How to Use the Duo Security (Two-Factor Authentication API) MCP in Google ADK

Q: Can my Google ADK agent verify its integration keys using this MCP Server?

Yes, the agent runs checkauth to test your integration keys and verify that HMAC signatures are generating correctly. This diagnostic tool prevents authentication failures before you deploy your agentic pipeline to production.

Q: How does the Duo Security (Two-Factor Authentication API) handle high-volume user updates from Google ADK?

The agent utilizes bulkcreateusers to provision up to 100 accounts in a single execution block. This batching mechanism prevents rate-limiting issues when syncing large datasets from BigQuery tables.

Run enterprise-grade identity controls by connecting Google ADK to the Duo Security API.

See Vinkius in Action

Works with every AI agent you already use

…and any MCP-compatible client

MCP Servers - Free for Subscribers

Connect Duo Security (Two-Factor Authentication API) MCP to Google ADK

Create your Vinkius account to connect Duo Security (Two-Factor Authentication API) to Google ADK and route execution through our secure gateway. The platform manages server hosting, runtime updates, and security layers. Configuration requires no manual server provisioning.

GDPR Free for Subscribers

Setup Duo Security (Two-Factor Authentication API) with Google ADK

Ask AI about this MCP

ChatGPT

Claude

Perplexity

Validate identity states within this MCP Server

The `preauth` tool determines if a user is authorized to log in and returns their active 2FA factors. Your Google ADK agent uses this data to decide whether to prompt for a push notification or fallback to an SMS code. To confirm connectivity before running complex multi-step reasoning chains, the agent fires a quick `ping_auth` request. This lightweight check ensures the authentication API is fully responsive before the agent attempts deeper operations.

Manage active user directories using this MCP Server

The `list_users` tool pulls paged records from your directory, allowing your Gemini models to analyze access patterns over long contexts. The agent filters results by username or email to locate specific profiles instantly. If an identity needs updates, the agent executes `modify_user` to alter group memberships or status flags. This direct write capability keeps your active directory synchronized with your cloud database state.

Clean up inactive accounts and recycle users

The `trash_users` tool sends inactive or offboarded user accounts to the trash queue where they sit for 7 days. This prevents immediate accidental deletion while instantly revoking their active authentication privileges. If an employee returns or an admin makes a mistake, the agent runs `restore_users` to recover the profiles. This dual-state lifecycle management keeps your security perimeter clean without risking permanent data loss.

Setup guide

Set up Duo Security (Two-Factor Authentication API) MCP in Google ADK

Prerequisites

Python 3.10+ installed
google-adk package (pip install google-adk)
Active Vinkius subscription with a valid endpoint token

1

Install Google ADK

Run pip install google-adk to install the Agent Development Kit. MCP support is included via the McpToolset class.
2

Connect via SSE transport

Use McpToolset.from_server() with SseServerParams pointing to your Vinkius endpoint. Replace [YOUR_TOKEN_HERE] with your token from cloud.vinkius.com.
3

Create an LlmAgent

Pass the returned mcp_tools list directly to LlmAgent(tools=mcp_tools). The ADK maps each MCP tool to a native Gemini function call — no manual schema definitions required.
4

Run with any Gemini model

The agent works with any Gemini model (gemini-2.0-flash, gemini-2.5-pro, etc.). Copy the full example on the right to get started with Duo Security (Two-Factor Authentication API) tools in your ADK agent.

agent.py

from google.adk.agents import LlmAgent
from google.adk.tools.mcp_tool.mcp_toolset import McpToolset
from google.adk.tools.mcp_tool.mcp_session_manager import SseServerParams

# Connect to the MCP via SSE
mcp_tools, exit_stack = await McpToolset.from_server(
    connection_params=SseServerParams(
        url="https://edge.vinkius.com/[YOUR_TOKEN_HERE]/mcp"
    )
)

# Create your agent with auto-discovered tools
agent = LlmAgent(
    name="Duo Security (Two-Factor Authentication API)_agent",
    model="gemini-2.0-flash",
    instruction="You have access to Duo Security (Two-Factor Authentication API) tools via MCP.",
    tools=mcp_tools,
)

Get your connection token →

Independent Platform Disclaimer: Vinkius is an independent platform and is not affiliated with, endorsed by, sponsored by, verified by, or otherwise authorized by Duo Security. All third-party trademarks, logos, and brand names are the property of their respective owners. Their use on this website is strictly for informational purposes to identify service compatibility and interoperability.

Why Choose Vinkius

Vinkius connects your tools to AI with real-time monitoring and automatic cost savings — all from one dashboard.

Connect Duo Security (Two-Factor Authentication API) now

Real-time monitoring

Live

visibility into every interaction

Connect your favorite tools to your AI and see exactly what's happening — every request, every response, in real time.

Built-in savings

60%

lower AI costs

Vinkius compresses data between your apps and your AI automatically. Lower bills every month — no configuration required.

Single dashboard

One

place for every integration

Every tool your AI connects to, managed from a single screen. One account, complete control.

Common questions about Duo Security (Two-Factor Authentication API) MCP in Google ADK

You register the server using the McpToolset class with the HTTP transport URL. Your Gemini-backed agent immediately gains access to execute actions like `check_auth` and `bulk_create_users` inside its decision loops.

Yes, the agent runs `check_auth` to test your integration keys and verify that HMAC signatures are generating correctly. This diagnostic tool prevents authentication failures before you deploy your agentic pipeline to production.

The agent utilizes `bulk_create_users` to provision up to 100 accounts in a single execution block. This batching mechanism prevents rate-limiting issues when syncing large datasets from BigQuery tables.

Yes, the Google ADK toolset allows you to pass an optional tool_names list to restrict exposure when setting up your MCP toolset. You can expose read-only tools like `list_users` while hiding destructive actions like `trash_users`.

All user emails, usernames, and transaction logs are processed ephemerally in a zero-trust V8 sandbox. The integration keys never persist on disk, guaranteeing that your administrative operations remain secure and private.

Use it with your favorite AI tools

Connect this server to Cursor, Claude, VS Code, and more.

OpenAI Agents SDK sdk-python

Google ADK sdk-python

Pydantic AI sdk-python

Vercel AI SDK sdk-typescript