Fusionauth MCP server
{
"mcpServers": {
"fusionauth-mcp-api": {
"command": "npx",
"args": [
"-y",
"@fusionauth/mcp-api@latest"
],
"env": {
"API_KEY_APIKEYAUTH": "<api_key_apikeyauth>",
"API_BASE_URL": "https://..."
}
}
}
}{
"mcpServers": {
"fusionauth-mcp-api": {
"command": "npx",
"args": [
"-y",
"@fusionauth/mcp-api@latest"
],
"env": {
"API_KEY_APIKEYAUTH": "<api_key_apikeyauth>",
"API_BASE_URL": "https://..."
}
}
}
}{
"mcpServers": {
"fusionauth-mcp-api": {
"command": "npx",
"args": [
"-y",
"@fusionauth/mcp-api@latest"
],
"env": {
"API_KEY_APIKEYAUTH": "<api_key_apikeyauth>",
"API_BASE_URL": "https://..."
}
}
}
}{
"servers": {
"fusionauth-mcp-api": {
"command": "npx",
"args": [
"-y",
"@fusionauth/mcp-api@latest"
],
"env": {
"API_KEY_APIKEYAUTH": "${input:api_key_apikeyauth}",
"API_BASE_URL": "${input:api_base_url}"
}
}
},
"inputs": [
{
"id": "api_key_apikeyauth",
"type": "promptString",
"description": "Api key apikeyauth",
"password": true
},
{
"id": "api_base_url",
"type": "promptString",
"description": "Api base url",
"password": true
}
]
}{
"mcpServers": {
"fusionauth-mcp-api": {
"command": "npx",
"args": [
"-y",
"@fusionauth/mcp-api@latest"
],
"env": {
"API_KEY_APIKEYAUTH": "<api_key_apikeyauth>",
"API_BASE_URL": "https://..."
}
}
}
}file .mcp.json (in your project root)file claude_desktop_config.jsonfile ~/.cursor/mcp.jsonfile .vscode/mcp.jsonfile ~/.codeium/windsurf/mcp_config.jsoninstall npx -y @fusionauth/mcp-apiversion 0.1.14
What it does
This is a preview MCP server that exposes the FusionAuth authentication and identity management API. It allows developers to query and manage FusionAuth instances—including users, applications, and configuration—through an MCP client like Claude Desktop.
- Query your FusionAuth instance to check the number of users or applications you have configured.
- Create or retrieve user accounts and application settings through natural language prompts.
- Automate FusionAuth administrative tasks by restricting the server to read-only or specific operation types.
Tools this server exposes
| Tool | Does |
|---|---|
| retrieve | Fetch specific resources from FusionAuth by ID or identifier. |
| search | Query FusionAuth resources with filters and search criteria. |
| create | Create new resources such as users or applications in FusionAuth. |
| update | Modify existing FusionAuth resources. |
| patch | Apply partial updates to FusionAuth resources. |
| delete | Remove resources from FusionAuth. |
Before you enable it
An MCP server runs with whatever access you give it. Start with a development account rather than production, and check which tools the server exposes before you let an agent call them unattended.