How do I install the authentik mcp server?

Use a recorded configuration for your client, replace example credential values and paths, and verify the documented runtime. Restart or reconnect the client, then inspect the available tools.

What credentials does it need?

It reads `AUTHENTIK_URL`, `AUTHENTIK_TOKEN` from the environment. Store these in your client's env block or a secrets manager — never commit them to a repository — and grant the narrowest scope that still covers your use case.

SSyncDev

Start a project

Authentik MCP Server

Manage Authentik through AI assistants

Local serverstdioTypeScript

What is the Authentik MCP Server?

Manage Authentik through AI assistants

What you get

MCP server for Authentik identity management. Manage users, groups, applications, flows, policies, providers, and more through natural language in Cursor, Claude Code, and Claude Desktop.

297 tools — across 22 categories covering the complete Authentik API
Read-only mode — via AUTHENTIK_ACCESS_TIER=read-only for safe monitoring
Category filtering — via AUTHENTIK_CATEGORIES to expose only the tools you need
Type-safe SDK client — via @goauthentik/api
Docker images — for linux/amd64 and linux/arm64 on GHCR
Remote MCP — via HTTP transport (MCP_TRANSPORT=http) using the Streamable HTTP protocol

More MCP options

Compare MCP servers by category, or browse hosted MCP servers if you prefer an endpoint over a local process.

Maintainer setup documentation.

Recorded tools

Check the linked publisher documentation and your connected client's tool list. Names and availability can vary with the server version and account permissions.

Tool	What it does
authentik_admin_system_info	Get system information including HTTP host, runtime environment, server time, and embedded outpost status
authentik_admin_version	Get Authentik version information including current version and build hash
authentik_admin_settings_get	Get current system settings
authentik_admin_settings_update	Update system settings (partial update)
authentik_admin_apps	List installed Django applications in the Authentik instance
authentik_admin_models	List all data models available in the Authentik instance
authentik_admin_version_history	List Authentik version history entries
authentik_admin_system_task_trigger	Trigger all system tasks (e.g., cleanup, cache clear)
authentik_authenticators_list	List all authenticator devices across all types for the current user
authentik_authenticators_admin_by_type_list	List authenticator devices of a specific type (admin view)
authentik_authenticators_admin_by_type_get	Get a single authenticator device by type and ID (admin view)
authentik_authenticators_admin_by_type_delete	Delete an authenticator device by type and ID (admin view)
authentik_authenticators_user_by_type_list	List authenticator devices of a specific type for the current user
authentik_users_list	List users with optional filters for username, email, name, active status, superuser status, path, groups, and search

How to install the Authentik MCP Server

claude mcp add authentik --env AUTHENTIK_URL=your-value --env AUTHENTIK_TOKEN=your-value -- npx -y @samik081/mcp-authentik

Configuration

Variable	Description	Required
AUTHENTIK_URL	Endpoint or connection string the server talks to.	Yes
AUTHENTIK_TOKEN	Credential the server authenticates with.	Yes

Example prompts to try

“Use Authentik to authentik admin system info.”
“Use Authentik to authentik admin version.”
“Use Authentik to authentik admin settings get.”

Frequently asked questions

Manage Authentik through AI assistants Confirm the tools offered by your installed version in the connected client. Tool availability and permissions depend on the server and account configuration.