How to Use the Duo Security (Two-Factor Authentication API) MCP in LangChain

Q: How do I pass Duo Security (Two-Factor Authentication API) tools into a LangChain agent?

Install langchain-mcp-adapters and initialize the client using the Vinkius endpoint. This MCP integration allows you to retrieve the Duo tools, like auth and preauth, and pass them directly to your LangChain agent executor.

Q: Can LangChain handle asynchronous polling for Duo Security (Two-Factor Authentication API) push notifications?

Yes, LangChain agents use recursive loops to poll authstatus after initiating an auth request. The agent waits between loops, checking the transaction ID until the user approves or rejects the push.

Q: Is it possible to manage Duo MSP child accounts using LangChain chains?

Absolutely. Your chain can fetch all child tenants with listaccounts and programmatically adjust their tiers using setbillingedition based on rules you define in your prompt.

Trigger Duo 2FA and manage users directly inside your LangChain reasoning loops.

See Vinkius in Action

Works with every AI agent you already use

…and any MCP-compatible client

MCP Servers - Free for Subscribers

Connect Duo Security (Two-Factor Authentication API) MCP to LangChain

Create your Vinkius account to connect Duo Security (Two-Factor Authentication API) to LangChain and route execution through our secure gateway. The platform manages server hosting, runtime updates, and security layers. Configuration requires no manual server provisioning.

GDPR Free for Subscribers

Setup Duo Security (Two-Factor Authentication API) with LangChain

Ask AI about this MCP

ChatGPT

Claude

Perplexity

Chain Duo Security auth checks in LangChain

By using this MCP Server, your LangChain agent can now verify a user's identity before executing sensitive database writes. By calling `preauth` to check available factors and then initiating `auth`, the agent handles the multi-step verification handshake without hardcoded logic. The output of the `auth` call feeds straight into the next step of your chain. If the push notification fails or times out, the agent catches the error, polls `auth_status`, and dynamically branches to an alternative verification path.

Bulk user operations with LangChain MCP Server

When onboarding batches of team members, your LangChain chain can ingest raw directory data and run `bulk_create_users` to populate Duo in one shot. If any records fail, the agent inspects the response and uses `modify_user` to patch the specific failures. This removes the need for manual Duo onboarding scripts in your LangChain workflows. LangSmith monitors the entire sequence, tracing exactly how the agent mapped raw employee records to Duo's payload format during the `bulk_create_users` execution.

Dynamic license and credit tracking

Keep tabs on your Duo MSP deployment by letting LangChain agents inspect account parameters. The agent queries `get_telephony_credits` and `list_accounts` to identify which child accounts are running low on credits or using outdated billing tiers. Based on these live metrics, the agent can trigger alerts or automatically run `set_telephony_credits` to reallocate resources. It's a self-healing loop that keeps your Duo authentication infrastructure fully funded within your LangChain pipeline.

Setup guide

Set up Duo Security (Two-Factor Authentication API) MCP in LangChain

Prerequisites

Python 3.10+ installed
langchain-mcp-adapters + langgraph packages
Active Vinkius subscription with a valid endpoint token

1

Install dependencies
Run pip install langchain-mcp-adapters langgraph langchain-openai. The MCP adapters package converts MCP tools into native LangChain BaseTool objects.
2

Connect via HTTP transport
Use MultiServerMCPClient with "transport": "http" pointing to your Vinkius endpoint. Replace [YOUR_TOKEN_HERE] with your token from cloud.vinkius.com.
3

Create a ReAct agent
Pass the discovered tools to create_react_agent() from LangGraph. The agent automatically routes Duo Security (Two-Factor Authentication API) tool calls through the MCP protocol.
4

Run with any LLM
Swap ChatOpenAI for ChatAnthropic, ChatGoogleGenerativeAI, or any LangChain-compatible model. The MCP tools work identically across all providers.

agent.py

from langchain_mcp_adapters.client import MultiServerMCPClient
from langgraph.prebuilt import create_react_agent
from langchain_openai import ChatOpenAI

async with MultiServerMCPClient({
    "duo-security-two-factor-authentication-api-mcp": {
        "transport": "http",
        "url": "https://edge.vinkius.com/[YOUR_TOKEN_HERE]/mcp",
    }
}) as client:
    tools = client.get_tools()

    agent = create_react_agent(
        ChatOpenAI(model="gpt-4o"),
        tools,
    )
    result = await agent.ainvoke({
        "messages": "List recent Duo Security (Two-Factor Authentication API) transactions"
    })
    print(result["messages"][-1].content)

Get your connection token →

Independent Platform Disclaimer: Vinkius is an independent platform and is not affiliated with, endorsed by, sponsored by, verified by, or otherwise authorized by Duo Security. All third-party trademarks, logos, and brand names are the property of their respective owners. Their use on this website is strictly for informational purposes to identify service compatibility and interoperability.

Why Choose Vinkius

Vinkius connects your tools to AI with real-time monitoring and automatic cost savings — all from one dashboard.

Connect Duo Security (Two-Factor Authentication API) now

Real-time monitoring

Live

visibility into every interaction

Connect your favorite tools to your AI and see exactly what's happening — every request, every response, in real time.

Built-in savings

60%

lower AI costs

Vinkius compresses data between your apps and your AI automatically. Lower bills every month — no configuration required.

Single dashboard

One

place for every integration

Every tool your AI connects to, managed from a single screen. One account, complete control.

Common questions about Duo Security (Two-Factor Authentication API) MCP in LangChain

Install `langchain-mcp-adapters` and initialize the client using the Vinkius endpoint. This MCP integration allows you to retrieve the Duo tools, like `auth` and `preauth`, and pass them directly to your LangChain agent executor.

Yes, LangChain agents use recursive loops to poll `auth_status` after initiating an `auth` request. The agent waits between loops, checking the transaction ID until the user approves or rejects the push.

LangSmith captures every tool invocation, showing the exact payloads sent to `bulk_create_users`. If Duo returns an API error, you can see the malformed user fields directly in your LangSmith trace dashboard.

Absolutely. Your chain can fetch all child tenants with `list_accounts` and programmatically adjust their tiers using `set_billing_edition` based on rules you define in your prompt.

The Vinkius MCP Server executes in a secure sandbox, meaning your Duo integration keys, signatures, and user email addresses never leak to the LLM. Only the tool schemas and final execution outputs, like confirmation of a successful `auth` call, are returned to your LangChain application.

Use it with your favorite AI tools

Connect this server to Cursor, Claude, VS Code, and more.

OpenAI Agents SDK sdk-python

Google ADK sdk-python

Pydantic AI sdk-python

Vercel AI SDK sdk-typescript