# Userfront MCP for AI Agents AI Agent Connect

> Userfront MCP gives your AI agent direct control over your identity platform. It handles user lifecycles, multi-tenant hierarchies, and session tracking. You can manage roles, tenants, and API keys using natural language instead of manual dashboard clicking.

## Overview
- **Category:** developer-tools
- **Price:** Free
- **Endpoint:** https://edge.vinkius.com/vk_preview_w9r69ZRzyPvwZSONS8FEtiiNvKrk1E6MFpJyL3W0/ai-agent-connect
- **Tags:** authentication, user-management, multi-tenancy, iam, identity-platform

## Description

Managing a multi-tenant identity platform usually means jumping between tabs to handle user invites, audit sessions, and tweak role permissions. It's a lot of context switching for a task that should be simple. This Connector lets your AI agent handle the heavy lifting of identity management directly. You can tell your agent to find specific users in a tenant, create child accounts for new clients, or check if a user's session is still active. It takes the friction out of administrative overhead. Because Vinkius hosts this Connector, you can connect it to your existing workflow and start managing your Userfront workspace through a single chat interface. Instead of hunting for the right button in a complex UI, you just describe the change you need.

## Tools

### get_jwt_available_claims
View the possible claims for your JWTs. This helps you understand what data you can include.

### get_jwt_format
Check the current format of your JWTs. Use this to verify your current authentication structure.

### get_tenant
View the details of a specific tenant. This retrieves the full record for a customer workspace.

### get_user_import
Check the current status of a user import. Use this to see if your bulk upload is finished.

### get_user
View the details of a specific user record. This shows the full profile of a single user.

### invalidate_api_key
Make an existing API key unusable immediately. This is a quick way to revoke access.

### invite_role
Invite a user into a specific role. Use this to grant permissions to new team members.

### list_jwt_keys
List all public JWT keys. Use this to verify your current security keys.

### list_roles
View all roles available in your application. This helps you see your current permission structure.

### list_tenant_roles
View all roles available at the tenant level. Use this to see permissions for specific clients.

### logout_user
Force a user to log out by invalidating their sessions. Use this for immediate account lockout.

### mark_user_active
Set a user's status to active. Use this to reactivate accounts that were previously disabled.

### process_user_import
Start the processing of a user import. Use this to trigger the bulk upload of your user data.

### set_tenant_user_roles
Assign roles to a user at the tenant level. Use this for scoped permissions within a client workspace.

### set_user_roles
Assign roles to a user at the application level. Use this for global permissions across your platform.

### update_jwt_format
Create or update a custom JWT format. Use this to customize your authentication tokens.

### update_tenant
Update the details of an existing tenant. Use this to modify customer workspace information.

### create_role
Create a new role for your application. This lets you define new permission sets easily.

### create_tenant_role
Create a role specifically for a tenant level. Use this to manage scoped permissions.

### create_tenant
Create a new tenant in your workspace. This is the first step for onboarding new clients.

### create_user_import
Start a new process to import users in bulk. Use this to prepare large data migrations.

### create_user
Create a new user record in your system. This adds a single user to your identity platform.

### delete_api_key
Remove an existing API key. This helps clean up old credentials and maintain security.

### delete_role
Remove a role from your application. Use this to prune old permission sets.

### delete_tenant
Delete a tenant and all its child accounts. This removes an entire organizational structure.

### delete_user_import
Remove a previous user import record. Use this to clean up failed or old migration tasks.

### find_users
Search for specific users within a tenant. Use this to find records based on custom filters.

### get_user_sessions
Retrieve all active sessions for a specific user. Use this to audit security and active logins.

### delete_user
Remove a user record from your system. Use this to delete accounts that are no longer needed.

### find_tenants
Search for tenants within your organization. This helps you locate specific customer workspaces.

### update_user
Update the information on a user record. Use this to modify names, emails, or other profile data.

### verify_api_key
Check if an API key is valid. Use this to troubleshoot integration issues.

### generate_link_credentials
Create credentials for custom authentication flows. This is useful for specialized login paths.

### get_jwks
Retrieve the JSON Web Key Set. Use this to check your current public keys.

### invite_user
Send an invitation to a user via their email. This automates the onboarding invitation process.

### list_api_keys
List all API keys of a specific type. Use this to audit all active integration credentials.

### create_api_key
Create a new API key for your application. Use this to give developers or services access.

### create_child_tenant
Create a child tenant under a parent. Use this to build complex organizational structures for clients.

### create_custom_jwt
Create a custom JWT access token for a user. Use this for specialized, one-off authentication needs.

### create_or_update_user
Create a new user or update an existing one in one go. Use this for efficient user record management.

