MCP server · Okta
Okta Open Source MCP Server
⚠ No independent security audit: entries summarize official sources only. Review permissions and code before installing.
- Type
- MCP server
- Tasks
- Infra & deployUtilities
- Compatible agents
- Claude Desktop, VS Code (source: clients with config examples in the official README (okta/okta-mcp-server); other MCP clients via the generic stdio config)
- Verdict
- Pick it to audit users, groups, apps and sign-in logs in an Okta org from your agent; grant only read scopes in OKTA_SCOPES and try it on a preview/dev org first.
- Permissions
- Calls Okta Admin Management APIs on your org: CRUD on users, groups, applications, policies, device assurance policies, brands, themes, email templates and domains, plus system log queries. Only tools whose OAuth scopes are in OKTA_SCOPES are loaded (e.g. `okta.users.read okta.groups.read` for read-only); deletes and deactivations ask for confirmation via MCP elicitation. Consumes Management API rate limits.
- Credentials
- An Okta org plus an Okta API service app: OKTA_ORG_URL, OKTA_CLIENT_ID and OKTA_SCOPES, using Device Authorization Grant (browser login, tokens in the system keyring) or Private Key JWT (OKTA_PRIVATE_KEY + OKTA_KEY_ID) for browserless use.
- Maintenance
- Generally available; official repo okta/okta-mcp-server, release v1.1.7 on 2026-09-29 (PyPI okta-mcp-server 1.1.7); documented at developer.okta.com. Okta also offers a separate Okta Managed MCP Server.
- License
- Apache-2.0
- Install
- With uv: stdio command `uvx okta-mcp-server` (Python 3.13+) with env OKTA_ORG_URL, OKTA_CLIENT_ID, OKTA_SCOPES (add OKTA_PRIVATE_KEY/OKTA_KEY_ID for Private Key JWT). Docker (recommended in README): clone the repo, `docker-compose up -d`, then point the client at `docker run -i --rm ... okta-mcp-server`. Pin versions with `okta-mcp-server@1.1.7`. Official install docs ↗
- Source
- https://github.com/okta/okta-mcp-server
- Verified on
- 2026-10-25
Compared in: Best MCP servers for Infra & deploy · Best MCP servers for Utilities
Badge for your README
Maintain this project? Show that it's listed here. The badge only says it's listed; it is not a security review or an endorsement.
