# PropelAuth MCP for AI Agents AI Agent Connect > PropelAuth MCP for AI Agents manages B2B identities, organizations, and API keys via natural language. It lets you handle user provisioning, role assignments, and SAML configurations directly through your AI client without leaving your current workspace. ## Overview - **Category:** developer-tools - **Price:** Free - **Endpoint:** https://edge.vinkius.com/vk_preview_nF42WWTFwfKu6SlqyVOaUBc5QBnNy3QhbSk9Ogkg/ai-agent-connect - **Tags:** b2b-auth, user-management, saas-infrastructure, multi-tenancy, api-security ## Description PropelAuth lets you handle the heavy lifting of B2B identity management without constantly switching tabs. If you're tired of manually creating organizations or hunting down user IDs to update roles, this Connector puts those actions into your agent's hands. You can manage your entire multi-tenant setup, from provisioning new customers to auditing API key usage, just by asking. It's built for the moments when you need to act fast, like when a customer is waiting on a support call or a developer needs to verify a SAML connection. By adding this to the Vinkius catalog, you get a direct line to your PropelAuth dashboard, making it easy to keep your user base organized and secure. You can handle complex multi-tenant access structures programmatically, ensuring that your organization's security stays tight while your team moves quickly. ## Tools ### get_custom_role_mappings Fetch your custom role mappings. This lets you see how roles are distributed across your different organizations. ### get_oauth_tokens Fetch OAuth tokens for a specific user. Use this to troubleshoot authentication issues for your customers. ### get_org Fetch the details of an organization by its ID. This lets you quickly inspect the settings of a specific B2B tenant. ### get_saml_sp_metadata Fetch SAML Service Provider metadata for an organization. This is required for customers to complete their SSO setup. ### get_user_by_email Find a user's account using their email address. This is the fastest way to look up a customer during a support call. ### invite_user_to_org Send an email invitation to a user to join an organization. This automates the request for new team members to join a tenant. ### remove_user_from_org Remove a user from an organization. Use this to manage permissions when a team member leaves a specific company. ### set_oidc_idp_metadata Set OIDC Identity Provider metadata. This helps you configure modern open standards for your enterprise customers. ### set_saml_idp_metadata Set SAML Identity Provider metadata. Use this to configure the details for your customers' identity providers. ### subscribe_org_to_mapping Subscribe an organization to a custom role mapping. This ensures that new users automatically get the correct permissions. ### update_user_password Update a user's password. Use this to manually set a new password for a customer who is having trouble logging in. ### update_user Update the metadata for a user profile. This lets you keep your user records current as your customers' info changes. ### enable_user Unblock a user who was previously disabled. This helps you restore access for users who were temporarily suspended. ### get_active_api_keys Fetch a list of all active end-user API keys. Use this to monitor which keys are currently in use across your platform. ### get_api_key_usage Get usage statistics for your API keys. This helps you monitor for unusual activity or high-volume usage. ### get_user_by_username Find a user's account using their username. This helps you identify users who aren't using an email address. ### get_user Fetch a user's profile by their unique ID. Use this to see all metadata associated with a specific account. ### get_users_in_org Fetch a list of all users belonging to a specific organization. This helps you audit who has access to a B2B tenant. ### go_live_saml Set a SAML connection to live status. Use this to activate enterprise login after the configuration is verified. ### logout_all_user_sessions Force a user to log out of all active sessions. Use this immediately if you suspect a user's account has been compromised. ### allow_saml Turn SAML authentication on or off for a specific organization. This lets you control which tenants have access to enterprise login methods. ### change_user_role_in_org Update a user's role within a specific organization. This helps you manage permissions for different members of a B2B tenant. ### clear_user_password Wipe a user's current password from the system. Use this when a user is locked out and needs a fresh start. ### create_access_token Generate an access token for testing or machine to machine use. This is useful for verifying backend connections. ### create_api_key Create a new API key for an end-user. This allows your customers to integrate with your platform securely. ### create_magic_link Generate a magic link for a user. This provides a way for users to log in without needing a traditional password. ### create_org Create a new organization in your PropelAuth account. This is the first step in onboarding a new B2B customer. ### create_saml_connection_link Create a SAML setup link for an organization. Use this to give your customers a way to configure their enterprise SSO. ### create_user Add a new user to your PropelAuth account. This automates the initial onboarding process for your platform. ### delete_api_key Remove an end-user API key from the system. This is essential for revoking access when a key is compromised. ### delete_org Delete an organization from your account. Use this when a customer cancels their subscription or leaves the platform. ### delete_user Remove a user from your PropelAuth account. This helps you keep your user list clean and up to date. ### disable_user Block a user from accessing your platform. Use this to quickly suspend accounts during security incidents. ### migrate_user Migrate an existing user into PropelAuth. This helps you move legacy users into your modern identity system. ### query_orgs Query your organizations to find specific tenants. This lets you filter through your customer base to find what you need. ### query_users Query and list users with pagination and filtering. Use this to perform bulk searches or audits