# Corbado MCP for AI Agents AI Agent Connect

> Corbado lets you manage your entire identity and access infrastructure directly through your AI agent. You can handle user lifecycles, manage login identifiers like emails or phone numbers, and orchestrate passkey flows without switching tabs. It's a direct line to your Corbado project for managing security-sensitive tasks like session revocation and SSO monitoring.

## Overview
- **Category:** developer-tools
- **Price:** Free
- **Endpoint:** https://edge.vinkius.com/vk_preview_cHk0D4YfADZ2i2Grliu9mwrUqPETxEiGNWTXlA0j/ai-agent-connect
- **Tags:** passkeys, authentication, user-management, identity-provider, passwordless

## Description

This Connector connects your Corbado project to your AI agent so you can handle identity management tasks using plain English. Instead of hunting through a dashboard to find a specific user's status or manually revoking a session, you can just tell your agent to do it. You can create new users, update their login identifiers, and kick them off active sessions instantly. If you're dealing with complex auth flows like SSO or passkey registrations, this Connector lets you monitor those processes and initialize them on the fly. It also gives you quick access to developer essentials like JWKS and asset links. It's one of the many tools available in the Vinkius catalog that turns manual security operations into simple conversations. You get to move faster because you're no longer tethered to a web UI for every minor account change or security check.

## Tools

### complete_auth_process
Finish a pending authentication sequence. This is useful for finalizing user logins after they meet all requirements.

### create_connect_token
Generate a new ConnectToken for your application. This helps in managing specific connection permissions.

### create_identifier
Add a new login identifier like an email or phone number to a user. This is how you set up multiple ways for a user to sign in.

### create_user
Create a new user account in your Corbado project. Use this to set up new profiles quickly.

### delete_connect_token
Remove an existing ConnectToken from the system. This is necessary for cleaning up old connection data.

### delete_identifier
Remove a specific login identifier from a user profile. Use this when a user wants to remove a secondary login method.

### delete_me
Delete the account of the currently logged-in user. This is a quick way to handle self-service account deletion.

### delete_user
Remove a user account from your project. This helps in cleaning up your database or handling account closures.

### finish_connect_login
Finalize a Connect login attempt. This completes the handshake for connection-based logins.

### finish_identifier_verify
Complete the verification of a user's login identifier. This is the final step in confirming a user's identity.

### finish_passkey_append
Complete the process of adding a new passkey. This is used when a user successfully registers a new hardware key.

### finish_passkey_login
Finalize a login attempt using a passkey. This confirms the user has successfully authenticated via a hardware key.

### finish_sso
Complete a SAML2 SSO authentication flow. This is the final step for enterprise login processes.

### get_apple_app_site_association
Retrieve the Apple App Site Association data. This is useful for configuring universal links in your app.

### get_assetlinks
Retrieve the Asset Links for your project. Use this to verify your app's connection to your web domain.

### get_auth_process
Get the details of a specific authentication process. This helps you see where a user is currently stuck in the flow.

### get_jwks
Retrieve your JSON Web Key Set. This is necessary for verifying JWTs in your backend.

### get_me
Get details about the currently authenticated user. This is a quick way for your agent to know who is currently active.

### get_user
Retrieve full details for a specific user. Use this to see account status, roles, and other profile data.

### init_auth_process
Start a new authentication process. This is the first step for starting a login or signup flow.

### init_connect_login
Begin a Connect login sequence. This initializes the connection-based authentication.

### init_login
Start a standard login process. Use this to begin the primary authentication flow for your users.

### init_signup
Start a new user registration flow. This kicks off the signup process for new customers.

### list_connect_passkeys
See all passkeys associated with Connect. This helps you audit hardware key registrations.

### list_connect_tokens
List all active ConnectTokens. Use this to see which connections are currently active.

### list_identifiers
See every login identifier across your project. This is great for auditing how users are identifying themselves.

### list_sessions
See a list of all currently active user sessions. Use this to monitor live activity on your platform.

### list_users
See all users in your project. This is the primary way to audit your user base.

### logout_me
Log out the current user session. This is a simple way to end the current authenticated session.

### refresh_me
Refresh the current user's session. Use this to get a new token without requiring a full login.

### reset_auth_process
Restart an authentication process. This is useful if a user gets stuck in a loop or an error occurs.

### revoke_session
End a specific user session. Use this to instantly kick a user off your app for security reasons.

### start_passkey_append
Start the process of adding a new passkey. Use this to begin the hardware key registration.

### start_passkey_login
Begin a login attempt using a passkey. This is the first step for passwordless authentication.

### start_sso
Begin a SAML2 SSO authentication flow. This is the first step for enterprise logins.

### update_auth_identifier
Update a specific identifier within an auth process. This helps modify details during an active flow.

### update_identifier
Change a login identifier for a user. Use this to update an email or phone number that is already on file.

### update_me
Update the profile information for the current user. This is how you modify your own account details.

### skip_auth_block
Bypass a specific authentication block. This is useful for internal tools or specific trusted flows.

### start_connect_login
Begin the Connect login flow. This is the first step for connection-based authentication.

### start_identifier_verify
Start the process of verifying a user's identifier. This is the first step in confirming an email or phone number.