## Prompt Examples

**Prompt:** 
```
I need to onboard a new company. Create a tenant named 'Acme Corp' and a child tenant for their 'Marketing' team.
```

**Response:** 
```
I've successfully created the new workspace for **Acme Corp**. 

**Details:**
- **Parent Tenant:** Acme Corp (ID: `ten_acme_99`) 
- **Child Tenant:** Marketing (ID: `ten_mkt_22`) 

Would you like me to invite any specific users to the Marketing team now?
```

**Prompt:** 
```
Can you find all users in the 'Beta' tenant who haven't logged in lately?
```

**Response:** 
```
Searching the Beta tenant... I found 3 users who haven't had an active session in over 30 days:

| Name | Email | Last Active |
| :--- | :--- | :--- |
| John Doe | john@example.com | 45 days ago |
| Jane Smith | jane@example.com | 62 days ago |
| Bob Vance | bob@vance.com | 90 days ago |

Should I mark any of these users as inactive?
```

**Prompt:** 
```
A user says they can't access their account. Check their active sessions and see if they are marked as active.
```

**Response:** 
```
Checking user status for 'Sarah Connor'...

**Status Check:**
- **Account Status:** Active ✅
- **Active Sessions:** 1
- **Last Session IP:** 192.168.1.45

Everything looks correct on the backend. You might want to ask her to try clearing her browser cache or checking her password.
```

## Capabilities

### Manage user lifecycles
Create, update, or delete user records using natural language.

### Handle multi-tenant structures
Build complex organizational hierarchies by creating child tenants.

### Audit active sessions
Check current user sessions to monitor security contexts.

### Control access levels
Assign and modify roles for users at both application and tenant levels.

### Automate bulk imports
Create and process user imports to move data in large batches.

### Manage API keys
List, create, and invalidate API keys to maintain platform security.

### Configure JWT settings
View and update JWT formats, claims, and public keys.

## Use Cases

### Onboarding a new enterprise client
Use create_tenant and create_child_tenant to set up a workspace for a new customer and their sub-departments.

### Resolving a locked account
Use mark_user_active and get_user_sessions to reactivate a user and clear old sessions after a security report.

### Security audit
Use list_jwt_keys and verify_api_key to ensure your auth credentials are up to date and valid.

### Bulk user migration
Use create_user_import and process_user_import to move users from a legacy system into your platform.

## Benefits

- Automate user provisioning with create_or_update_user to handle onboarding without manual data entry.
- Manage complex hierarchies by using create_child_tenant to organize your customers' workspaces.
- Secure your platform by checking active sessions with get_user_sessions to spot suspicious activity.
- Handle bulk migrations easily with process_user_import to move large groups of users at once.
- Control access instantly with set_user_roles to modify permissions without opening the admin console.
- Audit your security posture by using list_api_keys to keep track of all active credentials.

## How It Works

The bottom line is you get a conversational interface for your entire identity infrastructure.

1. Subscribe to the Userfront MCP on Vinkius.
2. Enter your Userfront API Key into your AI client.
3. Ask your agent to perform tasks like 'Invite a new user' or 'List all tenants'.

## Frequently Asked Questions

**How can I use the Userfront MCP to manage my customers?**
The Userfront MCP lets you manage customer accounts through natural language. You can create new tenants for clients, manage their specific roles, and handle their user invites without leaving your AI chat interface.

**Does the Userfront MCP support multi-tenant structures?**
Yes, it is designed for multi-tenancy. You can create parent and child tenants to build complex organizational hierarchies for your enterprise customers.

**Can I use the Userfront MCP to audit active user sessions?**
You can. The Connector allows your agent to retrieve active sessions for any user, making it easy to spot suspicious logins or help users with connection issues.

**How do I handle bulk user migrations with the Userfront MCP?**
You can use the Connector to create and process user imports. This allows your AI agent to move large groups of users into your platform in one go.

**Can the Userfront MCP manage my API keys and JWT settings?**
Yes, it provides tools to list, create, and invalidate API keys, as well as viewing and updating your JWT formats and claims.

**Is the Userfront MCP suitable for a customer support team?**
It's a great fit. Support teams can use it to quickly find user records, check account statuses, and reset permissions to resolve tickets much faster.

**Can I search for users based on specific criteria like email or custom data?**
Yes. Use the `find_users` tool. You can pass a filters object to match specific user attributes within your tenant.

**How do I manage sub-organizations or child accounts?**
Userfront supports multi-tenancy. You can use `create_child_tenant` to create a new tenant under an existing parent, allowing for complex organizational hierarchies.

**Is it possible to see if a user is currently logged in?**
You can use the `get_user_sessions` tool by providing a `userId`. This will return all active sessions associated with that specific user.