of your user base. ### refresh_provider_token Refresh an OAuth provider token for a user. This ensures that third-party connections remain active and valid. ### update_api_key Update an existing end-user API key. Use this to rotate keys or update permissions without creating new ones. ### update_org Update the details of an existing organization. This lets you change the name or settings of a B2B tenant. ### update_user_email Update a user's email address. This is a common request from users who want to change their primary contact info. ### add_user_to_org Add a user to an organization immediately. This bypasses the invite flow for instant access to a B2B tenant. ### validate_api_key Validate an end-user API key. Use this to check if a key is still active and valid before allowing a request. ## Prompt Examples **Prompt:** ``` Find the user with email 'alex@company.com' and tell me which organizations they belong to. ``` **Response:** ``` I've located the user (ID: user_98765). They are currently a member of **Acme Corp** (ID: org_123) with the role of **Admin** and **Beta Testers** (ID: org_456) as a **Member**. ``` **Prompt:** ``` Create a new organization called 'Stark Industries' and add 'user_555' as an Admin. ``` **Response:** ``` Organization **Stark Industries** has been created with ID `org_stark_001`. I have also successfully added user `user_555` to this organization with the **Admin** role. ``` **Prompt:** ``` List all active API keys for organization 'org_123' and check if any have high usage. ``` **Response:** ``` I found 3 active API keys for 'org_123'. | Key ID | Status | Usage (24h) | | :--- | :--- | :--- | | `pk_live_abc` | Active | **1,250 calls** | | `pk_live_def` | Active | 45 calls | | `pk_live_ghi` | Active | 12 calls | Key `pk_live_abc` shows significantly higher activity than the others. ``` ## Capabilities ### Provision new users Add new accounts to your platform using email or username details. ### Manage organization memberships Add, remove, or invite users to specific B2B tenants and organizations. ### Control SAML connections Enable enterprise login methods and generate setup links for your customers. ### Audit API keys Track usage statistics and manage the lifecycle of end-user keys. ### Handle password resets Clear or update user passwords to help customers who are locked out. ## Use Cases ### Rapid Customer Onboarding A new B2B customer signs up. Instead of manually creating accounts, you ask your agent to use create_org and then create_user to get them started. ### Emergency Account Lockdown A user reports a stolen device. You tell your agent to use logout_all_user_sessions and disable_user to secure the account instantly. ### Enterprise SSO Configuration A large client needs SAML. You use create_saml_connection_link to generate their setup info and go_live_saml to activate it once they finish. ### Support Ticket Resolution A customer can't log in. You use get_user_by_email to find them and clear_user_password so they can reset their credentials. ### Security Audit Cleanup You need to check for old keys. You ask your agent to use get_active_api_keys and delete_api_key to clean up your production environment. ## Benefits - Faster customer onboarding by using create_user and invite_user_to_org to get new tenants live in seconds. - Improved security by using get_active_api_keys and disable_user to quickly audit and revoke access during incidents. - Simplified enterprise setup by using create_saml_connection_link and go_live_saml to handle SSO requests without manual config. - Easier role management by using change_user_role_in_org and subscribe_org_to_mapping to handle complex B2B permissions. - Faster support resolution by using clear_user_password and get_user_by_email to help locked-out customers immediately. - Better data integrity by using update_user and migrate_user to keep your identity records accurate and modern. ## How It Works The bottom line is you get a natural language interface for your entire B2B identity stack. 1. Subscribe to the PropelAuth MCP and provide your API Key and Auth URL. 2. Connect the Connector to your preferred AI client like Claude or Cursor. 3. Ask your agent to perform tasks like creating users or checking org status. ## Frequently Asked Questions **Can I use PropelAuth MCP to manage my B2B users?** Yes, this Connector allows your AI agent to create, fetch, update, and delete users in your PropelAuth account. It makes it easy to manage your user base using natural language. **How do I use PropelAuth MCP for SAML setup?** You can use it to generate unique SAML connection links for your customers and toggle the live status of those connections. This helps you handle enterprise SSO requests much faster. **Can PropelAuth MCP help with customer support tasks?** Definitely. You can use it to look up users by email, clear passwords for locked-out customers, and quickly verify organization details during a support call. **Does PropelAuth MCP support API key management?** Yes, it lets you create, validate, and delete API keys. You can also fetch usage statistics to monitor how your customers are interacting with your platform. **Can I use PropelAuth MCP to automate user offboarding?** Yes, you can tell your agent to disable users or remove them from specific organizations instantly. This is a great way to automate the offboarding process for departing team members. **Is PropelAuth MCP suitable for multi-tenant SaaS?** It is specifically built for multi-tenant environments. It handles the complexities of managing different organizations, roles, and permissions for your various B2B customers. **Can I find a user's details using only their email address?** Yes. You can use the `get_user_by_email` tool. Simply provide the email address, and the agent will return the user's ID, metadata, and organization memberships. **How do I add an existing user to a specific organization?** Use the `add_user_to_org` tool. You will need the `user_id`, the `org_id`, and the `role` you wish to assign to them (e.g., 'Admin' or 'Member'). **Is it possible to monitor how many times an API key has been used?** Yes. The `get_api_key_usage` tool allows you to retrieve usage statistics for a specific API key, helping you track activity and enforce limits.