Okta Mcp Server

by fctr-id

38 stars

427 downloads

Not rated

GitHub Website

About

The Okta MCP Server is a groundbreaking tool built by the team at Fctr that enables AI models to interact directly with your Okta environment using the Model Context Protocol (MCP). Built specifically for IAM engineers, security teams, and Okta administrators, it implements the M

Details

Author: fctr-id
GitHub stars: 38
Downloads: 427
Categories: Cloud Service, Security, Infrastructure, Developer Tools, AI

- Special tools for access analysis and login risk assessment
- Standard user management tools (list, get, groups, apps, factors)
- Group operations (list, get, members, assigned apps)
- Dual-mode transport: STDIO and HTTP
- Enterprise-grade security with JWT bearer token support
- Designed for lightweight workflows (<100 entities per transaction)

Setting up with Highlight

This MCP is not yet compatible with Highlight’s one-click setup. However, you can still use it with Highlight by following these steps:

Download and install Highlight from highlightai.com/download
Navigate to the plugins tab and select "Add Custom Plugin"
Configure the plugin with the settings below

Plugin Name Okta Mcp Server

Command (node, npx, python, etc.)

Please refer to the README for specific instructions on how to obtain API keys or other required environment variables.
Enable "Start Automatically" if you want the plugin to start when Highlight launches

Setting up with Cursor

Open Cursor's settings
Navigate to the MCP section
Click "Add new Global MCP server"
Copy and paste the configuration below based on your operating system

JSON

{
    "mcpServers": {
        "okta mcp server": {
            "okta-mcp-server": {
                "command": "python",
                "args": [
                    "-m",
                    "venv",
                    "venv"
                ]
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "okta mcp server": {
            "okta-mcp-server": {
                "command": "python",
                "args": [
                    "-m",
                    "venv",
                    "venv"
                ]
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "okta mcp server": {
            "okta-mcp-server": {
                "command": "python",
                "args": [
                    "-m",
                    "venv",
                    "venv"
                ]
            }
        }
    }
}

Setting up with Claude Desktop

Open Claude Desktop's settings
Go to the Integrations tab
Click "Add MCP Server"
Use the configuration below based on your operating system

Note: Make sure Claude Desktop is running before attempting to connect.

JSON

{
    "mcpServers": {
        "okta mcp server": {
            "okta-mcp-server": {
                "command": "python",
                "args": [
                    "-m",
                    "venv",
                    "venv"
                ]
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "okta mcp server": {
            "okta-mcp-server": {
                "command": "python",
                "args": [
                    "-m",
                    "venv",
                    "venv"
                ]
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "okta mcp server": {
            "okta-mcp-server": {
                "command": "python",
                "args": [
                    "-m",
                    "venv",
                    "venv"
                ]
            }
        }
    }
}

Setting up with Windsurf

Open Windsurf's preferences
Go to the Integrations section
Click "Add MCP Integration"
Use the configuration below based on your operating system

JSON

{
    "mcpServers": {
        "okta mcp server": {
            "okta-mcp-server": {
                "command": "python",
                "args": [
                    "-m",
                    "venv",
                    "venv"
                ]
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "okta mcp server": {
            "okta-mcp-server": {
                "command": "python",
                "args": [
                    "-m",
                    "venv",
                    "venv"
                ]
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "okta mcp server": {
            "okta-mcp-server": {
                "command": "python",
                "args": [
                    "-m",
                    "venv",
                    "venv"
                ]
            }
        }
    }
}

Setting up with Cline

Open Cline's settings
Navigate to the Integrations section
Click "Add MCP Server"
Copy and paste the configuration below based on your operating system

Note: Make sure to restart Cline after adding the configuration.

JSON

{
    "mcpServers": {
        "okta mcp server": {
            "okta-mcp-server": {
                "command": "python",
                "args": [
                    "-m",
                    "venv",
                    "venv"
                ]
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "okta mcp server": {
            "okta-mcp-server": {
                "command": "python",
                "args": [
                    "-m",
                    "venv",
                    "venv"
                ]
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "okta mcp server": {
            "okta-mcp-server": {
                "command": "python",
                "args": [
                    "-m",
                    "venv",
                    "venv"
                ]
            }
        }
    }
}

Setting up with Goose

Open Goose's preferences
Go to the Integrations tab
Select "MCP Servers"
Click "Add New Server"
Use the configuration below based on your operating system

JSON

{
    "mcpServers": {
        "okta mcp server": {
            "okta-mcp-server": {
                "command": "python",
                "args": [
                    "-m",
                    "venv",
                    "venv"
                ]
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "okta mcp server": {
            "okta-mcp-server": {
                "command": "python",
                "args": [
                    "-m",
                    "venv",
                    "venv"
                ]
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "okta mcp server": {
            "okta-mcp-server": {
                "command": "python",
                "args": [
                    "-m",
                    "venv",
                    "venv"
                ]
            }
        }
    }
}

From the repository

Install the server and configure it with your Okta API token. The recommended transport is Standard I/O (STDIO), but Streamable HTTP and remote HTTP are also available. Use an MCP-compatible AI client (e.g., Claude Desktop) to invoke tools such as analyze_user_app_access and list_okta_users.

