Okta MCP Server logo

Okta MCP Server

by MCP-Mirror

This MCP server enables Claude to interact with Okta's user management system, providing user and group management capabilities. It allows Claude to retrieve and manage user and group information within Okta.

View on GitHub

Last updated: N/A

What is Okta MCP Server?

The Okta MCP Server is a tool that allows Claude to interact with and manage users and groups within an Okta organization. It provides a set of tools that Claude can use to perform actions such as retrieving user details, listing users, and listing groups.

How to use Okta MCP Server?

To use the server, you need to set up an Okta Developer Account and obtain an API token. Then, configure the Claude Desktop application to point to the server, providing the Okta domain and API token as environment variables. Once configured, Claude can use the available tools to interact with Okta.

Key features of Okta MCP Server

  • Retrieves detailed user information from Okta

  • Lists users with filtering and pagination support

  • Lists user groups with filtering and pagination support

  • Supports SCIM filter expressions

  • Includes robust error handling

Use cases of Okta MCP Server

  • Retrieving user details for a specific user ID

  • Listing all users in a specific department

  • Finding users created within a specific timeframe

  • Listing all groups containing a specific keyword

FAQ from Okta MCP Server

Why are the tools not appearing in Claude?

Check Claude Desktop logs, verify all environment variables are set correctly, and ensure the path to index.js is absolute and correct.

What should I do if I'm getting authentication errors?

Verify your API token is valid, check if OKTA_ORG_URL includes the full URL with https://, and ensure your Okta domain is correct.

How do I view the server logs?

For MacOS/Linux, use tail -n 20 -f ~/Library/Logs/Claude/mcp*.log. For Windows, use Get-Content -Path "$env:AppData\Claude\Logs\mcp*.log" -Wait -Tail 20.

What should the OKTA_ORG_URL environment variable look like?

It should be a complete URL, e.g., "https://dev-123456.okta.com".

How can I keep my API token secure?

Don't commit credentials to version control, use environment variables for sensitive data, regularly rotate API tokens, monitor API usage in the Okta Admin Console, implement rate limiting for API calls, and use minimum required permissions for the API token.