An astronaut overseeing a futuristic data hub
Download PDFMarkdown Version

Connect Duo Security Two Factor Authentication AP to your AI

Set it up once and it works in ChatGPT, Claude, Cursor, and any other client you love. It all runs safely in the background, so you can relax and focus on what really matters. Run authentication and user workflows through your AI agent.

Ask AI about this Connector

Developed, maintained, and hosted by Vinkius.

MCP VERIFIED · PRODUCTION READY · VINKIUS GUARANTEED

Waiting for input…

Works with modern AI clients that support MCP, including ChatGPT, Claude, Cursor, and more.

ChatGPTClaudeCursorPerplexityGeminiMicrosoft CopilotRaycastMeta AI

Your AI does the work. We keep it safe and sound.

No other AI tool gives you this. Your workflow runs in the client you already love, your account stays protected, and you decide what the agent can and cannot do. It is the whole reason to make the switch.

Each Connector lives inside our infrastructure, the same place where your workflow runs. The three things below are already part of it, working quietly in the background so you never have to think about them. Nothing to add, nothing to set up, nothing to worry about.

A futuristic MCP client docking bay
V8 Isolate01

Each Connector runs inside its own sealed environment.

Each Connector runs inside its own sealed V8 runtime — no access to your files, your system, or other servers. A Connector never sees past its own request.

Kill Switch02

One switch stops every agent. Instantly.

One action deactivates every Connector, revokes every token, and ends every session at once. AI Governance keeps the record.

FinOps per User03

Spending limits that pause instead of surprise.

Every user keeps their own connections and credentials, isolated from everyone else. Anything that would cross your spending limit is held for your approval, not billed.

Three controls, built into the layer your AI connects through.

Curated set · 18 capabilities

We ship only the actions that matter.

Capability set01 / 05

01-04

4 capabilities in this set.

Part of 18 available through Duo Security.

  1. 01

    Ping auth

    This capability performs a liveness check on the Auth API to ensure connectivity.

  2. 02

    Restore users

    Use this to bring users back from the trash.

  3. 03

    Set billing edition

    This capability updates the billing edition for a specific account.

  4. 04

    Get telephony credits

    Get the current telephony credit balance for an account.

Capability set02 / 05

05-08

4 capabilities in this set.

Part of 18 available through Duo Security.

  1. 05

    List accounts

    This capability retrieves child accounts for Duo MSP partners.

  2. 06

    Set telephony credits

    Update the telephony credits available for an account.

  3. 07

    Bulk create users

    Create up to 100 users in a single request.

  4. 08

    Auth status

    Poll the status of an asynchronous authentication request.

Capability set03 / 05

09-12

4 capabilities in this set.

Part of 18 available through Duo Security.

  1. 09

    Check auth

    Verify your integration keys and signature generation.

  2. 10

    Create account

    Create a new child account.

  3. 11

    Auth

    Trigger a second-factor authentication request.

  4. 12

    Create user

    Add a new user to your Duo instance.

Capability set04 / 05

13-15

3 capabilities in this set.

Part of 18 available through Duo Security.

  1. 13

    Delete account

    Remove a child account.

  2. 14

    Get billing edition

    Retrieve the current billing edition for an account.

  3. 15

    List users

    Get a paged list of users, which you can filter by username, email, or ID.

Capability set05 / 05

16-18

3 capabilities in this set.

Part of 18 available through Duo Security.

  1. 16

    Modify user

    Update existing user details.

  2. 17

    Preauth

    Check if a user is authorized to log in and see which factors are available.

  3. 18

    Trash users

    Send users to the trash where they stay for 7 days before deletion.

Real work

What teams actually run

01

Rapid User Onboarding

Use bulk creation capabilities to add dozens of users at once via your agent.

02

Real-time Troubleshooting

Trigger a Duo Push for a user who is having login issues to verify their identity immediately.

03

MSP Account Management

Manage multiple child accounts and monitor telephony credits from a single interface.

04

Security Investigations

Check if a specific user is authorized and what factors they have enabled during a security audit.

Automate a task

Put Duo Security to work on one thing.

Step-by-step automations your AI runs through this Connector: the workflow, the prompts to start with, and the exact capabilities behind each move.

One connector, every AI

Duo Security works with the most popular AI clients.

These are the most popular clients, each with a step-by-step guide: one link, set up once, with governance and visibility built in. And because everything runs on the MCP standard, the same connection also works in any other compatible client — nothing to rebuild.

