# FusionAuth MCP for AI Agents AI Agent Connect > FusionAuth MCP for AI agents. Manage your enterprise identity stack, handle user lifecycles, and configure authentication flows without switching tabs. Create users, manage application roles, and test MFA sequences through natural conversation. ## Overview - **Category:** developer-tools - **Price:** Free - **Endpoint:** https://edge.vinkius.com/vk_preview_n88RpsQgLrswuGIDJKcgeD4WMgPcnJ4URNIxyEQH/ai-agent-connect - **Tags:** auth, iam, user-management, single-sign-on, mfa ## Description Managing enterprise identity usually means jumping between browser tabs, copying IDs from one dashboard to another, and hunting for the right toggle to update a role or enable multi-factor authentication. It is a click-heavy process that slows down your team and creates room for human error. This Connector changes that by letting you handle these tasks through a conversation. You just tell your agent what needs to happen and it executes the commands across your FusionAuth instance. If you are tired of the manual overhead of identity management, having this in your Vinkius catalog makes it easy to keep your security posture tight without the friction of a complex UI. It turns a multi-step administrative process into a quick chat, allowing you to focus on actual security work instead of data entry. ## Tools ### get_system_configuration Retrieve the current System Configuration. ### create_group Create a new Group in your FusionAuth instance. ### create_lambda Create a new Lambda function within your identity stack. ### create_tenant Create a new Tenant for organizational separation. ### create_user Create a new User in FusionAuth. Pass the user object in the JSON body. ### create_webhook Create a new Webhook to trigger external actions. ### delete_api_key Delete an existing API Key from your configuration. ### delete_group Delete a Group from your FusionAuth instance. ### delete_lambda Delete a Lambda function from your identity stack. ### delete_tenant Delete a Tenant from your FusionAuth instance. ### delete_user Delete a User from your FusionAuth instance. ### delete_webhook Delete a Webhook from your identity stack. ### disable_mfa Disable MFA for a specific User. ### enable_mfa Enable MFA for a specific User. ### generate_mfa_secret Generate an MFA Secret for user authentication. ### get_api_key Retrieve an existing API Key from your configuration. ### list_application_roles Retrieve all Roles for a specific Application. ### list_applications Retrieve all Applications in your FusionAuth instance. ### get_group Retrieve a specific Group from your FusionAuth instance. ### get_identity_provider Retrieve a specific Identity Provider. ### list_identity_providers Retrieve all Identity Providers in your system. ### get_lambda Retrieve a specific Lambda function. ### get_system_health Retrieve the current System Health status. ### get_system_status Retrieve the current System Status. ### get_system_version Retrieve the current System Version. ### get_tenant Retrieve a specific Tenant from your instance. ### get_user Retrieve a User from FusionAuth by providing their unique identifier. ### get_webhook Retrieve a specific Webhook from your identity stack. ### idp_login Complete an External Identity Provider Login. ### issue_jwt Issue a new JWT for secure session management. ### login Authenticate a User into your FusionAuth system. ### mfa_login Complete a Multi-Factor Authentication Login sequence. ### patch_user Partially update an existing User's information. ### register_user Register a User for a specific Application. ### remove_group_member Remove a User from a specific Group. ### revoke_refresh_tokens Revoke active Refresh Tokens to terminate sessions. ### start_mfa Start a new MFA flow for a user. ### update_api_key Update an existing API Key in your configuration. ### update_group Update the details of an existing Group. ### update_lambda Update the configuration of a Lambda function. ### update_system_configuration Update the global System Configuration. ### update_user Update all details for an existing User. ### update_webhook Update the configuration of an existing Webhook. ### create_application Create a new Application in FusionAuth. You can optionally provide a specific applicationId. ### get_application Retrieve a specific Application from your list. ### refresh_jwt Refresh an existing JWT to extend a session. ### update_tenant Update the details of an existing Tenant. ### add_group_member Add a User to a specific Group. ### create_api_key Create a new API Key for your FusionAuth instance. ### create_application_role Create a new Application Role for granular access control. ## Prompt Examples **Prompt:** ``` Who are the users in our 'Engineering' group? ``` **Response:** ``` I've retrieved the members for the Engineering group. Here are the active users: | Name | Email | Status | | :--- | :--- | :--- | | **Alice Chen** | alice@company.com | Active | | **Bob Smith** | bob@company.com | Active | | **Charlie Day** | charlie@company.com | Pending | Would you like me to update the status for any of these users? ``` **Prompt:** ``` Create a new user named 'Jane Doe' with email jane@company.com. ``` **Response:** ``` I have successfully created the user **Jane Doe**. * **User ID:** `usr_9b12...