### update_user
Update the profile information for a specific user. Use this to change names, roles, or other profile data.

### verify_signed_data
Verify that signed passkey data is valid. This is a security check for passkey authentication.

## Prompt Examples

**Prompt:** 
```
Find all active sessions for user usr-9988.
```

**Response:** 
```
I've checked the active sessions for user **usr-9988**. Here is what I found:

| Session ID | IP Address | Last Active |
| :--- | :--- | :--- |
| `sess_7721` | 192.168.1.45 | 2 minutes ago |
| `sess_9902` | 10.0.0.12 | 1 hour ago |

Would you like me to revoke any of these sessions?
```

**Prompt:** 
```
Create a new user for a beta tester named 'Alex' with the email 'alex@test.com'.
```

**Response:** 
```
I've created a new user for **Alex**.

*   **Name:** Alex Vance
*   **Email:** alex@test.com
*   **Status:** Pending Verification

I've also initialized the signup flow for them. Would you like me to send a verification link?
```

**Prompt:** 
```
Give me the JWKS for our project so I can check the keys.
```

**Response:** 
```
Here are the current **JWKS** keys for your Corbado project:

```json
{
  "keys": [
    {
      "kty": "RS256",
      "n": "...",
      "e": "AQAB",
      "use": "sig",
      "alg": "RS256"
    }
  ]
}
```
Let me know if you need any other developer assets.
```

## Capabilities

### Revoke active sessions
Instantly end user sessions to secure your app during a security incident.

### Manage user lifecycles
Create, update, and delete user accounts using natural language commands.

### Orchestrate passkeys
Initiate and finalize passkey registration and login flows for passwordless auth.

### Monitor auth processes
Track the status of complex authentication flows like SSO and identifier verification.

### Audit login identifiers
List and manage various login methods like emails, phone numbers, and usernames.

### Fetch developer assets
Retrieve JWKS, asset links, and site associations directly for your integration.

## Use Cases

### Rapid security incident response
A security engineer sees a suspicious login and asks their agent to use `revoke_session` on the specific user ID to lock them out immediately.

### Support ticket resolution
A customer can't log in. A support agent asks the AI to `list_identifiers` for the user to see if their email or phone number is verified.

### Automated user onboarding
A product manager asks the agent to `create_user` for a new beta tester and then `init_signup` to get them started on the platform.

### Real-time auth debugging
A backend dev is seeing auth errors. They ask the agent to `get_auth_process` to see exactly where the flow is breaking.

## Benefits

- Instantly revoke sessions using `revoke_session` to stop unauthorized access without manual dashboard clicks.
- Manage user lifecycles by using `create_user` and `delete_user` to handle account changes via natural language.
- Simplify passkey management by using `start_passkey_append` and `finish_passkey_append` to automate hardware key registration.
- Audit your identity infrastructure quickly with `list_users` and `list_sessions` to see real-time activity.
- Speed up developer workflows by fetching `get_jwks` and `get_assetlinks` without leaving your IDE.

## How It Works

The bottom line is that it turns your identity infrastructure into a conversational interface.

1. Subscribe to the Corbado MCP on Vinkius.
2. Enter your Corbado Project ID, API Secret, and Backend URL.
3. Start asking your agent to manage users, sessions, or auth flows.

## Frequently Asked Questions

**Can I use Corbado MCP to kick users off my app?**
Yes, you can ask your agent to list active sessions and then revoke specific ones instantly. This is great for responding to security alerts or support requests to end a session.

**How does Corbado MCP help with passkey registration?**
It allows your agent to manage the entire passkey flow. You can ask it to start a new registration, finish the append process, or list existing passkeys for a user.

**Can the Corbado MCP manage my SSO users?**
Yes, it can initialize and monitor complex authentication processes, including SAML2 SSO flows, allowing you to manage enterprise logins via natural language.

**Is Corbado MCP safe for handling sensitive user data?**
It provides a controlled way to interact with your identity data. By using your agent, you can perform sensitive actions like session revocation without needing to expose your admin dashboard to everyone.

**How do I use Corbado MCP to audit my login identifiers?**
You can simply ask your agent to list all identifiers for a specific user or for the entire project. This helps you see how many people are using email, phone, or username logins.

**Can I use Corbado MCP to automate onboarding?**
Absolutely. You can ask your agent to create a user and initiate a signup process as part of a single request, making it much faster to get new people into your app.

**Can I list all users in my project to check their status?**
Yes! Use the `list_users` tool to retrieve a paginated list of all users in your project, including their current status (active, pending, or disabled).

**How do I add a new email or phone number to an existing user?**
You can use the `create_identifier` tool. Simply provide the `userID`, the type (email, phone, or username), and the value you want to add.

**Is it possible to revoke a user's session if their account is compromised?**
Absolutely. Use the `revoke_session` tool with the specific session ID to immediately terminate that user's access.