Auth0 MCP server
{
"mcpServers": {
"auth0": {
"command": "npx",
"args": [
"-y",
"@auth0/auth0-mcp-server@latest"
]
}
}
}{
"mcpServers": {
"auth0": {
"command": "npx",
"args": [
"-y",
"@auth0/auth0-mcp-server@latest"
]
}
}
}{
"mcpServers": {
"auth0": {
"command": "npx",
"args": [
"-y",
"@auth0/auth0-mcp-server@latest"
]
}
}
}{
"servers": {
"auth0": {
"command": "npx",
"args": [
"-y",
"@auth0/auth0-mcp-server@latest"
]
}
}
}{
"mcpServers": {
"auth0": {
"command": "npx",
"args": [
"-y",
"@auth0/auth0-mcp-server@latest"
]
}
}
}file .mcp.json (in your project root)file claude_desktop_config.jsonfile ~/.cursor/mcp.jsonfile .vscode/mcp.jsonfile ~/.codeium/windsurf/mcp_config.jsoninstall npx -y @auth0/auth0-mcp-serverversion 0.1.0-beta.10
What it does
An MCP server that exposes Auth0 management operations through natural language, allowing you to create and manage applications, APIs, actions, logs, and forms without using the Auth0 dashboard. It integrates with Claude, Cursor, Windsurf, and other LLM clients to handle Auth0 tenant operations.
- Create new Auth0 applications and retrieve their configuration details like domain and client ID.
- Create and deploy Auth0 actions to customize authentication flows, such as generating JWT tokens.
- Query Auth0 logs to investigate authentication events, such as finding login attempts from specific IP addresses.
Tools this server exposes
| Tool | Does |
|---|---|
| auth0_list_applications | List Auth0 applications in your tenant. |
| auth0_get_application | Retrieve details of a specific Auth0 application. |
| auth0_list_actions | List Auth0 actions in your tenant. |
| auth0_get_action | Retrieve details of a specific Auth0 action. |
| auth0_list_apis | List Auth0 APIs in your tenant. |
| auth0_get_api | Retrieve details of a specific Auth0 API. |
| auth0_list_logs | Query Auth0 logs with filtering options. |
| auth0_list_forms | List Auth0 forms in your tenant. |
Before you enable it
An MCP server runs with whatever access you give it. Start with a development account rather than production, and check which tools the server exposes before you let an agent call them unattended.