Authentik MCP Server

Read from the package source without running it. The installed server may list more.

• authentik_admin_apps

  List installed Django applications in the Authentik instance.

• authentik_admin_models

  List all data models available in the Authentik instance.

• authentik_admin_settings_get

  Get current system settings.

• authentik_admin_settings_updatewrite action

  Update system settings (partial update).

• authentik_admin_system_info

  Get system information including HTTP host, runtime environment, server time, and embedded outpost status.

• authentik_admin_version

  Get Authentik version information including current version and build hash.

• authentik_admin_version_history

  List Authentik version history entries.

• authentik_app_entitlements_createwrite action

  Create a new application entitlement.

• authentik_app_entitlements_deletewrite action

  Delete an application entitlement by its UUID. This action is irreversible.

• authentik_app_entitlements_get

  Get a single application entitlement by its UUID.

• authentik_app_entitlements_list

  List application entitlements with optional filters.

• authentik_app_entitlements_updatewrite action

  Update an existing application entitlement. Only provided fields are modified (partial update).

• authentik_apps_check_access

  Check whether a specific user has access to an application.

• authentik_apps_createwrite action

  Create a new application with name, slug, and optional provider, group, and metadata.

• authentik_apps_deletewrite action

  Delete an application by its slug. This action is irreversible.

• authentik_apps_get

  Get a single application by its slug.

• authentik_apps_list

  List applications with optional filters for name, slug, group, search, and more.

• authentik_apps_set_icon_url

  Set an application's icon to an external URL (sets the meta_icon field), or clear the current icon. Provide either icon_url to set the icon, or clear: true to remove it.

• authentik_apps_updatewrite action

  Update an existing application. Only provided fields are modified (partial update).

• authentik_apps_update_transactionalwrite action

  Create or update an application and its provider in a single atomic transaction. Useful for setting up an application with a new provider.

• authentik_authenticators_admin_by_type_deletewrite action

  Delete an authenticator device by type and ID (admin view). This action is irreversible.

• authentik_authenticators_admin_by_type_get

  Get a single authenticator device by type and ID (admin view). Use numeric id for most types, uuid string for endpoint type.

• authentik_authenticators_admin_by_type_list

  List authenticator devices of a specific type (admin view). Supports: duo, email, endpoint, sms, static, totp, webauthn.

• authentik_authenticators_list

  List all authenticator devices across all types for the current user.

• authentik_authenticators_user_by_type_list

  List authenticator devices of a specific type for the current user. Supports: duo, email, endpoint, sms, static, totp, webauthn.

• authentik_brands_createwrite action

  Create a new brand with domain, branding settings, flow assignments, and optional attributes.

• authentik_brands_deletewrite action

  Delete a brand by its UUID. This action is irreversible.

• authentik_brands_get

  Get a single brand by its UUID.

• authentik_brands_list

  List brands with optional filters for UUID, domain, and search.

• authentik_brands_updatewrite action

  Update an existing brand. Only provided fields are modified (partial update).

• authentik_crypto_createwrite action

  Create a new certificate keypair from PEM-encoded certificate and optional private key data.

• authentik_crypto_deletewrite action

  Delete a certificate keypair by its UUID. This action is irreversible.

• authentik_crypto_generate

  Generate a new self-signed certificate keypair.

• authentik_crypto_get

  Get a single certificate keypair by its UUID.

• authentik_crypto_list

  List certificate keypairs with optional filters.

• authentik_crypto_updatewrite action

  Update an existing certificate keypair. Only provided fields are modified (partial update).

• authentik_crypto_view_certificate

  View the PEM-encoded certificate data for a keypair. Access is logged.

• authentik_crypto_view_private_key

  View the PEM-encoded private key data for a keypair. Access is logged. Sensitive operation.

• authentik_endpoints_agent_connectors_createwrite action

  Create a new endpoint agent connector.

• authentik_endpoints_agent_connectors_deletewrite action

  Delete an agent connector by its UUID. This is irreversible.

• authentik_endpoints_agent_connectors_get

  Retrieve a single agent connector by its UUID.

• authentik_endpoints_agent_connectors_list

  List endpoint agent connectors with optional filtering by name, enabled state, search, and ordering.

• authentik_endpoints_agent_connectors_updatewrite action

  Update an agent connector. Only provided fields are modified (partial update).

• authentik_endpoints_connectors_deletewrite action

  Delete an endpoint connector by its UUID from the generic registry. This is irreversible.

• authentik_endpoints_connectors_get

  Retrieve a single endpoint connector by its UUID from the generic registry.

• authentik_endpoints_connectors_list

  List all endpoint connectors across types (generic registry view) with optional search and ordering.

• authentik_endpoints_device_access_groups_createwrite action

  Create a new device access group. Device access groups bundle devices for policy targeting.

• authentik_endpoints_device_access_groups_deletewrite action

  Delete a device access group by its UUID. This is irreversible.

• authentik_endpoints_device_access_groups_get

  Retrieve a single device access group by its UUID.

• authentik_endpoints_device_access_groups_list

  List device access groups with optional filtering by name, search, and ordering.

• authentik_endpoints_device_access_groups_updatewrite action

  Update a device access group. Only provided fields are modified (partial update).

• authentik_endpoints_device_bindings_createwrite action

  Create a new device binding linking a policy, group, or user to a target with an evaluation order.

• authentik_endpoints_device_bindings_deletewrite action

  Delete a device binding by its UUID. This is irreversible.

• authentik_endpoints_device_bindings_get

  Retrieve a single device binding by its UUID.

