How to Use the Casdoor (IAM) MCP in OpenAI Agents SDK

Run secure user provisioning and org checks directly from OpenAI Agents SDK using this MCP Server.

See Vinkius in Action

Works with every AI agent you already use

…and any MCP-compatible client

MCP Servers - Free for Subscribers

Connect Casdoor (IAM) MCP to OpenAI Agents SDK

Create your Vinkius account to connect Casdoor (IAM) to OpenAI Agents SDK and route execution through our secure gateway. The platform manages server hosting, runtime updates, and security layers. Configuration requires no manual server provisioning.

GDPR Free for Subscribers

Setup Casdoor (IAM) with OpenAI Agents SDK

Ask AI about this MCP

ChatGPT

Claude

Perplexity

Automate User Provisioning via OpenAI Agents SDK

Your production agents can now provision users on the fly. By connecting this MCP Server to your OpenAI Agents SDK setup, your agent runs `add_user` to spin up accounts inside your designated Casdoor organizations. It grabs the exact parameters it needs and executes the call without you writing a single line of boilerplate API integration. When an account needs to go, the agent calls `delete_user` to clean up your directory instantly. You get clean, automated identity management handled entirely by your agentic workflows while OpenAI's tracing dashboard logs every single execution.

Guardrail-Protected Directory Queries

Fetching directory data shouldn't expose your entire user base to rogue agent decisions. This setup lets you query specific profiles using `get_user` or check the current authenticated context via `get_userinfo`. OpenAI's built-in guardrails validate these actions against your safety policies before the agent actually hits your Casdoor database. If an agent tries to pull records it shouldn't access, the SDK blocks the call. This gives you safe, read-heavy operations where `list_users` only runs when your system's strict execution constraints are fully met.

Multi-Agent App and Org Management

Complex IAM tasks require specialized agents passing context back and forth. One agent can check your setup using `list_organizations` and `list_applications`, then hand off the task to a provisioner agent to modify settings. This MCP setup keeps your identity architecture organized. Updates to existing profiles are handled through `update_user` with the required organization-to-username formatting. Your agents coordinate these updates across different applications using `get_application` to ensure configuration parity without human intervention.

Setup guide

Set up Casdoor (IAM) MCP in OpenAI Agents SDK

Prerequisites

Python 3.10+ installed
openai-agents package (pip install openai-agents)
Active Vinkius subscription with a valid endpoint token

1

Install the SDK

Run pip install openai-agents to install the OpenAI Agents SDK. The MCP integration is built-in — no extra dependencies needed.
2

Connect via SSE transport

Use MCPServerSse with your Vinkius endpoint URL. Replace [YOUR_TOKEN_HERE] with your token from cloud.vinkius.com. The SDK auto-discovers all Casdoor (IAM) tools at runtime.
3

Create your Agent

Pass the MCP to Agent(mcp_servers=[server]). The agent receives Casdoor (IAM) tools as native definitions — JSON schemas resolve automatically.
4

Run the agent

Call Runner.run(agent, prompt) to execute. The agent invokes the appropriate Casdoor (IAM) tools and returns structured results. Copy the full example on the right to get started.

agent.py

import asyncio
from agents import Agent, Runner
from agents.mcp import MCPServerSse

async def main():
    async with MCPServerSse(
        url="https://edge.vinkius.com/[YOUR_TOKEN_HERE]/mcp"
    ) as server:
        agent = Agent(
            name="Casdoor (IAM) Agent",
            instructions="You have access to Casdoor (IAM) tools.",
            mcp_servers=[server],
        )
        result = await Runner.run(agent, "List recent transactions")
        print(result.final_output)

asyncio.run(main())

Get your connection token →

Independent Platform Disclaimer: Vinkius is an independent platform and is not affiliated with, endorsed by, sponsored by, verified by, or otherwise authorized by Casdoor. All third-party trademarks, logos, and brand names are the property of their respective owners. Their use on this website is strictly for informational purposes to identify service compatibility and interoperability.

Why Choose Vinkius

Vinkius connects your tools to AI with real-time monitoring and automatic cost savings — all from one dashboard.

Connect Casdoor (IAM) now

Real-time monitoring

Live

visibility into every interaction

Connect your favorite tools to your AI and see exactly what's happening — every request, every response, in real time.

Built-in savings

60%

lower AI costs

Vinkius compresses data between your apps and your AI automatically. Lower bills every month — no configuration required.

Single dashboard

One

place for every integration

Every tool your AI connects to, managed from a single screen. One account, complete control.

Common questions about Casdoor (IAM) MCP in OpenAI Agents SDK

You configure the connection using MCPServerStreamableHttp pointing to your Vinkius endpoint token. The SDK handles the transport layer natively, while Vinkius manages the underlying credentials so your agent can execute tools like list_users securely.

Yes, you can restrict tool discovery during initialization or use OpenAI's built-in guardrails to block specific tools. For instance, you can allow read-only tools like get_userinfo while completely blocking destructive operations like delete_user for specific agent roles.

The run fails during the tool execution phase, and the error logs directly to your OpenAI tracing dashboard. This MCP Server requires the ID parameter to be formatted as organization/username, which your agent can correct by first querying get_user to verify the structure.

Set cacheToolsList=True when initializing your server configuration in Python. This prevents the SDK from repeatedly querying the schema of tools like get_application on every turn, reducing latency significantly.

All identity data, including user profiles and organization configs, passes through an isolated V8 sandbox on Vinkius. No credentials or user records are ever stored on our servers, ensuring your IAM data remains strictly between your OpenAI agent and your Casdoor instance.

Use it with your favorite AI tools

Connect this server to Cursor, Claude, VS Code, and more.

OpenAI Agents SDK sdk-python

Google ADK sdk-python

Pydantic AI sdk-python

Vercel AI SDK sdk-typescript