Okta MCP Server
Manage an Okta org in natural language: create and update users and groups, manage applications and policies, and read system logs, with confirmation before destructive changes.
- Maintained by
- Okta
- Hosting
- Runs locally on your machine
- Authentication
- API key or credentials (environment variables)
- Last checked
Requires Python 3.13+ and an Okta app with the API scopes you want to grant; tools are enabled only for scopes you configure.
How to connect the Okta MCP server
Pick your AI client and paste the snippet. Swap the YOUR_… placeholders for your own values. New to this? Our guide to how MCP clients and servers fit together explains what each piece does.
Claude Code
claude mcp add --env OKTA_ORG_URL=https://YOUR_ORG.okta.com --env OKTA_CLIENT_ID=YOUR_CLIENT_ID --env 'OKTA_SCOPES=okta.users.read okta.groups.read' --transport stdio okta \
-- uvx okta-mcp-serverClaude Desktop
{
"mcpServers": {
"okta": {
"command": "uvx",
"args": [
"okta-mcp-server"
],
"env": {
"OKTA_ORG_URL": "https://YOUR_ORG.okta.com",
"OKTA_CLIENT_ID": "YOUR_CLIENT_ID",
"OKTA_SCOPES": "okta.users.read okta.groups.read"
}
}
}
}Fully quit and reopen Claude Desktop after saving.
Full Claude Desktop setup guide →Cursor
{
"mcpServers": {
"okta": {
"command": "uvx",
"args": [
"okta-mcp-server"
],
"env": {
"OKTA_ORG_URL": "https://YOUR_ORG.okta.com",
"OKTA_CLIENT_ID": "YOUR_CLIENT_ID",
"OKTA_SCOPES": "okta.users.read okta.groups.read"
}
}
}
}VS Code
{
"servers": {
"okta": {
"type": "stdio",
"command": "uvx",
"args": [
"okta-mcp-server"
],
"env": {
"OKTA_ORG_URL": "https://YOUR_ORG.okta.com",
"OKTA_CLIENT_ID": "YOUR_CLIENT_ID",
"OKTA_SCOPES": "okta.users.read okta.groups.read"
}
}
}
}Frequently asked questions
What is the Okta MCP server?
It is a Model Context Protocol (MCP) server — a small piece of software that gives AI assistants like Claude a secure, governed connection to Okta. Manage an Okta org in natural language: create and update users and groups, manage applications and policies, and read system logs, with confirmation before destructive changes.
Is there an official Okta MCP server?
Yes. The Okta MCP server is an official integration, maintained by the vendor or the Model Context Protocol project, which makes it the safest default for business use. It is maintained by Okta.
Is the Okta MCP server hosted, or do I run it myself?
It runs locally. Your AI client starts it on your own machine with uvx, and it talks to the client over standard input and output rather than the network.
Do I need an API key for the Okta MCP server?
Yes. The local server reads OKTA_ORG_URL, OKTA_CLIENT_ID, OKTA_SCOPES from its environment, so you create those credentials first and add them to your client's config.
What can an AI assistant actually do with Okta?
Through this server an assistant can work with manage users, manage groups, manage applications, policies, system logs — reading from and acting on Okta directly instead of you copy-pasting between windows. What you allow it to do is controlled by the permissions you grant.
How do I set this up for my business?
The setup section above has copy-paste config for Claude Code, Claude Desktop, Cursor and VS Code. Once it is running against real systems, the question becomes what catches it when it acts wrongly, which is what Crox's Safety Diagnostic looks at.
New to MCP? Start with our plain-English guide to the Model Context Protocol or see how to connect AI to your business tools without writing code .
Already running this in production?
An agent with a live connection to your tools is a model that can act. Crox looks at what catches it when it acts wrongly: the layers around it, who can stop it, and where a near miss gets reported. Two days, one team, one model.