`okta_list_users_make_request`

`okta_create_user_make_request`

`okta_get_user_make_request`

`okta_update_user_make_request`

`okta_delete_user_make_request`

`okta_list_groups_make_request`

`okta_create_group_make_request`

`okta_assign_user_to_group_make_request`

`okta_list_applications_make_request`

`okta_assign_user_to_application_make_request`

`okta_assign_group_to_application_make_request`

`okta_delete_application_make_request`

`okta_deactivate_application_make_request`

Claude Desktop / Cursor

Paste into your MCP client config file to install this server.

{
    "mcpServers": {
        "okta mcp server": {
            "okta-mcp-server": {
                "command": "python",
                "args": [
                    "-m",
                    "venv",
                    "venv"
                ]
            }
        }
    }
}

McpServers

{
    "okta-mcp-server": {
        "command": "python",
        "args": [
            "-m",
            "venv",
            "venv"
        ]
    }
}

<div align="center">
<h2>Okta MCP Server (v0.1.1-BETA)</h2>
</div>

<div align="center">
<h3>🔥 ALERT!!! A brand new re-built MCP Server now available</h3>
<p><strong>A complete rewrite built on Anthropic's new MCP architecture pattern with dual-mode operation, context-engineering, enhanced security sandbox, and production-ready Docker support.</strong></p>
<p><a href="https://github.com/fctr-id/fctr-okta-mcp-server"><strong>→ Explore TAKO MCP Server</strong></a></p>
</div>

<div align="center">
The Okta MCP Server is a groundbreaking tool that enables AI models to interact directly with your Okta environment using the Model Context Protocol (MCP). Built specifically for IAM engineers, security teams, and Okta administrators, it implements the MCP specification to transform how AI assistants can help manage and analyze Okta resources.
</div>

<div align= "center" >
<p ><a href="https://github.com/fctr-id/okta-mcp-server">View on GitHub</a> | <a href="https://modelcontextprotocol.io/introduction">Learn about MCP</a> | <a href="https://github.com/fctr-id/okta-ai-agent">Okta AI Agent</a></p>
</div>

<div align="center">
<h3>Quick Demo</h3>
<p >
Okta MCP Server Demo
</p>
</div>

🎉 What's New in v0.1.1-BETA - Enterprise-Grade Special Tools!

This release introduces powerful special tools that revolutionize daily Okta administration tasks:

🔥 NEW: Special Tools - Game Changers for Okta Admins

- 🎯 Comprehensive Access Analysis: Helps answer the most frequent question okta admns face. Can user X access app Y? - 🛡️ Advanced Login Risk Assessment: Behavioral analysis with VPN/Tor detection and geographic impossibility checks which can help with suspicious reporting emails.

💡 Real-World Example - Access Analysis:

❓ Question: "Can user john@company.com access the application Salesforce?" 🤖 AI Response (30 seconds): "User John Smith can access Salesforce because: 1) User is ACTIVE ✅ 2) User is assigned via group 'Sales Team' ✅, 3) Policy allows access with 2FA from corporate network or requires PUSH factor from external locations - user has PUSH enrolled ✅"

⏱️ Manual Process: Navigate Users → Find John → Check Status → Check App Assignments → Check Group Memberships → Check Salesforce Assignments → Review Access Policies → Check MFA Factors → Correlate Network Rules (10-15 min)

💡 Real-World Example - Login Risk Assessment:

❓ Question: "Is dan@company.com's recent login activity suspicious?" 🤖 AI Response (30 seconds): "LOW RISK - Dan exhibits excellent login security patterns: consistent geographic area, same residential ISP, stable device fingerprints, normal browser patterns, zero VPN/proxy usage, all Okta risk scores LOW ✅"

⏱️ Manual Process: System Logs → Filter User → Check Locations → Review IP Addresses → Cross-reference Network Zones → Analyze Device Patterns → Check Geographic Impossibility → Review Behavioral Flags (15+ min)

🏗️ Core Architecture

- 🚀 FastMCP 2.0: Migrated from legacy MCP package to FastMCP 2.0 for cutting-edge protocol features - 🧹 Cleaner Code: Removed tool_registry.py dependency for simpler, more maintainable codebase - ⚡ Better Performance: Modern async patterns and optimized request handling

🛠️ Enhanced Tools

- 📝 Complete Rewrite: All tools rewritten with better annotations and descriptions for AI understanding - 🛡️ Improved Validation: Enhanced error handling and input validation across all operations

🔐 Advanced Security

- 🎫 Bearer Tokens: Full JWT bearer token support with jwks_uri validation - 🏢 Enterprise Auth: Support for enterprise authentication flows and scope-based access

🚀 Future-Ready

- 🔌 Middleware Ready: Extensible middleware system for custom processing - 📡 Protocol Evolution: Access to latest MCP features as they're developed and standardized

> 📝 Note: CLI clients and AI sampling features have been moved to _Archived/ folder due to pydantic-ai dependency conflicts (security vulnerability ). See _Archived/README.md for details.