ClaudeClaudeChatGPTChatGPTGeminiGeminiPerplexityPerplexityGrokGrokMicrosoft CopilotMicrosoft CopilotCursorCursorVS CodeVS CodeWindsurfWindsurfJetBrainsJetBrainsClineClineLangChainLangChainVercel AI SDKVercel AI SDKLovableLovableZ.aiZ.aiRaycastRaycastQwen CodeQwen CodeKimi CodeKimi CodeLe ChatLe Chat

Building your own app? The connector is yours to use.

You don't need a client to put Duo Security to work: the same hosted connection plugs into your own applications and agent code, with the same governance on every request. Build with it, chat with it — one connection for both.

Observed, not estimated

1044ms average. Fast in production.

Duo Security is checked daily against the live service.

Daily averagePeak 1227ms
Oct 3Today
Fastest day
799ms
Slowest day
1227ms
14-day trend
Improving-7%

Connect your client

One URL. Every client.

Activate the Connector, copy your link, and paste it into the client you already use. 18 capabilities arrive ready to run.

Preview access · not provider authentication

The vk_preview_* token belongs to Vinkius preview infrastructure. It lets Claude discover and display the capabilities of Duo Security, so you can see the experience inside your AI.

It does not authenticate your account with Duo Security. Actions requiring credentials or live account data may not run until you activate the Connector and authorize the service.

Duo Security Connector

You're all set. Choose your MCP client and follow the setup instructions.

Connector linkhttps://edge.vinkius.com/vk_preview_vZrSTXFunenPOtS5fqDzXaQfYS8LNoq0t0Z7onBU/mcp

Claude Desktop

Follow the steps below to connect in seconds.

  1. 1In Claude Desktop, open Settings → Connectors.
  2. 2Click “Add custom connector” and paste the connector link above as the remote MCP server URL.
  3. 3Click Add and start a new chat — Duo Security capabilities are ready to use.
Configuration · claude_desktop_config.jsonCopy
{
  "mcpServers": {
    "duo-security-two-factor-authentication-api-mcp": {
      "url": "https://edge.vinkius.com/vk_preview_vZrSTXFunenPOtS5fqDzXaQfYS8LNoq0t0Z7onBU/mcp"
    }
  }
}
  • Claude
  • ChatGPT
  • Cursor
  • VS Code
  • Windsurf
  • Claude Code
  • JetBrains
  • Cline

Step-by-step instructions for each client are in the guide. How to connect

Guided setup for Claude? Set up Duo Security in Claude and other AIs

See all the AI clients this connector works with ↑

Who it's for

Built for the work Duo Security owners hand off.

This MCP is built for technical professionals who manage identity and access at scale.

  • 01

    IT Administrators

    They hand off user auditing and status updates to the agent.

  • 02

    SecOps Engineers

    They use the agent to automate 2FA verification and investigate transaction statuses.

  • 03

    DevOps Engineers

    They integrate identity checks and user provisioning into automated workflows.

FAQ

Questions Duo Security owners ask.

  • 01

    How do I connect my Duo instance?

    You need to provide your Duo API Hostname, Integration Key, and Secret Key after subscribing to the MCP on Vinkius.

  • 02

    Can I trigger a Duo Push from my AI client?

    Yes, you can use the auth capability to trigger Duo Push, SMS, Phone, or Passcode requests directly through your agent.

  • 03

    Does this work with any AI client?

    It works with any MCP-compatible client, including Claude, Cursor, and Windsurf.

  • 04

    Can I manage multiple accounts?

    Yes, the MCP includes capabilities to list, create, and delete child accounts, which is useful for MSP partners.

  • 05

    What happens if I delete a user?

    You can use the trash_users capability to move users to a trash state, where they remain for 7 days before being permanently deleted.

  • 06

    Can I trigger a Duo Push notification for a specific user?

    Yes. Use the auth capability and set the factor to 'push'. You can provide either the username or user_id to target the correct person.

  • 07

    How do I check which authentication factors are available for a user?

    Run the preauth capability with the user's details. It will return whether the user is authorized and a list of supported factors like push, phone, or SMS.

  • 08

    Is it possible to change a user's status to 'bypass' or 'disabled'?

    Yes, the modify_user capability allows you to update the status field to 'active', 'bypass', or 'disabled' using the user's unique ID.

Explore

More in Developer Tools

Suggestions

Connect Duo Security to Claude, Cursor, ChatGPT & more