Okta MCP Server

List Users

List all users in your Okta organization with optional filtering and pagination. Supports filtering by status (STAGED, PROVISIONED, ACTIVE, RECOVERY, LOCKED_OUT, PASSWORD_EXPIRED, SUSPENDED, DEPROVISIONED) and searching by name, email, or other profile attributes. Use this to discover users, audit accounts, or find specific users matching criteria.

Get User

Get detailed information about a specific user by their ID or login email. Returns user profile, status, credentials info, and lifecycle state. Use this to retrieve complete user details for a known user.

Search Users

Search for users using advanced filter expressions. Supports complex queries with operators like eq (equals), sw (starts with), pr (present), gt (greater than), lt (less than). Examples: 'status eq "ACTIVE" and profile.department eq "Engineering"' or 'profile.lastName sw "Smith"'. Use this for complex user discovery scenarios.

Create User

Create a new user in your Okta organization. Requires at minimum an email address and can optionally include full profile details, password, and activation preferences. You can create users in different states: with activation email, without activation, or as a group admin. Use this to provision new user accounts.

Update User

Update an existing user's profile information. You can modify any profile attributes like name, email, phone, or custom attributes. This performs a partial update - only specified fields are updated. Use this to keep user information current.

Deactivate User

Deactivate a user account. This changes the user's status to DEPROVISIONED and revokes all active sessions. The user will not be able to log in. User data is retained and the user can be reactivated later. Use this for offboarding or temporarily suspending access.

Activate User

Activate a user account that is in STAGED or DEPROVISIONED status. This allows the user to authenticate and access applications. Optionally sends an activation email with a temporary token. Use this for onboarding new users or reactivating previously deactivated accounts.

List Groups

List all groups in your Okta organization. Supports searching by name and pagination. Groups are used to organize users and assign them to applications collectively. Use this to discover groups, audit group structure, or find specific groups.

Get Group

Get detailed information about a specific group including its name, description, type, and member count. Use this to retrieve complete group details for a known group ID.

List Group Members

List all users who are members of a specific group. Returns user profiles for each member with pagination support. Use this to see who belongs to a group or audit group membership.

Create Group

Create a new group in your Okta organization. Groups can be used to organize users and assign them to applications collectively. You can specify a name and optional description. Use this to set up new teams, departments, or access groups.

Add User to Group

Add a user to a group. This grants the user any application assignments and permissions associated with the group. The operation is idempotent - adding a user who is already a member has no effect. Use this to grant group-based access to users.

Remove User from Group

Remove a user from a group. This revokes any group-based application assignments and permissions. The operation is idempotent - removing a user who is not a member has no effect. Use this to revoke group-based access from users.

List Applications

List all applications in your Okta organization. Applications represent the services and apps your users can access. Supports filtering by user assignment and pagination. Use this to discover applications, audit app inventory, or find specific apps.

Get Application

Get detailed information about a specific application including its settings, sign-on mode, and configuration. Use this to retrieve complete application details for a known app ID.

List Application Users

List all users assigned to a specific application. Returns user assignments with app-specific credentials and profile attributes. Use this to see who has access to an application or audit app assignments.

List Application Groups

List all groups assigned to a specific application. Group assignments allow all group members to access the application. Use this to see which groups have access to an application or audit app assignments.

Assign User to Application

Assign a user to an application, granting them access. You can optionally provide app-specific credentials or profile attributes. Use this to provision user access to applications.

Get System Logs

Query system logs for audit and troubleshooting. Logs include authentication events, user lifecycle changes, policy evaluations, and administrative actions. Supports filtering by time range, event type, actor, target, and more. Use this to investigate security incidents, audit activity, or monitor system events.

Get Log Event

Get details of a specific log event by its ID. Returns the complete event including actor, target, outcome, and debug context. Use this to investigate a specific event in detail.

List User Roles

List all administrative roles assigned to a specific user. Roles grant administrative permissions like managing users, groups, or applications. Use this to audit what administrative access a user has.

List Group Roles

List all administrative roles assigned to a specific group. Members of the group inherit these administrative permissions. Use this to audit group-based administrative access.

Assign Role to User

Assign an administrative role to a user. This grants the user administrative permissions based on the role type. Available roles include SUPER_ADMIN, ORG_ADMIN, APP_ADMIN, USER_ADMIN, MOBILE_ADMIN, READ_ONLY_ADMIN, HELP_DESK_ADMIN, and others. Use with caution as this grants elevated privileges.

List Policies

List all policies in your Okta organization. Policies control authentication requirements, password rules, MFA enrollment, and other security settings. Filter by policy type to view specific categories. Use this to audit your security policies.

Get Policy

Get detailed information about a specific policy including its rules, conditions, and settings. Use this to review policy configuration and understand authentication or authorization requirements.