📋 Table of Contents

- 🎉 What's New in v0.1.1-BETA - Enterprise-Grade Special Tools!
- 🏗️ Core Architecture
- 🛠️ Enhanced Tools
- 🔐 Advanced Security
- 🚀 Future-Ready
- 📋 Table of Contents
- 🔍 What is the Model Context Protocol?
- ⚠️ IMPORTANT: Security \& Limitations
- 🔄 Data Flow \& Privacy
- 📊 Context Window Limitations
- 🚨 HTTP Transport Security Warning
- 🛠️ Available Tools
- 🚀 Quick Start
- Prerequisites
- 🧠 Supported AI Providers
- Currently Supported Providers:
- Installation
- Configuration \& Usage
- Supported Transports and Launching
- 1. Standard I/O (STDIO) - Recommended
- 2. Streamable HTTP Transport - Modern \& Current Standard
- 3. Remote HTTP Access - High Risk Advanced Use Only
- 4. Server-Sent Events (SSE) - Deprecated
- 5. Docker Deployment
- Running Docker Containers
- ⚠️ Good to Know
- Beta Release 🧪
- Security First 🛡️
- Current Limitations 🔍
- 🗺️ Roadmap
- 🆘 Need Help?
- 💡 Feature Requests \& Ideas
- 👥 Contributors
- ⚖️ Legal Stuff

🔍 What is the Model Context Protocol?

<div align="left">
<p>The Model Context Protocol (MCP) is an open standard that enables AI models to interact with external tools and services in a structured, secure way. It provides a consistent interface for AI systems to discover and use capabilities exposed by servers, allowing AI assistants to extend their functionality beyond their training data.</p>

<p>Think of MCP as the "USB-C of AI integration" - just as USB-C provides a universal standard that allows various devices to connect and communicate regardless of manufacturer, MCP creates a standardized way for AI models to discover and interact with different services without custom integration for each one. This "plug-and-play" approach means developers can build tools once and have them work across multiple AI assistants, while users benefit from seamless integration without worrying about compatibility issues.</p>

<p><strong>Example:</strong> "Find all locked users in our Okta tenant, and create a spreadsheet in our IT Operations folder on Google Drive with their names, email addresses, and last login dates." <em>The AI uses Okta MCP Server to query locked users, then passes this data to Google Drive MCP Server to create the spreadsheet - all without custom coding.</em></p>

⚠️ IMPORTANT: Security & Limitations

Please read this section carefully before using Okta MCP Server.

🔄 Data Flow & Privacy

…

No reviews yet — be the first

Use Google, GitHub, or an email account so ratings stay tied to real people.

Email sign in

No reviews posted yet.

About

Details

Jump to

Setting up with Highlight

From the repository

okta_list_users_make_request

okta_create_user_make_request

okta_get_user_make_request

okta_update_user_make_request

okta_delete_user_make_request

okta_list_groups_make_request

okta_create_group_make_request

okta_assign_user_to_group_make_request

okta_list_applications_make_request

okta_assign_user_to_application_make_request

okta_assign_group_to_application_make_request

okta_delete_application_make_request

okta_deactivate_application_make_request

Claude Desktop / Cursor

McpServers

🎉 What's New in v0.1.1-BETA - Enterprise-Grade Special Tools!

🔥 NEW: Special Tools - Game Changers for Okta Admins

🏗️ Core Architecture

🛠️ Enhanced Tools

🔐 Advanced Security

🚀 Future-Ready

📋 Table of Contents

🔍 What is the Model Context Protocol?

⚠️ IMPORTANT: Security & Limitations

🔄 Data Flow & Privacy

Install

More like this

Aws Kb Retrieval Server

AWS MCP Servers

Lamda

Browser Tools

Git (GitHub to MCP)

Desktop Commander

`okta_list_users_make_request`

`okta_create_user_make_request`

`okta_get_user_make_request`

`okta_update_user_make_request`

`okta_delete_user_make_request`

`okta_list_groups_make_request`

`okta_create_group_make_request`

`okta_assign_user_to_group_make_request`

`okta_list_applications_make_request`

`okta_assign_user_to_application_make_request`

`okta_assign_group_to_application_make_request`

`okta_delete_application_make_request`

`okta_deactivate_application_make_request`