add it once and sign in with SSO.

  1. Enable Okta in Metorial. In your Metorial portal, enable the Okta MCP server and sign in with the account that owns the data. Access stays governed by your team policies.
  2. Add a custom connector. Open Customize, then Connectors. Select Add, then Custom, then Web.
  3. Paste your Metorial MCP URL. Name it Metorial, paste your Magic MCP URL (<your-magic-mcp-url>) and continue.
  4. Sign in. Select Add and sign in to load Okta tools.

Run Okta through the Metorial gateway

One governed layer for every app your agents reach, not a separate connector per tool.

  • Give Okta and every other app to your whole team through one MCP gateway, behind your SSO.
  • Scope which teams and agents can use Okta tools with role-based access control, and trace every call.
  • Prefer to run it yourself? Metorial is open source and self-hostable.

More integrations teams use with Okta

Supabase

Manage PostgreSQL databases, authenticate users, store files, and run edge functions on Supabase. Perform CRUD operations on database tables via auto-generated REST and GraphQL APIs with row-level security. Create and manage user accounts with password, magic link, OTP, social login, and SSO authentication. Upload, download, list, and delete files organized in storage buckets. Deploy and invoke server-side TypeScript edge functions. Listen to realtime database changes, broadcast messages, and track user presence. Configure database webhooks for INSERT, UPDATE, and DELETE events. Programmatically manage Supabase organizations and projects, including creating/deleting projects, managing API keys, configuring auth settings, custom domains, network restrictions, and Edge Function secrets.

Datadog

Monitor infrastructure, applications, and services across cloud environments. Submit, discover, and query metrics; create and manage monitors and alerts; build and clean up dashboards; search and analyze logs; manage incidents; track SLOs; run synthetic tests; inspect users and hosts; and schedule or cancel monitor downtimes.

Cloudflare

Manage internet infrastructure including DNS records, domains, and zone settings. Deploy and configure serverless Workers scripts, R2 object storage buckets, and Pages deployments. Configure security rules including WAF, firewall rules, rate limiting, DDoS protection, and IP access controls. Manage SSL/TLS certificates, load balancers, origin pools, and health monitors. Upload and deliver video content via Cloudflare Stream. Access traffic, DNS, and security analytics via GraphQL. Configure Zero Trust Access applications, Gateway policies, and Tunnel connections. Set up alerting and webhook notifications for security events, health checks, certificate status, and usage thresholds. Register and manage domains, account members, roles, and API tokens.

Firebase

Manage backend services for mobile and web applications. Create, read, update, and delete documents in Cloud Firestore and Realtime Database. Manage user accounts including creating, updating, deleting, and listing users with authentication support. Send push notifications and data messages to devices, topics, and device groups via Cloud Messaging (FCM). Upload, download, and delete files in Cloud Storage. Read and publish Remote Config templates to change app behavior remotely. Deploy and manage serverless Cloud Functions triggered by database events, authentication events, storage events, and HTTP requests. Stream real-time database changes via Server-Sent Events. Query databases with filters, ordering, and pagination. Perform batch writes and transactions in Firestore. Generate and verify custom tokens and ID tokens for user authentication.

Kibana

Manage Kibana resources and the Elastic Stack visualization layer programmatically. Create, import, export, and organize saved objects such as dashboards, visualizations, and data views across spaces. Configure alerting rules with threshold, query, and metric conditions, and connect them to actions via connectors (email, Slack, PagerDuty, webhook, Jira, ServiceNow, and more). Manage data views (index patterns) that define which Elasticsearch indices Kibana queries. Create and organize spaces to separate dashboards and objects into meaningful categories. Track incidents with cases, define and monitor Service Level Objectives (SLOs), manage Fleet agent policies and enrollments, configure security detection rules for SIEM, and control role-based access with Kibana feature privileges.

Kubernetes

Manage and orchestrate containerized applications on Kubernetes clusters. Create, update, scale, and delete workloads including Pods, Deployments, StatefulSets, DaemonSets, Jobs, and CronJobs. Configure service discovery and load balancing through Services, Ingress, and Endpoints. Manage configuration and storage with ConfigMaps, Secrets, PersistentVolumes, and StorageClasses. Control access with Namespaces, RBAC roles and bindings, ServiceAccounts, and NetworkPolicies. Administer cluster infrastructure including Nodes, ResourceQuotas, LimitRanges, and PriorityClasses. Autoscale workloads with HorizontalPodAutoscaler and VerticalPodAutoscaler. Define and manage Custom Resource Definitions (CRDs) to extend cluster functionality. Watch resources in real time for create, modify, and delete events. Configure admission webhooks to validate or mutate resources before persistence.

Technical notes for Okta

Manage identity and access management for organizations. Create, update, deactivate, and search users. Manage groups and group memberships. Assign users and groups to applications. Configure multi-factor authentication enrollment and verification. Create and manage OAuth 2.0 authorization servers, scopes, claims, and access policies. Set sign-on, password, and MFA enrollment policies. Query system logs for auditing and troubleshooting. Manage user sessions, devices, and inline hooks for customizing authentication flows. Supports webhooks for user authentication, lifecycle, group, application, policy, and security events.

Frequently asked questions

Common questions about connecting Okta to AI agents with Metorial.

  1. How many tools does the Okta MCP server have?
    The Okta MCP server exposes 14 tools, including Update User, List Applications, Get User. Each one is governed and traced through Metorial.
  2. Okta exposes tools your agents call on demand; it does not publish event triggers yet. Everything still runs through one governed MCP URL.
  3. Any MCP client, including VS Code, Windsurf, Zed, OpenCode and Grok. Each one reaches the Okta MCP server through the same Metorial URL.
  4. Use role-based access control to decide which teams, users, and agents can use Okta and which of its tools they can call.
  5. Yes. Metorial is open source, so you can run the Okta MCP server yourself or use the hosted gateway.

Connect Okta to production AI agents

See how Metorial gives your team governed access to Okta, with tracing and security controls built in.