How to Use the Duo Security (Two-Factor Authentication API) MCP in Claude

Q: How do I configure the Duo Security (Two-Factor Authentication API) MCP Server in Claude Desktop?

Open your claudedesktopconfig.json file and add the server under the mcpServers key. Pass your Duo integration key, secret key, and API hostname as environment variables. Once you restart Claude Desktop, you will see the hammer icon indicating the 18 Duo tools are ready to use.

Q: Can I trigger a live push notification using Duo Security (Two-Factor Authentication API) in Claude Desktop?

Yes. Your agent uses the auth tool to send an immediate push challenge, SMS, or phone call to a user. Claude Desktop then monitors the response using authstatus until the user approves or rejects the request.

Trigger Duo 2FA challenges and manage user provisioning directly from your Claude Desktop chat.

See Vinkius in Action

Works with every AI agent you already use

…and any MCP-compatible client

MCP Servers - Free for Subscribers

Connect Duo Security (Two-Factor Authentication API) MCP to Claude Desktop

Create your Vinkius account to connect Duo Security (Two-Factor Authentication API) to Claude Desktop and route execution through our secure gateway. The platform manages server hosting, runtime updates, and security layers. Configuration requires no manual server provisioning.

GDPR Free for Subscribers

Setup Duo Security (Two-Factor Authentication API) with Claude Desktop

Ask AI about this MCP

ChatGPT

Claude

Perplexity

Run Duo 2FA checks locally inside Claude Desktop

Stop leaving your terminal to verify identity states. This MCP Server lets Claude Desktop talk directly to your Duo Admin API. Your agent can run `ping_auth` to check connection health or trigger an immediate push notification via `auth` right when you need to verify a user. You get real-time feedback in your chat window. The agent polls the status using `auth_status` to confirm if the push was approved or denied, giving you a deterministic security log without switching windows.

Bulk provision Duo users from your local files

Claude Desktop reads your local onboarding CSV files and calls `bulk_create_users` via the MCP Server to spin up to 100 accounts in one shot. No more manual entry in the Duo Admin Panel. It saves hours of mindless clicking during corporate onboarding cycles. If a user needs immediate adjustments, your agent runs `modify_user` or `preauth` to check their active authentication factors. Everything happens locally via the secure stdio transport, meaning your Duo API secret keys stay on your machine.

Audit Duo telephony credits and billing in Claude Desktop

Keep tabs on authentication costs without logging into the Duo MSP console. Ask your agent to pull your current usage statistics with `get_telephony_credits` or check your current tier using `get_billing_edition` directly from your workspace. You can even manage sub-accounts on the fly. The agent calls `list_accounts` to show your client breakdown and lets you adjust limits with `set_telephony_credits` without opening a browser.

Setup guide

Set up Duo Security (Two-Factor Authentication API) MCP in Claude Web or Desktop

1

Open Claude Settings

Go to claude.ai, click your profile icon, then navigate to Customize → Connectors.
2

Add Custom Connector

Click the "+" button and select Add custom connector. Paste your Vinkius endpoint URL: https://edge.vinkius.com/[YOUR_TOKEN_HERE]/mcp Replace [YOUR_TOKEN_HERE] with your token from cloud.vinkius.com. For OAuth-protected servers, expand Advanced settings to add credentials.
3

Start a conversation

Open a new chat. The Duo Security (Two-Factor Authentication API) MCP tools are available immediately — no restart needed.

Endpoint URL

https://edge.vinkius.com/[YOUR_TOKEN_HERE]/mcp

No configuration file needed — paste the URL directly in the Claude web interface.

Available on Free (1 connector), Pro, Max, Team, and Enterprise plans.

Prerequisites

Claude Desktop installed (macOS or Windows)
Active Vinkius subscription with a valid endpoint token

1

Open Claude Desktop Settings

Click the menu icon at the top-left corner, go to Settings → Developer → Edit Config. This opens claude_desktop_config.json in your default text editor.
2

Paste the Duo Security (Two-Factor Authentication API) MCP configuration

Copy the JSON snippet on the right into the mcpServers object. Replace [YOUR_TOKEN_HERE] with your endpoint token from cloud.vinkius.com.
3

Restart Claude Desktop

Close and reopen the application. Claude needs a full restart to load new MCPs — refreshing a conversation is not enough.
4

Verify the connection

Open a new conversation. Click the 🔌 icon at the bottom of the message input. You should see tools listed under duo-security-two-factor-authentication-api-mcp.

json

{
  "mcpServers": {
    "duo-security-two-factor-authentication-api-mcp": {
      "url": "https://edge.vinkius.com/[YOUR_TOKEN_HERE]/mcp"
    }
  }
}

Get your connection token →

Independent Platform Disclaimer: Vinkius is an independent platform and is not affiliated with, endorsed by, sponsored by, verified by, or otherwise authorized by Duo Security. All third-party trademarks, logos, and brand names are the property of their respective owners. Their use on this website is strictly for informational purposes to identify service compatibility and interoperability.

Why Choose Vinkius

Vinkius connects your tools to AI with real-time monitoring and automatic cost savings — all from one dashboard.

Connect Duo Security (Two-Factor Authentication API) now

Real-time monitoring

Live

visibility into every interaction

Connect your favorite tools to your AI and see exactly what's happening — every request, every response, in real time.

Built-in savings

60%

lower AI costs

Vinkius compresses data between your apps and your AI automatically. Lower bills every month — no configuration required.

Single dashboard

One

place for every integration

Every tool your AI connects to, managed from a single screen. One account, complete control.

Common questions about Duo Security (Two-Factor Authentication API) MCP in Claude Desktop

Open your `claude_desktop_config.json` file and add the server under the `mcpServers` key. Pass your Duo integration key, secret key, and API hostname as environment variables. Once you restart Claude Desktop, you will see the hammer icon indicating the 18 Duo tools are ready to use.

Yes. Your agent uses the `auth` tool to send an immediate push challenge, SMS, or phone call to a user. Claude Desktop then monitors the response using `auth_status` until the user approves or rejects the request.

You can drag a list of new hires into the Claude Desktop window. The agent parses the data and uses `bulk_create_users` to provision them in Duo, then verifies the setup with `list_users`.

Yes, the server includes administrative tools for user lifecycle management. If a user was recently removed, the agent can run `restore_users` to bring them back from the trash, or use `trash_users` to stage accounts for deletion.

Claude Desktop runs this MCP Server locally as a subprocess, meaning your HMAC secret keys and Duo user emails never pass through external intermediate servers. All API requests go directly from your local machine to Duo's secure endpoints, keeping your identity directory entirely private.

Use it with your favorite AI tools

Connect this server to Cursor, Claude, VS Code, and more.

OpenAI Agents SDK sdk-python

Google ADK sdk-python

Pydantic AI sdk-python

Vercel AI SDK sdk-typescript