{"name":"io.github.Samik081/mcp-authentik","slug":"samik081-mcp-authentik","title":"Authentik MCP Server","description":"Manage Authentik through AI assistants","url":"https://mcp.market/server/samik081-mcp-authentik","rating":null,"grade":"B","score":83,"certified":false,"status":"active","category":"other","tags":[],"presence":{"score":35,"stars":11,"forks":1,"downloads_week":79,"last_push_at":"2026-09-02T10:57:26.000Z","license":"MIT"},"uptime":null,"claimed":false,"transport":"mixed","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/Samik081/mcp-authentik","website":null,"version":"0.8.1","remotes":[],"packages":[{"registryType":"npm","registryBaseUrl":"https://registry.npmjs.org","identifier":"@samik081/mcp-authentik","version":"0.8.1","runtimeHint":"node","transport":{"type":"stdio"},"environmentVariables":[{"description":"URL of the Authentik instance (e.g. https://auth.example.com)","isRequired":true,"name":"AUTHENTIK_URL"},{"description":"Authentik API token","isRequired":true,"isSecret":true,"name":"AUTHENTIK_TOKEN"}]},{"registryType":"oci","identifier":"ghcr.io/samik081/mcp-authentik:0.8.1","transport":{"type":"stdio"},"environmentVariables":[{"description":"URL of the Authentik instance (e.g. https://auth.example.com)","isRequired":true,"name":"AUTHENTIK_URL"},{"description":"Authentik API token","isRequired":true,"isSecret":true,"name":"AUTHENTIK_TOKEN"}]}],"tools":[{"name":"authentik_admin_apps","description":"List installed Django applications in the Authentik instance.","write_action":false,"price_micros":0,"input_schema":null},{"name":"authentik_admin_models","description":"List all data models available in the Authentik instance.","write_action":false,"price_micros":0,"input_schema":null},{"name":"authentik_admin_settings_get","description":"Get current system settings.","write_action":false,"price_micros":0,"input_schema":null},{"name":"authentik_admin_settings_update","description":"Update system settings (partial update).","write_action":true,"price_micros":0,"input_schema":null},{"name":"authentik_admin_system_info","description":"Get system information including HTTP host, runtime environment, server time, and embedded outpost status.","write_action":false,"price_micros":0,"input_schema":null},{"name":"authentik_admin_version","description":"Get Authentik version information including current version and build hash.","write_action":false,"price_micros":0,"input_schema":null},{"name":"authentik_admin_version_history","description":"List Authentik version history entries.","write_action":false,"price_micros":0,"input_schema":null},{"name":"authentik_app_entitlements_create","description":"Create a new application entitlement.","write_action":true,"price_micros":0,"input_schema":null},{"name":"authentik_app_entitlements_delete","description":"Delete an application entitlement by its UUID. This action is irreversible.","write_action":true,"price_micros":0,"input_schema":null},{"name":"authentik_app_entitlements_get","description":"Get a single application entitlement by its UUID.","write_action":false,"price_micros":0,"input_schema":null},{"name":"authentik_app_entitlements_list","description":"List application entitlements with optional filters.","write_action":false,"price_micros":0,"input_schema":null},{"name":"authentik_app_entitlements_update","description":"Update an existing application entitlement. Only provided fields are modified (partial update).","write_action":true,"price_micros":0,"input_schema":null},{"name":"authentik_apps_check_access","description":"Check whether a specific user has access to an application.","write_action":false,"price_micros":0,"input_schema":null},{"name":"authentik_apps_create","description":"Create a new application with name, slug, and optional provider, group, and metadata.","write_action":true,"price_micros":0,"input_schema":null},{"name":"authentik_apps_delete","description":"Delete an application by its slug. This action is irreversible.","write_action":true,"price_micros":0,"input_schema":null},{"name":"authentik_apps_get","description":"Get a single application by its slug.","write_action":false,"price_micros":0,"input_schema":null},{"name":"authentik_apps_list","description":"List applications with optional filters for name, slug, group, search, and