Companion repos: - 🧠 frontegg/coding-agent-skills — 27 trigger-activated skills that orchestrate these tools end-to-end - 🚀 frontegg/coding-agent-toolkit — one-command installer that wires both…
Frontegg MCP Server is an MCP project maintained in the frontegg/frontegg-mcp-server repository. The maintainer describes its purpose as “Companion repos: - 🧠 frontegg/coding-agent-skills — 27 trigger-activated skills that orchestrate these tools end-to-end - 🚀 frontegg/coding-agent-toolkit — one-command installer that wires both into your…”. Read the project documentation for the complete scope.
The documented npm package is @frontegg/frontegg-mcp-server. The configuration below comes from the maintainer’s example; adapt its paths and account values to your environment.
The example declares FRONTEGG_CLIENT_ID, FRONTEGG_API_KEY. Secret-looking values have been replaced with placeholders. Required and optional labels are shown only when the documentation states them.
Project documentation · Repository · Discovery listing. This profile records the public documentation checked on 2026-10-08.
Check the linked publisher documentation and your connected client's tool list. Names and availability can vary with the server version and account permissions.
| Tool | What it does |
|---|---|
| frontegg_user_mfa_enforce | (Vendor-token can't force MFA per-user; use frontegg_configure_mfa for tenant-wide.) |
| frontegg_auto | Start here. Full diagnosis + diffs in one pass. |
| frontegg_apply_diff | Apply diffs to disk. .bak backups. dry_run support. |
| analyze_repo | Run detectors. Return raw findings. |
| generate_diffs | Generate diffs for specific finding IDs. |
| list_rules | Browse the rule catalog. Auto-filtered to your SDK. |
| explain_finding | Explain a rule with troubleshooting steps. |
| read_resource | Read a project file or directory listing. |
| detect_android_issues | Android detector only. |
| detect_ios_issues | iOS detector only. |
| detect_common_issues | Cross-platform checks (env, credentials, base URL). |
| frontegg_feature_guide | Setup steps and pitfalls for: social login, passkeys, step-up, sessions, tokens, security rules, hosted vs embedded, multi-tenancy, entitlements, SMS login… |
| frontegg_login | OAuth 2.0 PKCE login against your Frontegg tenant. Optional — the API tools below use FRONTEGG_CLIENT_ID + FRONTEGG_SECRET env vars directly. |
| frontegg_configure_mfa | MFA policy (enforcement, remember device, expiration). |
| frontegg_configure_sessions | Session config. (Vendor-token PATCH may silently no-op on some tenants.) |
| frontegg_configure_sso | List or create a social login provider (google, github, microsoft, facebook, linkedin, gitlab, slack, twitter, apple). |
| frontegg_configure_identity | Auth config (strategy, token TTLs, signups, JWT claims, SameSite cookies). |
| frontegg_configure_password_policy | Password complexity (min length, history). |
| frontegg_configure_lockout_policy | Account lockout (threshold, duration). |
| frontegg_configure_security_rules | Read CAPTCHA / threat-protection policy. (Write needs real reCAPTCHA keys.) |
| frontegg_users_list | List users with filters. |
| frontegg_users_invite | Send an invitation email. |
| frontegg_audit_logs | Query auth events. |
| frontegg_tenants_list | List tenants. |
| frontegg_user_sessions_list | Active sessions for a user. |
| frontegg_user_session_revoke | Kick one session. |
| frontegg_user_sessions_revoke_all | Kick all sessions for a user (requires confirm: true). |
| frontegg_user_mfa_get | Read a user's MFA factors. |
| frontegg_user_mfa_reset | Admin-reset a user's MFA. |
| frontegg_plans_list | Subscription plans. |
| frontegg_plan_feature_attach | Attach a feature to a plan. (Write may no-op on vendor-token tenants.) |
| get-roles | List all roles in your tenant. |
| create-role | Create a new role with name + description. |
| update-role | Rename or re-describe an existing role. |
| delete-role | Delete a role. Irreversible. |
| set-permissions-to-role | Replace a role's full permission set. |
| get-permissions | List all permissions. |
| create-permission | Create a new permission (key + name + category). |
| update-permission | Rename/rephrase a permission. |
| delete-permission | Delete a permission. Cascades across roles. |
| set-permission-to-multiple-roles | Attach one permission to N roles at once. |
| set-permissions-classification | Classify permissions (PII/PHI/read-write). |
| get-permission-categories | List permission categories. |
| create-permission-category | Create a new category bucket. |
| update-permission-category | Rename a category. |
| delete-permission-category | Delete a category (only if empty). |
| get-users | Paginated list with filters (email, tenant, sort). |
| invite-user | Create + invite a user. Optional skipInviteEmail. |
| update-user | Edit user fields. |
| delete-user | Delete a user. |
| create-tenant | Create a new tenant. |
| update-tenant | Edit tenant fields. |
| delete-tenant | Delete a tenant. Irreversible. |
| get-applications | List standard applications. |
| get-users-for-application | List users assigned to an app. |
| assign-users-to-application | Assign users to an app. |
| get-agent-applications | List agent (LLM-actor) applications. |
| create-agent-application | Create a new agent application. |
| update-agent-application | Edit an agent application. |
| create-token | Create a vendor API token. |
| get-tokens | List vendor API tokens. |
| delete-token | Revoke a vendor API token. |
| create-client-credentials | Create a client-credentials token pair. |
| get-client-credentials | List client-credentials tokens. |
| update-client-credentials | Edit a client-credentials token's metadata. |
| delete-client-credentials | Revoke a client-credentials token. |
| get-user-access-tokens | List a user's access tokens. |
| create-user-access-token | Create a user access token. |
| delete-user-access-token | Revoke a user access token. |
| get-user-api-tokens | List a user's API tokens. |
| create-user-api-token | Create a user API token. |
| delete-user-api-token | Revoke a user API token. |
| get-vendor-integrations | List integrations your tenant publishes. |
| create-vendor-integration | Publish a new vendor integration (app-to-app or behalf-of-user). |
| update-vendor-integration | Edit a vendor integration. |
| delete-vendor-integration | Delete a vendor integration. |
| assign-agents-to-vendor-integration | Grant N agents access through the integration. |
| unassign-agents-from-vendor-integration | Revoke agents' access. |
| get-frontegg-integrations | List first-party connectors Frontegg ships (Slack, webhooks, etc.). |
| get-frontegg-integration | Inspect one connector's config schema + activation state. |
{
"mcpServers": {
"frontegg": {
"command": "npx",
"args": [
"--yes",
"@frontegg/frontegg-mcp-server"
],
"env": {
"FRONTEGG_CLIENT_ID": "your-client-id",
"FRONTEGG_API_KEY": "YOUR_FRONTEGG_API_KEY"
}
}
}
}From the project documentation. Replace placeholders and example paths before connecting.
| Variable | Description | Required |
|---|---|---|
| FRONTEGG_CLIENT_ID | Declared in the maintainer’s client configuration. | Yes |
| FRONTEGG_API_KEY | Declared in the maintainer’s client configuration. | Check documentation |
Queries the NIST National Vulnerability Database (NVD) via its API.
Scans projects for security vulnerabilities and automatically updates vulnerable dependencies using Trivy.
Search 1,032 verified smart contract vulnerability findings from Sherlock audits by pattern.
Remote MCP for A2A dependency inspector MCP, structured receipts, audit logs, and reviewer-ready evi
Remote MCP for A2A failure replay MCP, structured receipts, audit logs, and reviewer-ready evidence.
A comprehensive Model Context Protocol (MCP) server for ABP.IO framework with 48+ tools for application development, UI generation, and management