# Descope MCP for AI Agents AI Agent Connect > Descope (Auth Platform) lets you manage and test user authentication flows through your AI agent. You can initiate OTPs, Magic Links, and OAuth flows, or handle user management tasks like creating roles and permissions. It turns your agent into an identity management hub, making it easy to verify sessions and handle signups without manual dashboard navigation. ## Overview - **Category:** developer-tools - **Price:** Free - **Endpoint:** https://edge.vinkius.com/vk_preview_4cREanPNlXC6jrZrFK92D8TajPmC1caVSy6gbeQv/ai-agent-connect - **Tags:** authentication, otp, oauth, magic-link, user-management ## Description This Connector lets you manage and test user authentication flows through your AI agent. Instead of jumping between your terminal and the project dashboard to trigger emails or check if a session is active, you can just tell your agent to create a new user or send a magic link. It handles the heavy lifting of identity management, from sending SMS codes to verifying WebAuthn tokens. You'll find this useful when you're trying to verify that your auth logic holds up under various conditions. Because Vinkius hosts this Connector, you can connect it to your existing workspace and start interacting with your project immediately. It's about getting rid of the friction of manual auth testing and letting your AI agent do the tedious work of checking codes and managing permissions. You can verify tokens, handle OAuth flows, and manage tenants without ever opening a new tab. It turns a complex backend process into a simple conversation. Whether you're debugging a signup bug or setting up new permissions, this connection gives you direct control over your identity platform's core functions. It's the fastest way to verify that your login flows actually work before you push to production. ## Tools ### auth_enchantedlink_poll Poll for an Enchanted Link session. This checks if a user has finished the signup process. ### auth_exchange_access_key Exchange an access key for a session JWT. This is used for secure machine-to-machine communication. ### auth_oauth_authorize Start an OAuth flow. Use this to initiate logins from providers like Google or GitHub. ### auth_oauth_exchange Exchange an OAuth code for a session. This completes the login process after the provider redirects. ### auth_otp_signin_email Sign in a user via Email OTP. This allows users to log in using a code sent to their inbox. ### auth_otp_signup_email Sign up a user via Email OTP. This lets you create new accounts using a one-time code. ### auth_otp_signup_sms Sign up a user via SMS OTP. This initiates the mobile-based one-time password signup flow. ### auth_otp_signup_voice Sign up a user via Voice OTP. This triggers a phone call to deliver a verification code. ### auth_otp_verify_voice Verify a Voice OTP. This confirms the code the user heard during the verification call. ### auth_password_reset Reset a user password. This triggers the flow to help users regain access to their accounts. ### auth_password_signin Sign in a user with a password. This handles the standard login flow for your application. ### auth_password_signup Sign up a user with a password. This initiates the traditional account creation process. ### mgmt_search_users Search for users in your project. Use this to find specific accounts based on their login info. ### mgmt_update_user Update an existing user. This lets you modify account details or status on the fly. ### auth_webauthn_signin_finish Finish a WebAuthn sign in. This completes the authentication for passkeys and biometrics. ### auth_webauthn_signin_start Start a WebAuthn sign in. This initiates the biometric or passkey login flow. ### auth_webauthn_signup_finish Finish a WebAuthn sign up. This completes the registration for passkeys and biometrics. ### auth_webauthn_signup_start Start a WebAuthn sign up. This initiates the registration for passkeys and biometrics. ### mgmt_create_access_key Create a new M2M access key. This lets you manage machine-to-machine authentication without manual steps. ### mgmt_create_permission Create a new permission for your project. This helps you define what different roles can actually do. ### mgmt_create_role Create a new role in your system. Use this to group permissions for different user types. ### mgmt_create_tenant Create a new tenant for your project. This is essential for setting up multi-tenant architectures. ### mgmt_create_user Create a new user account. Use this to quickly add test users to your environment. ### mgmt_delete_user Delete a user from your project. This helps you clean up test data or remove inactive accounts. ### auth_enchantedlink_signup Sign up a user via an Enchanted Link. This provides a smooth, passwordless onboarding experience. ### auth_enchantedlink_verify Verify a token from an Enchanted Link. This confirms the user's identity during the signup flow. ### auth_get_keys Get public keys for session validation. Use this to retrieve the keys needed to verify tokens. ### mgmt_get_user Load a user by login ID. This lets you see the current status and details of a specific account. ### mgmt_list_tenants Load all tenants in your project. Use this to get a high-level view of your multi-tenant setup. ### auth_magiclink_signup_email