# Casdoor (IAM) MCP for AI Agents AI Agent Connect

> Casdoor (IAM) MCP lets you manage your identity and access control system directly through your AI client. You can handle user provisioning, audit organizations, and manage app registrations without switching tabs. It turns your Casdoor instance into a conversational interface for your team's security and access needs.

## Overview
- **Category:** developer-tools
- **Price:** Free
- **Endpoint:** https://edge.vinkius.com/vk_preview_vVsHmkekiRLbXOJQdNe0SrKltnYFMZBeRtqJbZaS/ai-agent-connect
- **Tags:** iam, authentication, user-management, casdoor, access-control

## Description

Managing a complex identity and access management system usually means jumping between different dashboard tabs, hunting for the right organization, and manually editing user permissions. It's a chore that slows down developers and security teams who just want to get things done. This Connector changes that by letting you talk to your Casdoor instance instead of clicking through menus. You can ask your agent to create new users, check who has access to which application, or pull a report on your organization's hierarchy in seconds. When you host this on Vinkius, you get a central way to manage these identity workflows across any of your preferred AI clients. It handles the heavy lifting of identity infrastructure so you can focus on actual development or security audits. Instead of copy-pasting IDs or refreshing pages to see if a user was created, you just give a command and get a confirmation.

## Tools

### add_user
Create a new user in a specific organization. It requires the owner name and the new username.

### delete_user
Remove a user from an organization. You just need to provide the organization and the username.

### get_application
Fetch the details for a specific application. Use this to check configuration settings or status.

### get_organization
Retrieve specific details for an organization. It helps you understand the hierarchy of your IAM setup.

### get_user
Get a specific user's profile by their unique ID. Use this to pull detailed account information.

### list_applications
See all applications registered within an organization. This is great for auditing what's connected.

### list_organizations
List every organization in your Casdoor instance. Use this to get a high-level view of your IAM structure.

### list_users
See all users currently in an organization. It's the fastest way to audit a specific group.

### update_user
Modify an existing user's details. You need to provide the ID in a specific format to make changes.

### get_userinfo
Pull the profile of the currently authenticated user. Use this to verify permissions for the current session.

## Prompt Examples

**Prompt:** 
```
Show me all the organizations we have in Casdoor.
```

**Response:** 
```
I've pulled the list for you. You currently have: 

* **built-in**
* **marketing-dept**
* **engineering-team**

Would you like to see the users for any of these?
```

**Prompt:** 
```
Who is the user 'built-in/admin'?
```

**Response:** 
```
Fetching 'built-in/admin' now... That user is currently active. Here are the details:

| Attribute | Value |
| :--- | :--- |
| **Display Name** | System Administrator |
| **Email** | admin@example.com |
| **Status** | Active |
```

**Prompt:** 
```
Create a new user named 'dev_user' in the 'engineering' organization.
```

**Response:** 
```
Done. I've created 'dev_user' in the 'engineering' organization. 

Would you like to set a display name or an email address for them now?
```

## Capabilities

### Create and delete users
Add or remove users from specific organizations using simple commands.

### Audit organization structures
List and fetch details for your entire IAM hierarchy.

### Manage app registrations
Query and manage applications registered within your instance.

### Verify current session identity
Instantly retrieve the profile of the currently authenticated user.

### Update user profiles
Modify existing user details using their unique ID.

## Use Cases

### Rapid Employee Onboarding
An HR manager asks the agent to create 5 new users in the 'Engineering' org using add_user to get people into the system immediately.

### Security Compliance Audit
A security pro uses list_applications to find every app connected to the 'Marketing' org to ensure no unauthorized tools are active.

### Permission Debugging
A dev uses get_userinfo to see if their current session actually has the right permissions for a specific task while they are testing a feature.

### IAM Hierarchy Mapping
An admin uses list_organizations to map out the current hierarchy before moving to a new setup or restructuring the company.

## Benefits

- Faster user provisioning: Use add_user to create accounts in seconds instead of filling out web forms.
- Easier org audits: Quickly view your entire structure using list_organizations and get_organization.
- Better app oversight: Use list_applications to keep a clear count of every app registered in your instance.
- Instant permission checks: Use get_userinfo to verify exactly what the current user can do right now.
- Reduced context switching: Handle all your IAM tasks inside your IDE or chat window without leaving your work.

## How It Works

The bottom line is you get a conversational interface for your entire Casdoor identity infrastructure.

1. Subscribe to the Casdoor (IAM) MCP on Vinkius.
2. Input your Casdoor Endpoint, Client ID, and Client Secret.
3. Use your AI client to start managing users and permissions.

## Frequently Asked Questions

**What does the Casdoor (IAM) MCP actually do?**
It lets you manage your identity and access control system using natural language. You can create users, check organization details, and manage your apps through an AI client.

**Can I use Casdoor (IAM) to manage multiple organizations?**
Yes, you can list all organizations and fetch specific details for any of them to keep your IAM hierarchy organized.

**How do I use Casdoor (IAM) for security audits?**
You can use it to quickly list all applications or users within a specific organization to verify compliance and permissions.

**Does Casdoor (IAM) support user updates?**
Yes, you can update specific user profiles using their ID, making it easy to change details without using the web dashboard.

**Can the Casdoor (IAM) MCP see who I am?**
Yes, it can retrieve the profile of the currently authenticated user so you can verify permissions instantly.

**Is the Casdoor (IAM) MCP safe for production?**
It uses your existing Casdoor credentials to perform actions, so it follows your existing security rules and permissions.

**How do I list all users belonging to a specific organization?**
Use the `list_users` tool and provide the organization name in the 'owner' parameter. The agent will return a list of all users registered under that organization.

**What format should I use to fetch a specific user's details?**
When using the `get_user` tool, the ID must be formatted as `/`. For example, to find user 'alice' in the 'built-in' organization, use 'built-in/alice'.

**Can I manage applications and organizations as well?**
Yes. You can use `list_organizations` and `get_organization` to manage your hierarchy, and `list_applications` or `get_application` to inspect app-specific configurations.