• authentik_endpoints_device_bindings_list

  List device-to-user policy bindings with optional filtering by policy, target, enabled state, search, and ordering.

• authentik_endpoints_device_bindings_updatewrite action

  Update a device binding. Only provided fields are modified (partial update).

• authentik_endpoints_devices_deletewrite action

  Delete an endpoint device by its UUID. This is irreversible.

• authentik_endpoints_devices_get

  Retrieve a single endpoint device by its UUID.

• authentik_endpoints_devices_list

  List managed endpoint devices with optional filtering by name or identifier, search, and ordering.

• authentik_endpoints_devices_summary

  Retrieve aggregate summary statistics about managed endpoint devices.

• authentik_endpoints_devices_updatewrite action

  Update an endpoint device. Only provided fields are modified (partial update).

• authentik_endpoints_enrollment_tokens_createwrite action

  Create a new agent enrollment token bound to a connector. Used to enroll devices.

• authentik_endpoints_enrollment_tokens_deletewrite action

  Delete an enrollment token by its UUID. This is irreversible.

• authentik_endpoints_enrollment_tokens_get

  Retrieve a single enrollment token by its UUID.

• authentik_endpoints_enrollment_tokens_list

  List agent enrollment tokens with optional filtering by connector, search, and ordering.

• authentik_endpoints_enrollment_tokens_updatewrite action

  Update an enrollment token. Only provided fields are modified (partial update).

• authentik_endpoints_fleet_connectors_createwrite action

  Create a new Fleet connector pointing at a Fleet device-management instance.

• authentik_endpoints_fleet_connectors_deletewrite action

  Delete a Fleet connector by its UUID. This is irreversible.

• authentik_endpoints_fleet_connectors_get

  Retrieve a single Fleet connector by its UUID.

• authentik_endpoints_fleet_connectors_list

  List Fleet device-management connectors with optional filtering by name, search, and ordering.

• authentik_endpoints_fleet_connectors_updatewrite action

  Update a Fleet connector. Only provided fields are modified (partial update).

• authentik_endpoints_google_chrome_connectors_createwrite action

  Create a new Google Chrome connector with service-account credentials.

• authentik_endpoints_google_chrome_connectors_deletewrite action

  Delete a Google Chrome connector by its UUID. This is irreversible.

• authentik_endpoints_google_chrome_connectors_get

  Retrieve a single Google Chrome connector by its UUID.

• authentik_endpoints_google_chrome_connectors_list

  List Google Chrome device-management connectors with optional filtering by name, search, and ordering.

• authentik_endpoints_google_chrome_connectors_updatewrite action

  Update a Google Chrome connector. Only provided fields are modified (partial update).

• authentik_endpoints_psso_ise_deletewrite action

  Delete an ISE-PSSO agent by its UUID. This is irreversible.

• authentik_endpoints_psso_ise_get

  Retrieve a single ISE-PSSO agent by its UUID.

• authentik_endpoints_psso_ise_list

  List Apple Independent Secure Enclave (ISE-PSSO) agents with optional filtering by user, search, and ordering.

• authentik_enterprise_license_createwrite action

  Install a new enterprise license key.

• authentik_enterprise_license_deletewrite action

  Delete an enterprise license by its UUID. This action is irreversible.

• authentik_enterprise_license_get

  Get a single enterprise license by its UUID.

• authentik_enterprise_license_list

  List enterprise licenses with optional filters.

• authentik_enterprise_license_updatewrite action

  Update an existing enterprise license. Only provided fields are modified (partial update).

• authentik_events_actions_list

  List all available event action types.

• authentik_events_createwrite action

  Create a new audit event.

• authentik_events_get

  Get a single audit event by its UUID.

• authentik_events_list

  List audit events with optional filters for action, username, client IP, and more.

• authentik_events_rules_createwrite action

  Create a new notification rule.

• authentik_events_rules_deletewrite action

  Delete a notification rule by its UUID. This action is irreversible.

• authentik_events_rules_get

  Get a single notification rule by its UUID.

• authentik_events_rules_list

  List notification rules with optional filters.

• authentik_events_rules_updatewrite action

  Update an existing notification rule. Only provided fields are modified (partial update).

• authentik_events_top_per_user

  Get the top N events grouped by user count.

• authentik_events_transports_createwrite action

  Create a new notification transport.

• authentik_events_transports_deletewrite action

  Delete a notification transport by its UUID. This action is irreversible.

• authentik_events_transports_get

  Get a single notification transport by its UUID.

• authentik_events_transports_list

  List notification transports with optional filters.

• authentik_events_transports_updatewrite action

  Update an existing notification transport. Only provided fields are modified (partial update).

• authentik_events_volume

  Get event volume data for specified filters and timeframe.

• Code scan75 source files scanned25/25
• –Live reliabilityno gateway calls yet and no remote to proben/a
• –Tool poisoningtools not inspected (local package is not executed); not countedn/a
• Auth qualitystatic API keys via environment variables6/15
• Maintenancelast push 18 days ago15/15
• Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

Authentik MCP Server: common questions

Is Authentik MCP Server safe?

Mostly: it is graded B (83/100). Read the Authentik MCP Server safety report

How do I install Authentik MCP Server?

It runs on your machine. Copy the Claude Code, Claude Desktop or Cursor config from the install section.

Does Authentik MCP Server need an API key?

Yes. The registry entry asks for AUTHENTIK_TOKEN.

Is Authentik MCP Server maintained?

The last commit was 19 days ago (2026-09-02). The latest release is v0.8.1.