Sign up a user via a Magic Link email. This initiates the passwordless signup flow for your users. ### auth_magiclink_verify Verify a Magic Link token. This confirms that the user has clicked the link in their email. ### auth_otp_verify_email Verify an Email OTP. Use this to confirm the code the user received in their email. ### auth_otp_verify_sms Verify an SMS OTP. This confirms the code sent to the user's mobile device. ## Prompt Examples **Prompt:** ``` Create a new user for the dev team. ``` **Response:** ``` I've created a new user for the dev team. Here are the details: - **Username**: dev_user - **ID**: 88291 - **Status**: Active You can now use this ID to test further permissions. ``` **Prompt:** ``` Send a magic link to test@example.com. ``` **Response:** ``` I've sent a Magic Link to test@example.com. The user can now click the link in their email to complete the signup process. ``` **Prompt:** ``` Verify the OTP for the new user. ``` **Response:** ``` Verifying the code... Success! The user is now authenticated and a session has been created. ``` ## Capabilities ### Trigger SMS or Email OTPs Send one-time passwords to users via multiple channels to verify their identity. ### Send Magic Links Initiate secure sign-up or sign-in links that bypass the need for passwords. ### Manage OAuth Flows Start and exchange authorization codes for active sessions with external providers. ### Create Roles and Permissions Define and assign specific access levels for different users in your project. ### Verify Session Tokens Check the validity of active sessions to ensure secure access to your app. ### Handle WebAuthn Signups Manage modern passkey and biometric authentication flows for your users. ## Use Cases ### Automating Signup Verification A QA engineer asks the agent to trigger a signup via SMS OTP and then verifies the success using `auth_otp_verify_sms`. ### Debugging Session JWTs A developer uses `auth_exchange_access_key` to generate a session token and then checks its validity with `auth_get_keys`. ### Rapid Tenant Setup A product manager asks the agent to create a new tenant and list all current ones using `mgmt_create_tenant` and `mgmt_list_tenants`. ### Permission Auditing A security engineer uses `mgmt_search_users` to find a specific account and then checks its permissions using `mgmt_create_permission`. ## Benefits - Skip the dashboard by using `mgmt_create_user` to add test accounts instantly from your chat. - Verify SMS and Email OTPs quickly with `auth_otp_verify_email` and `auth_otp_verify_sms` without manual checking. - Test OAuth flows from Google or other providers using `auth_oauth_authorize` to ensure your integrations work. - Manage complex permissions and roles with `mgmt_create_permission` and `mgmt_create_role` to keep your app secure. - Speed up your QA cycles by using `auth_magiclink_signup_email` to trigger and verify signups in seconds. - Handle modern security requirements like WebAuthn using `auth_webauthn_signup_start` to support passkeys. ## How It Works The bottom line is you get a direct chat interface to manage your entire identity stack. 1. Subscribe to this Connector via the Vinkius Marketplace. 2. Add your project ID and management key to your client configuration. 3. Ask your agent to perform actions like creating users or verifying OTP codes. ## Frequently Asked Questions **How do I use Descope MCP to test signups?** You can ask your agent to initiate signup flows using various methods like Magic Links or OTPs. The agent will trigger the request and let you know when the user is ready for the next step. **Can I manage my users with the Descope MCP?** Yes, you can create, search, and update users directly through your agent. This makes it much faster to manage test accounts or handle administrative tasks. **Does the Descope MCP support SMS verification?** It does. You can trigger SMS OTPs for signups and use the agent to verify those codes to complete the authentication process. **How do I handle OAuth with Descope?** The Connector allows your agent to start OAuth flows and exchange codes for sessions. This means you can test third-party logins like Google or GitHub through simple chat commands. **Can I check my tenant list using Descope?** Yes, you can ask your agent to list all tenants in your project. This is helpful for getting a quick overview of your multi-tenant environment. **Can I use this to manage permissions?** Absolutely. You can create new roles and permissions through the agent to define exactly what different types of users can do in your application. **How do I verify an email OTP code sent to a user?** Use the `auth_otp_verify_email` tool by providing the user's `loginId` (email) and the `code` they received. The agent will return the session details if the verification is successful. **Can I start a Google OAuth login flow using this server?** Yes. Use the `auth_oauth_authorize` tool with 'google' as the `provider` and specify your `redirectURL`. The agent will initiate the OAuth flow for you. **What is the purpose of the enchanted link polling tool?** The `auth_enchantedlink_poll` tool allows the agent to check the status of a pending enchanted link authentication using a `pendingRef`. It helps determine if the user has clicked the link and completed the session.