more.","write_action":false,"price_micros":0,"input_schema":null},{"name":"authentik_apps_set_icon_url","description":"Set an application's icon to an external URL (sets the meta_icon field), or clear the current icon. Provide either icon_url to set the icon, or clear: true to remove it.","write_action":false,"price_micros":0,"input_schema":null},{"name":"authentik_apps_update","description":"Update an existing application. Only provided fields are modified (partial update).","write_action":true,"price_micros":0,"input_schema":null},{"name":"authentik_apps_update_transactional","description":"Create or update an application and its provider in a single atomic transaction. Useful for setting up an application with a new provider.","write_action":true,"price_micros":0,"input_schema":null},{"name":"authentik_authenticators_admin_by_type_delete","description":"Delete an authenticator device by type and ID (admin view). This action is irreversible.","write_action":true,"price_micros":0,"input_schema":null},{"name":"authentik_authenticators_admin_by_type_get","description":"Get a single authenticator device by type and ID (admin view). Use numeric id for most types, uuid string for endpoint type.","write_action":false,"price_micros":0,"input_schema":null},{"name":"authentik_authenticators_admin_by_type_list","description":"List authenticator devices of a specific type (admin view). Supports: duo, email, endpoint, sms, static, totp, webauthn.","write_action":false,"price_micros":0,"input_schema":null},{"name":"authentik_authenticators_list","description":"List all authenticator devices across all types for the current user.","write_action":false,"price_micros":0,"input_schema":null},{"name":"authentik_authenticators_user_by_type_list","description":"List authenticator devices of a specific type for the current user. Supports: duo, email, endpoint, sms, static, totp, webauthn.","write_action":false,"price_micros":0,"input_schema":null},{"name":"authentik_brands_create","description":"Create a new brand with domain, branding settings, flow assignments, and optional attributes.","write_action":true,"price_micros":0,"input_schema":null},{"name":"authentik_brands_delete","description":"Delete a brand by its UUID. This action is irreversible.","write_action":true,"price_micros":0,"input_schema":null},{"name":"authentik_brands_get","description":"Get a single brand by its UUID.","write_action":false,"price_micros":0,"input_schema":null},{"name":"authentik_brands_list","description":"List brands with optional filters for UUID, domain, and search.","write_action":false,"price_micros":0,"input_schema":null},{"name":"authentik_brands_update","description":"Update an existing brand. Only provided fields are modified (partial update).","write_action":true,"price_micros":0,"input_schema":null},{"name":"authentik_crypto_create","description":"Create a new certificate keypair from PEM-encoded certificate and optional private key data.","write_action":true,"price_micros":0,"input_schema":null},{"name":"authentik_crypto_delete","description":"Delete a certificate keypair by its UUID. This action is irreversible.","write_action":true,"price_micros":0,"input_schema":null},{"name":"authentik_crypto_generate","description":"Generate a new self-signed certificate keypair.","write_action":false,"price_micros":0,"input_schema":null},{"name":"authentik_crypto_get","description":"Get a single certificate keypair by its UUID.","write_action":false,"price_micros":0,"input_schema":null},{"name":"authentik_crypto_list","description":"List certificate keypairs with optional filters.","write_action":false,"price_micros":0,"input_schema":null},{"name":"authentik_crypto_update","description":"Update an existing certificate keypair. Only provided fields are modified (partial update).","write_action":true,"price_micros":0,"input_schema":null},{"name":"authentik_crypto_view_certificate","description":"View the PEM-encoded certificate data for a keypair. Access is logged.","write_action":false,"price_micros":0,"input_schema":null},{"name":"authentik_crypto_view_private_key","description":"View the PEM-encoded private key data for a keypair. Access is logged. Sensitive operation.","write_action":false,"price_micros":0,"input_schema":null},{"name":"authentik_endpoints_agent_connectors_create","description":"Create a new endpoint agent