How to Use the FusionAuth (Enterprise Identity & Auth) MCP in Claude

Q: How do I connect the FusionAuth (Enterprise Identity & Auth) server to Claude Desktop?

Open your claudedesktopconfig.json file and add the server to your mcpServers object. Provide the required FusionAuth API keys and host URL in the arguments, then restart the app to see the tools.

Q: Can Claude Desktop manage multiple tenants via FusionAuth (Enterprise Identity & Auth)?

Yes, the agent can call createtenant or gettenant to manage isolated environments. You just need to ensure the API key configured in your config file has the correct super-admin permissions.

Q: How do I handle multi-factor authentication setup?

Your agent can invoke enablemfa and generatemfasecret to configure two-factor flows for test accounts. You can then test the login flow using the mfalogin tool directly.

Configure tenants, manage groups, and run auth checks on your local machine directly from Claude Desktop.

See Vinkius in Action

Works with every AI agent you already use

…and any MCP-compatible client

MCP Servers - Free for Subscribers

Connect FusionAuth (Enterprise Identity & Auth) MCP to Claude Desktop

Create your Vinkius account to connect FusionAuth (Enterprise Identity & Auth) to Claude Desktop and route execution through our secure gateway. The platform manages server hosting, runtime updates, and security layers. Configuration requires no manual server provisioning.

GDPR Free for Subscribers

Setup FusionAuth (Enterprise Identity & Auth) with Claude Desktop

Ask AI about this MCP

ChatGPT

Claude

Perplexity

Spin up test tenants in Claude Desktop

The `create_tenant` tool lets you configure a new testing environment inside Claude Desktop using this MCP Server. Once your tenant is ready, your agent can call `create_application_role` to set up permissions. This lets you test different access levels without manual database seeding or click-heavy console sessions.

Automate user onboarding and group membership

The `create_user` tool lets you provision dummy accounts for integration testing directly from your chat window. This MCP Server lets Claude Desktop run authentication setup commands without leaving your current conversation. Once the users exist, the agent can call `add_group_member` to assign them to specific groups. You get a fully populated auth environment for your local development server without writing custom seed scripts.

Debug token issues inside your workspace

The `issue_jwt` tool generates test tokens so you can inspect claims right inside your chat window. If you need to test security revocation, your agent can run `revoke_refresh_tokens` or `disable_mfa` to simulate user lockouts. You see exactly how your local application handles these state changes without manual API calls.

Setup guide

Set up FusionAuth (Enterprise Identity & Auth) MCP in Claude Web or Desktop

1

Open Claude Settings

Go to claude.ai, click your profile icon, then navigate to Customize → Connectors.
2

Add Custom Connector

Click the "+" button and select Add custom connector. Paste your Vinkius endpoint URL: https://edge.vinkius.com/[YOUR_TOKEN_HERE]/mcp Replace [YOUR_TOKEN_HERE] with your token from cloud.vinkius.com. For OAuth-protected servers, expand Advanced settings to add credentials.
3

Start a conversation

Open a new chat. The FusionAuth (Enterprise Identity & Auth) MCP tools are available immediately — no restart needed.

Endpoint URL

https://edge.vinkius.com/[YOUR_TOKEN_HERE]/mcp

No configuration file needed — paste the URL directly in the Claude web interface.

Available on Free (1 connector), Pro, Max, Team, and Enterprise plans.

Prerequisites

Claude Desktop installed (macOS or Windows)
Active Vinkius subscription with a valid endpoint token

1

Open Claude Desktop Settings

Click the menu icon at the top-left corner, go to Settings → Developer → Edit Config. This opens claude_desktop_config.json in your default text editor.
2

Paste the FusionAuth (Enterprise Identity & Auth) MCP configuration

Copy the JSON snippet on the right into the mcpServers object. Replace [YOUR_TOKEN_HERE] with your endpoint token from cloud.vinkius.com.
3

Restart Claude Desktop

Close and reopen the application. Claude needs a full restart to load new MCPs — refreshing a conversation is not enough.
4

Verify the connection

Open a new conversation. Click the 🔌 icon at the bottom of the message input. You should see tools listed under fusionauth-enterprise-identity-auth-mcp.

json

{
  "mcpServers": {
    "fusionauth-enterprise-identity-auth-mcp": {
      "url": "https://edge.vinkius.com/[YOUR_TOKEN_HERE]/mcp"
    }
  }
}

Get your connection token →

Independent Platform Disclaimer: Vinkius is an independent platform and is not affiliated with, endorsed by, sponsored by, verified by, or otherwise authorized by FusionAuth. All third-party trademarks, logos, and brand names are the property of their respective owners. Their use on this website is strictly for informational purposes to identify service compatibility and interoperability.

Why Choose Vinkius

Vinkius connects your tools to AI with real-time monitoring and automatic cost savings — all from one dashboard.

Connect FusionAuth (Enterprise Identity & Auth) now

Real-time monitoring

Live

visibility into every interaction

Connect your favorite tools to your AI and see exactly what's happening — every request, every response, in real time.

Built-in savings

60%

lower AI costs

Vinkius compresses data between your apps and your AI automatically. Lower bills every month — no configuration required.

Single dashboard

One

place for every integration

Every tool your AI connects to, managed from a single screen. One account, complete control.

Common questions about FusionAuth (Enterprise Identity & Auth) MCP in Claude Desktop

Open your `claude_desktop_config.json` file and add the server to your `mcpServers` object. Provide the required FusionAuth API keys and host URL in the arguments, then restart the app to see the tools.

Yes, you can connect it as a custom connector in the web settings. Paste your hosted MCP server URL, configure your authentication token, and your browser agent will gain immediate access to tools like `get_user`.

Yes, the agent can call `create_tenant` or `get_tenant` to manage isolated environments. You just need to ensure the API key configured in your config file has the correct super-admin permissions.

Your agent can invoke `enable_mfa` and `generate_mfa_secret` to configure two-factor flows for test accounts. You can then test the login flow using the `mfa_login` tool directly.

Your raw passwords and JWT tokens never pass through Vinkius servers; they are processed locally or via direct secure endpoints. The MCP setup uses encrypted environment variables to authenticate with your FusionAuth instance, keeping user profiles safe.

Use it with your favorite AI tools

Connect this server to Cursor, Claude, VS Code, and more.

OpenAI Agents SDK sdk-python

Google ADK sdk-python

Pydantic AI sdk-python

Vercel AI SDK sdk-typescript