Okta Connector for AI agents.
10 live capabilities
Manage user identities and group permissions in your Okta Identity Cloud.
Waiting for input…
Why people use Okta
Okta for Identity Management and User Provisioning
With the Okta MCP, you just tell your agent what to do. You can ask it to deprovision a user or list every person in a security group in seconds. You get your work done in one sentence instead of a dozen clicks.
What Vinkius changes
You get a conversational interface for your entire Okta identity directory.
Use it from Claude, ChatGPT, Cursor or another AI client you already have.
One account · 5,900+ Connectors
- Real-world use case 01
Emergency session termination
A laptop is stolen and you need to kill all sessions immediately.
- Real-world use case 02
Automated new hire onboarding
A new employee joins and needs access to the Engineering group.
- Real-world use case 03
Security audit of a specific app
You need to audit who has access to Jira.
Complete set · 10capabilities
The complete Okta capability set.
These are the exact actions your AI can choose when you ask it to work with Okta.
01—04
4 capabilities in this set.
Part of 10 available through Okta.
- 01 Capability
Clear user sessions
Terminate all active login sessions for a specific user. This is necessary to protect data if a device is compromised or stolen.
- 02 Capability
Deactivate user
Instantly convert a user status to deprovisioned and revoke all active sessions. Use this for emergency offboarding to block all future app access.
- 03 Capability
Get group
View the details of a specific Okta group. This helps you see who is part of a group and what permissions they have.
- 04 Capability
Get user
Get a detailed profile and state for a specific Okta user. Use this to check a user's account status or department mapping.
05—07
3 capabilities in this set.
Part of 10 available through Okta.
- 05 Capability
Get app
View the detailed SSO configuration for a specific application. This includes security bindings, secrets, and token lifespans.
- 06 Capability
List groups
List all security, app, and dynamic Okta groups. Use this to audit permissions and see how users are organized.
- 07 Capability
List users
List all users configured in your Okta Universal Directory. This is useful for organization-wide identity reporting.
08—10
3 capabilities in this set.
Part of 10 available through Okta.
- 08 Capability
List system logs
Retrieve the most recent 100 Okta system and audit log events. This helps you identify malicious password spraying or configuration tweaks.
- 09 Capability
List apps
List all applications integrated within your Okta dashboard. Use this to identify all OIDC, SAML, and SCIM connections.
- 10 Capability
List group users
List all users currently assigned to an Okta group. Use this to see exactly who was granted licenses or access via directory mapping.
Set up in minutes
One URL. Then ask Okta to work.
Claude and ChatGPT only need the Connector URL. Copy it once, add it in settings, and use Okta from the conversation.
Choose your client
Live previewAdvanced clients IDE · CLI
Claude · Web + desktop
Connector URL · ready to paste
Streamable HTTPhttps://edge.vinkius.com/vk_preview_DJcfQxMpslN5RaSwntHvGXz3VHnAhxE3QnKoSlfk/mcp - Step 01
Open Connectors
In Claude Web or Claude Desktop, open Settings and choose Connectors.
- Step 02
Add the URL
Choose Add custom connector, name it Okta, and paste the URL above.
- Step 03
Turn it on in chat
Select +, open Connectors, and enable Okta for the conversation.
ChatGPT · Web + desktop
Connector URL · ready to paste
Streamable HTTPhttps://edge.vinkius.com/vk_preview_DJcfQxMpslN5RaSwntHvGXz3VHnAhxE3QnKoSlfk/mcp - Step 01
Open MCP settings
On desktop, open Settings and MCP servers. On web, open your workspace app or connector settings.
- Step 02
Add the URL
Choose Add server with Streamable HTTP, or create a custom MCP app, then paste the Okta URL.
- Step 03
Save and start
Save the connection and enable Okta in your conversation. Desktop may ask you to restart once.
Cursor · IDE configuration
Advanced setup
{
"mcpServers": {
"okta": {
"url": "https://edge.vinkius.com/vk_preview_DJcfQxMpslN5RaSwntHvGXz3VHnAhxE3QnKoSlfk/mcp"
}
}
}- Step 01
Open MCP Settings
Press Cmd+Shift+P (macOS) or Ctrl+Shift+P (Windows/Linux) → search "MCP Settings"
- Step 02
Add the server config
Paste the JSON configuration above into the mcp.json file that opens
- Step 03
Save the file
Cursor will automatically detect the new Connector
- Step 04
Start using Okta
Open Agent mode in chat and ask: "Using Okta, help me...". 10 tools available
VS Code Copilot · IDE configuration
Advanced setup
{
"mcpServers": {
"okta": {
"url": "https://edge.vinkius.com/vk_preview_DJcfQxMpslN5RaSwntHvGXz3VHnAhxE3QnKoSlfk/mcp"
}
}
}- Step 01
Create MCP config
Create a .vscode/mcp.json file in your project root
- Step 02
Add the server config
Paste the JSON configuration above
- Step 03
Enable Agent mode
Open GitHub Copilot Chat and switch to Agent mode using the dropdown
- Step 04
Start using Okta
Ask Copilot: "Using Okta, help me...". 10 tools available
Windsurf · IDE configuration
Advanced setup
{
"mcpServers": {
"okta": {
"url": "https://edge.vinkius.com/vk_preview_DJcfQxMpslN5RaSwntHvGXz3VHnAhxE3QnKoSlfk/mcp"
}
}
}- Step 01
Open MCP Settings
Go to Settings → MCP Configuration or press Cmd+Shift+P and search "MCP"
- Step 02
Add the server
Paste the JSON configuration above into mcp_config.json
- Step 03
Save and reload
Windsurf will detect the new server automatically
- Step 04
Start using Okta
Open Cascade and ask: "Using Okta, help me...". 10 tools available
Cline · IDE configuration
Advanced setup
{
"mcpServers": {
"okta": {
"url": "https://edge.vinkius.com/vk_preview_DJcfQxMpslN5RaSwntHvGXz3VHnAhxE3QnKoSlfk/mcp"
}
}
}- Step 01
Open Cline MCP Settings
Click the Connectors icon in the Cline sidebar panel
- Step 02
Add remote server
Click "Add Connector" and paste the configuration above
- Step 03
Enable the server
Toggle the server switch to ON
- Step 04
Start using Okta
Ask Cline: "Using Okta, help me...". 10 tools available
Claude Code · Terminal command
Advanced setup
claude mcp add okta --transport http "https://edge.vinkius.com/vk_preview_DJcfQxMpslN5RaSwntHvGXz3VHnAhxE3QnKoSlfk/mcp"- Step 01
Install Claude Code
Run npm install -g @anthropic-ai/claude-code if not already installed
- Step 02
Add the Connector
Run the command above in your terminal
- Step 03
Verify the connection
Run claude mcp to list connected servers, or type /mcp inside a session
- Step 04
Start using Okta
Ask Claude: "Using Okta, show me...". 10 tools are ready
Where the request belongs
Work Okta can move forward.