connector.","write_action":true,"price_micros":0,"input_schema":null},{"name":"authentik_endpoints_agent_connectors_delete","description":"Delete an agent connector by its UUID. This is irreversible.","write_action":true,"price_micros":0,"input_schema":null},{"name":"authentik_endpoints_agent_connectors_get","description":"Retrieve a single agent connector by its UUID.","write_action":false,"price_micros":0,"input_schema":null},{"name":"authentik_endpoints_agent_connectors_list","description":"List endpoint agent connectors with optional filtering by name, enabled state, search, and ordering.","write_action":false,"price_micros":0,"input_schema":null},{"name":"authentik_endpoints_agent_connectors_update","description":"Update an agent connector. Only provided fields are modified (partial update).","write_action":true,"price_micros":0,"input_schema":null},{"name":"authentik_endpoints_connectors_delete","description":"Delete an endpoint connector by its UUID from the generic registry. This is irreversible.","write_action":true,"price_micros":0,"input_schema":null},{"name":"authentik_endpoints_connectors_get","description":"Retrieve a single endpoint connector by its UUID from the generic registry.","write_action":false,"price_micros":0,"input_schema":null},{"name":"authentik_endpoints_connectors_list","description":"List all endpoint connectors across types (generic registry view) with optional search and ordering.","write_action":false,"price_micros":0,"input_schema":null},{"name":"authentik_endpoints_device_access_groups_create","description":"Create a new device access group. Device access groups bundle devices for policy targeting.","write_action":true,"price_micros":0,"input_schema":null},{"name":"authentik_endpoints_device_access_groups_delete","description":"Delete a device access group by its UUID. This is irreversible.","write_action":true,"price_micros":0,"input_schema":null},{"name":"authentik_endpoints_device_access_groups_get","description":"Retrieve a single device access group by its UUID.","write_action":false,"price_micros":0,"input_schema":null},{"name":"authentik_endpoints_device_access_groups_list","description":"List device access groups with optional filtering by name, search, and ordering.","write_action":false,"price_micros":0,"input_schema":null},{"name":"authentik_endpoints_device_access_groups_update","description":"Update a device access group. Only provided fields are modified (partial update).","write_action":true,"price_micros":0,"input_schema":null},{"name":"authentik_endpoints_device_bindings_create","description":"Create a new device binding linking a policy, group, or user to a target with an evaluation order.","write_action":true,"price_micros":0,"input_schema":null},{"name":"authentik_endpoints_device_bindings_delete","description":"Delete a device binding by its UUID. This is irreversible.","write_action":true,"price_micros":0,"input_schema":null},{"name":"authentik_endpoints_device_bindings_get","description":"Retrieve a single device binding by its UUID.","write_action":false,"price_micros":0,"input_schema":null},{"name":"authentik_endpoints_device_bindings_list","description":"List device-to-user policy bindings with optional filtering by policy, target, enabled state, search, and ordering.","write_action":false,"price_micros":0,"input_schema":null},{"name":"authentik_endpoints_device_bindings_update","description":"Update a device binding. Only provided fields are modified (partial update).","write_action":true,"price_micros":0,"input_schema":null},{"name":"authentik_endpoints_devices_delete","description":"Delete an endpoint device by its UUID. This is irreversible.","write_action":true,"price_micros":0,"input_schema":null},{"name":"authentik_endpoints_devices_get","description":"Retrieve a single endpoint device by its UUID.","write_action":false,"price_micros":0,"input_schema":null},{"name":"authentik_endpoints_devices_list","description":"List managed endpoint devices with optional filtering by name or identifier, search, and ordering.","write_action":false,"price_micros":0,"input_schema":null},{"name":"authentik_endpoints_devices_summary","description":"Retrieve aggregate summary statistics about managed endpoint devices.","write_action":false,"price_micros":0,"input_schema":null},{"name":"authentik_endpoints_devices_update","description":"Update an endpoint device. Only