` * **Email:** jane@company.com * **Status:** Active I can now assign roles to this user if you provide an application ID. ``` **Prompt:** ``` Check if the system is healthy right now. ``` **Response:** ``` I've checked the system health for you. **Current Status:** ✅ Healthy **System Version:** v2.4.1 **Uptime:** 14 days, 6 hours All identity providers are responding normally. ``` ## Capabilities ### Provision new users and groups Add new accounts to your system and organize them into groups with a single request. ### Manage application permissions View and modify roles for specific applications to control what your users can access. ### Test authentication flows Run login sequences and MFA checks to verify your security settings are working. ### Audit system health Check the status and configuration of your entire identity stack at any time. ### Manage tenants and webhooks Create and update organizational tenants and automated webhooks for custom integrations. ### Issue and refresh tokens Generate and renew JWT tokens to manage active sessions and secure access. ## Use Cases ### Rapid Security Audits A security lead asks the agent to find all users in a specific tenant and check their MFA status using get_user. ### Bulk User Onboarding An admin needs to create 10 new users with specific group memberships for a new hire cohort using create_user and add_group_member. ### Authentication Debugging A developer wants to see why a specific login is failing and asks the agent to check the system configuration. ### Automated Webhook Provisioning A project manager needs to create a new application and a corresponding webhook for a new internal tool using create_application and create_webhook. ## Benefits - Faster user onboarding by using create_user to set up accounts in seconds. - Granular access control by managing specific permissions with list_application_roles. - Easier troubleshooting with get_system_health to check your instance status. - Reduced friction for developers who can test logins using login and mfa_login. - Quicker incident response by using delete_user or revoke_refresh_tokens to lock down accounts. - Simplified app management by using list_applications to see your entire footprint. ## How It Works The bottom line is you get a conversational interface for your entire identity management stack. 1. Provide your FusionAuth URL and API Key to the Connector. 2. Connect your preferred AI client like Claude or Cursor. 3. Ask your agent to perform tasks like listing users or updating application roles. ## Frequently Asked Questions **Can I use FusionAuth MCP to manage users?** Yes. You can create, update, and delete users through your agent. It handles all the heavy lifting of navigating the identity stack for you. **How does FusionAuth MCP help with MFA?** It allows you to quickly enable, disable, or generate MFA secrets for any user. This is great for troubleshooting login issues or securing accounts quickly. **Can I use this to audit my applications?** Yes. You can ask your agent to list all applications and then drill down into specific roles and permissions to see who has access to what. **Does FusionAuth MCP support multi-tenancy?** It does. You can retrieve and manage different tenants, making it suitable for large organizations with multiple departments or clients. **Can my agent create webhooks for me?** Absolutely. You can request the creation of new webhooks to connect your identity events to other external tools and services. **How do I use FusionAuth MCP to test login flows?** You can ask your agent to perform actual login and MFA sequences. This lets you verify that your authentication rules are working as expected before you go live. **Can I search for a user using their username instead of an ID?** Yes! The `get_user` tool allows you to search by `username`, `email`, or `loginId` in addition to the `userId` UUID. **How do I list all the roles defined for a specific application?** Use the `list_application_roles` tool and provide the `applicationId`. It will return all roles like 'admin', 'user', or custom roles configured for that environment. **Is it possible to update only a few fields of a user without sending the whole object?** Yes, use the `patch_user` tool. It allows you to send a partial JSON body containing only the specific fields you wish to modify.