This is for the IT admin who's tired of clicking through dashboards at 2am to unlock accounts, or the SecOps analyst hunting for compromised sessions.
Helpdesk Technician
Responding to 'I'm locked out' tickets by quickly resetting credentials or clearing sessions via chat.
Security Operations Analyst
Identifying and terminating hazardous sessions or auditing app permissions during an active security incident.
IT System Administrator
Handling bulk user onboarding and offboarding without manual CSV uploads or tedious manual entry.
When one Connector is not enough
Carry the request into a workflow.
Combine Okta with the systems that finish the task.
View all recipesBuild the capability set
Add more capabilities.
Each Connector adds new actions and data without changing how you work.
Browse ConnectorsAuthing
Cloud-native identity and access management platform. manage users, roles, and security logs via AI.
FusionAuth (Enterprise Identity & Auth)
Manage enterprise identity, users, and applications via FusionAuth. create users, list applications, and handle authentication flows directly from any AI agent.
Auth0
Manage IAM operations—users, clients, connections, and logs in your Auth0 tenant directly via your AI agent.
BoxyHQ (Enterprise SSO)
Manage Enterprise SSO and Directory Sync (SCIM) via BoxyHQ. configure SAML/OIDC connections and automate user provisioning directly from your AI agent.
Userfront
Manage users, multi-tenant structures, and authentication sessions directly through Userfront's identity platform.
Ping Identity
Manage PingOne user identities, applications, groups, risk policies, and sign-on flows autonomously via AI.
Bring your own AI
Change the model, client or framework. Keep Okta connected.
-
Claude -
ChatGPT -
Gemini -
Cursor -
VS Code -
Windsurf -
ZCode -
Cline -
Zed -
Continue -
Kiro -
Roo Code -
Zencoder -
Goose -
Void -
Augment Code -
Amp -
Qodo -
Tabnine -
Pieces -
Sourcegraph Cody -
JetBrains -
Warp -
Amazon Q -
Antigravity -
BoltAI -
Raycast -
Jan -
LM Studio -
AnythingLLM -
Open WebUI -
Msty -
Cherry Studio -
LibreChat -
TypingMind -
Chorus -
5ire -
n8n -
LangChain -
LlamaIndex -
CrewAI -
Vercel AI SDK
Before you connect
Questions about Okta.
The practical details behind the request, access and result.
How can Okta MCP help my helpdesk team?
It lets your team handle 'I'm locked out' tickets via chat. Your agent can quickly reset credentials or clear sessions without the tech needing to open the Okta dashboard.
Can I use Okta MCP to offboard employees?
Yes, it can instantly deactivate users and kill all active sessions. This ensures that access is revoked across all integrated apps the moment an employee leaves.
Does Okta MCP work with my existing apps?
It manages the Okta integrations for your apps. If your apps are connected to Okta via SAML, OIDC, or SCIM, your agent can manage those permissions.
Is Okta MCP safe for security audits?
It's a great capability for audits because it can pull system logs and group memberships. You can quickly see who has access to what and spot any suspicious sign-in attempts.
How do I connect Okta MCP to my AI agent?
You subscribe to the Connector via the Vinkius catalog and provide your Okta domain and API Key. From there, your agent can start performing identity tasks for you.
Where do I retrieve my Okta Domain and API Token?
Log in to your Okta Admin Console. The Okta domain is simply the URL you use (e.g., company.okta.com). To get the API Key, navigate to Security -> API, then select the Tokens tab. Click Create Token, assign it a name, and securely copy the generated string.
Can the agent clear active sessions for a compromised user?
Yes! If you suspect an ongoing security incident, you can promptly ask the agent to clear user sessions (clear_user_sessions) by simply stating the user's ID or email. The integration talks back to Okta and terminates persistent connections instantaneously.
Is the administrator API key shared globally with anyone else?
No, your setup is extremely private and BYOC (Bring Your Own Credentials). The token is entered locally inside your private environment or workspace instance and injected tightly and exclusively into your isolated runtime execution. It is never exposed publically.
One connection away
Give your agent a direct line to Okta.
Connect Okta once. Keep it beside 5,900+ managed Connectors when the next task needs more.
Explore every Connector No credit card required · Free tier available