provided fields are modified (partial update).","write_action":true,"price_micros":0,"input_schema":null},{"name":"authentik_endpoints_enrollment_tokens_create","description":"Create a new agent enrollment token bound to a connector. Used to enroll devices.","write_action":true,"price_micros":0,"input_schema":null},{"name":"authentik_endpoints_enrollment_tokens_delete","description":"Delete an enrollment token by its UUID. This is irreversible.","write_action":true,"price_micros":0,"input_schema":null},{"name":"authentik_endpoints_enrollment_tokens_get","description":"Retrieve a single enrollment token by its UUID.","write_action":false,"price_micros":0,"input_schema":null},{"name":"authentik_endpoints_enrollment_tokens_list","description":"List agent enrollment tokens with optional filtering by connector, search, and ordering.","write_action":false,"price_micros":0,"input_schema":null},{"name":"authentik_endpoints_enrollment_tokens_update","description":"Update an enrollment token. Only provided fields are modified (partial update).","write_action":true,"price_micros":0,"input_schema":null},{"name":"authentik_endpoints_fleet_connectors_create","description":"Create a new Fleet connector pointing at a Fleet device-management instance.","write_action":true,"price_micros":0,"input_schema":null},{"name":"authentik_endpoints_fleet_connectors_delete","description":"Delete a Fleet connector by its UUID. This is irreversible.","write_action":true,"price_micros":0,"input_schema":null},{"name":"authentik_endpoints_fleet_connectors_get","description":"Retrieve a single Fleet connector by its UUID.","write_action":false,"price_micros":0,"input_schema":null},{"name":"authentik_endpoints_fleet_connectors_list","description":"List Fleet device-management connectors with optional filtering by name, search, and ordering.","write_action":false,"price_micros":0,"input_schema":null},{"name":"authentik_endpoints_fleet_connectors_update","description":"Update a Fleet connector. Only provided fields are modified (partial update).","write_action":true,"price_micros":0,"input_schema":null},{"name":"authentik_endpoints_google_chrome_connectors_create","description":"Create a new Google Chrome connector with service-account credentials.","write_action":true,"price_micros":0,"input_schema":null},{"name":"authentik_endpoints_google_chrome_connectors_delete","description":"Delete a Google Chrome connector by its UUID. This is irreversible.","write_action":true,"price_micros":0,"input_schema":null},{"name":"authentik_endpoints_google_chrome_connectors_get","description":"Retrieve a single Google Chrome connector by its UUID.","write_action":false,"price_micros":0,"input_schema":null},{"name":"authentik_endpoints_google_chrome_connectors_list","description":"List Google Chrome device-management connectors with optional filtering by name, search, and ordering.","write_action":false,"price_micros":0,"input_schema":null},{"name":"authentik_endpoints_google_chrome_connectors_update","description":"Update a Google Chrome connector. Only provided fields are modified (partial update).","write_action":true,"price_micros":0,"input_schema":null},{"name":"authentik_endpoints_psso_ise_delete","description":"Delete an ISE-PSSO agent by its UUID. This is irreversible.","write_action":true,"price_micros":0,"input_schema":null},{"name":"authentik_endpoints_psso_ise_get","description":"Retrieve a single ISE-PSSO agent by its UUID.","write_action":false,"price_micros":0,"input_schema":null},{"name":"authentik_endpoints_psso_ise_list","description":"List Apple Independent Secure Enclave (ISE-PSSO) agents with optional filtering by user, search, and ordering.","write_action":false,"price_micros":0,"input_schema":null},{"name":"authentik_enterprise_license_create","description":"Install a new enterprise license key.","write_action":true,"price_micros":0,"input_schema":null},{"name":"authentik_enterprise_license_delete","description":"Delete an enterprise license by its UUID. This action is irreversible.","write_action":true,"price_micros":0,"input_schema":null},{"name":"authentik_enterprise_license_get","description":"Get a single enterprise license by its UUID.","write_action":false,"price_micros":0,"input_schema":null},{"name":"authentik_enterprise_license_list","description":"List enterprise licenses with optional