Auth0 MCP Server: Setup for Claude, Cursor and Other Apps

• Lists your Auth0 applications, or searches them by name

  Returns the applications in your tenant. You can ask for all of them or search by part of a name.

  Try: “Show me every Auth0 application with "api" in its name”

  Network · auth0_list_applications

• Shows the settings of one Auth0 application

  Fetches one application by client ID or name, including its callback and logout URLs and type.

  Try: “What are the callback URLs for my Customer Portal app?”

  Network · auth0_get_application

• Lists the APIs registered in your tenant

  Returns the APIs (Auth0 calls them resource servers) your tenant protects, with their identifiers.

  Try: “Which APIs are set up in my Auth0 tenant?”

  Network · auth0_list_resource_servers

• Shows the settings and scopes of one API

  Fetches one API by ID or identifier, including the scopes it defines and its token settings.

  Try: “What scopes does my Payment API define?”

  Network · auth0_get_resource_server

• Lists the login and flow actions in your tenant

  Returns the actions (small pieces of code that run during login and other flows) in your tenant.

  Try: “What actions are configured in my tenant?”

  Network · auth0_list_actions

• Shows the code and status of one action

  Fetches one action, including its code, trigger and whether it is deployed.

  Try: “Show me the code for my Add Custom Claims action”

  Network · auth0_get_action

• Lists the custom forms in your tenant

  Returns the forms (custom login, signup and similar pages) your tenant has.

  Try: “List the custom forms in my tenant”

  Network · auth0_list_forms

• Shows the settings of one form

  Fetches one form by ID with its configuration.

  Try: “Show me the configuration of my Corporate Login form”

  Network · auth0_get_form

• Searches the tenant log for sign-ins and other events

  Returns tenant log entries. You can filter, for example for failed logins in a time window.

  Try: “Find failed logins from the past 24 hours”

  Network · auth0_list_logs

• Shows one log entry in full

  Fetches a single log entry by its ID so you can see what happened.

  Try: “Get more detail on log entry abc123”

  Network · auth0_get_log

• Creates a new Auth0 application

  Creates an application of the type you pick (single-page, native, machine-to-machine and so on). The client secret is hidden in the reply and you view it in the dashboard.

  Try: “Create a single-page application called Analytics Dashboard”

  Write · auth0_create_application

• Changes the settings of an Auth0 application

  Updates an existing application, for example its callback URLs, logout URLs or metadata. The tool marks it as able to overwrite existing values.

  Try: “Add https://staging.example.com/callback to the callback URLs of my Web App”

  Write · auth0_update_application

• Registers a new API in your tenant

  Creates an API with an identifier and scopes. It signs tokens with RS256 unless you ask for something else.

  Try: “Create an API called Inventory API with read and write scopes”

  Write · auth0_create_resource_server

• Changes the settings of an existing API

  Updates an API, for example its scopes, token lifetime or signing algorithm. The tool marks it as able to overwrite existing values.

  Try: “Set the token lifetime of my Payment API to one hour”

  Write · auth0_update_resource_server

• Lets an application call an API with chosen scopes

  Creates a client grant, which authorizes an application to get tokens for an API with the scopes you name. Machine-to-machine apps need one.

  Try: “Give my Backend Service app read access to the User API”

  Write · auth0_create_application_grant

• Creates a new action

  Creates an action with code for a trigger such as post-login. It is not live until you deploy it.

  Try: “Create a post-login action that adds user roles to tokens”

  Write · auth0_create_action

• Edits the code of an existing action

  Changes an action's code or settings. The tool marks it as able to overwrite existing values.

  Try: “Fix the bug in my user enrichment action”

  Write · auth0_update_action

• Makes an action live in your tenant

  Deploys a built action so it starts running in your tenant. It is the step that changes real login behavior.

  Try: “Deploy my Add Custom Claims action”

  Write · auth0_deploy_action

• Creates a new custom form

  Creates a form in your tenant from the settings you give it.

  Try: “Create a signup form that asks for department”

  Write · auth0_create_form

• Edits an existing form

  Changes a form's settings, such as colors, fields or links. The tool marks it as able to overwrite existing values.

  Try: “Add a privacy policy link to our signup form”

  Write · auth0_update_form

• Sets up Auth0 for a project in one step

  Creates an application suited to your framework and writes its credentials to a .env file in the project folder. It only works for the frameworks it lists.

  Try: “Onboard my Next.js project with Auth0”

  Write · auth0_onboarding

• Gives the steps to add the Auth0 SDK to your project

  Fetches the framework quickstart, works out your callback URLs from the project, updates them on the Auth0 application, and returns instructions for the code changes.

  Try: “Complete the Auth0 integration for my React app”

  Write · auth0_get_quickstart_guide

• Saves an application's credentials to your project

  Writes the client ID and secret into the project's env file and adds that file to .gitignore. You must give it the project path, and it comments out clashing keys instead of deleting them.

  Try: “Save my Web App's Auth0 credentials to .env.local in this project”

  Write · auth0_save_credentials_to_file

Watch out for

• It can deploy code that runs at login

  The assistant can write an action and make it live. Ask for the code first, read it, and deploy it yourself, or use read-only mode. github.com

• It can change apps, APIs and who can call them

  It can edit callback URLs and token settings, and give an app access to an API. Review each change, and sign in with only the scopes you need. github.com

• It writes app secrets to a .env file

  Two tools save the client secret into your project folder. Check the file is in .gitignore, which the tool adds for you. github.com

• Usage stats go to a third party by default

  Anonymized data such as version, operating system and timestamp is sent. Set AUTH0_MCP_ANALYTICS to false to stop it. github.com

• Your login stays until you log out

  The sign-in token lives in the keychain until it expires. Run the logout command when you are done or switch tenants. github.com

Security advisories