filters.","write_action":false,"price_micros":0,"input_schema":null},{"name":"authentik_enterprise_license_update","description":"Update an existing enterprise license. Only provided fields are modified (partial update).","write_action":true,"price_micros":0,"input_schema":null},{"name":"authentik_events_actions_list","description":"List all available event action types.","write_action":false,"price_micros":0,"input_schema":null},{"name":"authentik_events_create","description":"Create a new audit event.","write_action":true,"price_micros":0,"input_schema":null},{"name":"authentik_events_get","description":"Get a single audit event by its UUID.","write_action":false,"price_micros":0,"input_schema":null},{"name":"authentik_events_list","description":"List audit events with optional filters for action, username, client IP, and more.","write_action":false,"price_micros":0,"input_schema":null},{"name":"authentik_events_rules_create","description":"Create a new notification rule.","write_action":true,"price_micros":0,"input_schema":null},{"name":"authentik_events_rules_delete","description":"Delete a notification rule by its UUID. This action is irreversible.","write_action":true,"price_micros":0,"input_schema":null},{"name":"authentik_events_rules_get","description":"Get a single notification rule by its UUID.","write_action":false,"price_micros":0,"input_schema":null},{"name":"authentik_events_rules_list","description":"List notification rules with optional filters.","write_action":false,"price_micros":0,"input_schema":null},{"name":"authentik_events_rules_update","description":"Update an existing notification rule. Only provided fields are modified (partial update).","write_action":true,"price_micros":0,"input_schema":null},{"name":"authentik_events_top_per_user","description":"Get the top N events grouped by user count.","write_action":false,"price_micros":0,"input_schema":null},{"name":"authentik_events_transports_create","description":"Create a new notification transport.","write_action":true,"price_micros":0,"input_schema":null},{"name":"authentik_events_transports_delete","description":"Delete a notification transport by its UUID. This action is irreversible.","write_action":true,"price_micros":0,"input_schema":null},{"name":"authentik_events_transports_get","description":"Get a single notification transport by its UUID.","write_action":false,"price_micros":0,"input_schema":null},{"name":"authentik_events_transports_list","description":"List notification transports with optional filters.","write_action":false,"price_micros":0,"input_schema":null},{"name":"authentik_events_transports_update","description":"Update an existing notification transport. Only provided fields are modified (partial update).","write_action":true,"price_micros":0,"input_schema":null},{"name":"authentik_events_volume","description":"Get event volume data for specified filters and timeframe.","write_action":false,"price_micros":0,"input_schema":null}],"scan":{"score":83,"grade":"B","scanned_at":"2026-09-20T20:08:58.532Z","report":{"scannerVersion":"0.1.9","scannedAt":"2026-09-20T20:08:58.461Z","components":{"code":{"score":25,"max":25,"notes":["75 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":6,"max":15,"notes":["static API keys via environment variables"]},"maintenance":{"score":15,"max":15,"notes":["last push 18 days ago"]},"identity":{"score":8,"max":10,"notes":["registry namespace matches repository owner","GitHub account older than a year"]}},"findings":[],"inputs":{"packages":[{"registryType":"npm","identifier":"@samik081/mcp-authentik","version":"0.8.1","found":true,"license":"MIT","hasInstallScripts":false,"dependencyCount":3,"publishedAt":"2026-09-02T10:58:19.673Z","repositoryUrl":"git+https://github.com/Samik081/mcp-authentik.git","weeklyDownloads":79}],"repo":{"found":true,"owner":"Samik081","repo":"mcp-authentik","archived":false,"pushedAt":"2026-09-02T10:57:26Z","stars":11,"forks":1,"openIssues":1,"ownerType":"User","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/13415865?v=4","ownerCreatedAt":"2015-07-20T10:07:51Z","license":"MIT"},"icon":{"url":"https://avatars.githubusercontent.com/u/13415865?v=4&s=128","source":"github"},"presence":{"stars":11,"forks":1,"downloadsWeek":79,"license":"MIT","lastPushAt":"2026-09-02T10:57:26.000Z","score":35}}}},"grade_history":[],"reviews":[]}