Okta MCP Server
Official Okta IAM MCP. Full CRUD on users, groups, applications, and policies via the Okta Python SDK. Two authentication methods (Device Authorization Grant for interactive use, Private Key JWT for server-to-server) and integration with the MCP Elicitation API for confirming destructive operations.
“Official Okta IAM MCP. Pushed yesterday with zero tagged releases yet, which is the central caveat: this server ships from `main` and operators wanting version pinning have to commit-pin. Apache-2.0, Python, 31 stars. The technical surface is the most polished in this batch security category: full CRUD on users, groups, applications, and policies; two authentication methods (Device Authorization Grant for interactive use, Private Key JWT for server-to-server); and integration with the MCP Elicitation API for confirming destructive operations through the client. The official path for agent-driven Okta administration. Built on Okta Python SDK. Distinctive feature: destructive operations (deletes, deactivations) prompt the user for confirmation through the MCP Elicitation API before proceeding, with automatic fallback for clients that omit Elicitation support. Docker-first installation path documented; uv-based path also available.”
INSTALL THIS SERVER
{
"mcpServers": {
"okta": {
"command": "docker",
"args": [
"exec",
"-i",
"okta-mcp",
"python",
"-m",
"okta_mcp_server"
],
"env": {
"OKTA_DOMAIN": "<your-okta-domain>",
"OKTA_CLIENT_ID": "<your-client-id>"
}
}
}
}
{
"mcpServers": {
"okta": {
"command": "docker",
"args": [
"exec",
"-i",
"okta-mcp",
"python",
"-m",
"okta_mcp_server"
],
"env": {
"OKTA_DOMAIN": "<your-okta-domain>",
"OKTA_CLIENT_ID": "<your-client-id>"
}
}
}
}
{
"mcpServers": {
"okta": {
"command": "docker",
"args": [
"exec",
"-i",
"okta-mcp",
"python",
"-m",
"okta_mcp_server"
],
"env": {
"OKTA_DOMAIN": "<your-okta-domain>",
"OKTA_CLIENT_ID": "<your-client-id>"
}
}
}
}
{
"mcpServers": {
"okta": {
"command": "docker",
"args": [
"exec",
"-i",
"okta-mcp",
"python",
"-m",
"okta_mcp_server"
],
"env": {
"OKTA_DOMAIN": "<your-okta-domain>",
"OKTA_CLIENT_ID": "<your-client-id>"
}
}
}
}
{
"mcpServers": {
"okta": {
"command": "docker",
"args": [
"exec",
"-i",
"okta-mcp",
"python",
"-m",
"okta_mcp_server"
],
"env": {
"OKTA_DOMAIN": "<your-okta-domain>",
"OKTA_CLIENT_ID": "<your-client-id>"
}
}
}
}
6 TOOLS AVAILABLE
OUR ASSESSMENT
- Official Okta GitHub org publication.
- Apache-2.0 license.
- Python SDK-based (Okta official SDK).
- Two authentication methods: Device Authorization Grant (interactive) and Private Key JWT (server-to-server).
- MCP Elicitation API integration for confirming destructive operations.
- Comprehensive tool surface: full CRUD on users, groups, applications, policies.
- Docker-first installation with uv as alternative.
- 29 forks (high relative to 31 stars) signals active integration work.
- No tagged releases; runs from main. Operators wanting version pinning have to commit-pin.
- 31 stars; community traction is modest.
- 0 commits in the last 30 days; push activity reflects branch updates over new commits to main.
- Manual installation flow is heavier than a single npx or uvx command.
Okta admin operations have organisation-wide blast radius. Use Private Key JWT authentication for server-to-server agent deployments and pin the issuing application to the minimum required Okta API scopes. The MCP Elicitation API confirmation pattern is a meaningful additional safeguard against agent hallucination on destructive operations; clients that omit Elicitation support fall back to a confirmation-via-tool-call pattern. For evaluation, use Device Authorization Grant against a sandbox Okta org. Rotate Private Key JWT signing keys on schedule.
Okta administrators wanting natural-language management operations, IAM workflows where confirmation prompts on destructive operations are required, and teams already running Okta and wanting native agent integration through Okta-published code.
TECHNICAL DETAILS
ADOPTION METRICS
// Reading this31 stars and 29 forks; the high fork-to-star ratio signals active integration work despite the modest star count.
// Reading thisThird-ranked in security category. Tier 2 with the no-tagged-releases caveat; flag for re-evaluation when v0.1 ships.
SOURCES & VERIFICATION
We don't take any single directory's word for it. Before scoring, we cross-reference 5 public MCP sources, install the server ourselves against the clients we cover, and record when we last re-verified.
The same server, 5 different lenses. We reconcile these signals into our editorial score, which is why our number sometimes diverges from a directory-aggregate star count.
| Source | Their rating | Their star count | Their downloads | Last synced |
|---|---|---|---|---|
| AutomationSwitch This page | 3.7editorial | 31 | — | APR 29, 2026 |
| PulseMCP | — unrated | unavailable | unavailable | APR 29, 2026 |
| MCP.so | — unrated | unavailable | unavailable | APR 29, 2026 |
| Glama | — unrated | unavailable | unavailable | APR 29, 2026 |
| Smithery | — unrated | unavailable | unavailable | APR 29, 2026 |
| Official MCP Registry | — unrated | unavailable | unavailable | APR 29, 2026 |
// Counts are directory-reported; we don't adjust them. Discrepancies usually come from different snapshot times or star-caching.
OTHER SECURITY MCP SERVERS
Prowler MCP
Cloud Security Posture Management (CSPM) platform with 1000+ security checks across multiple cloud providers and 70+ compliance frameworks, exposed through MCP. Three deployment options: Prowler Cloud (recommended), local stdio, self-hosted HTTP. 13,717 stars, Apache-2.0.
CrowdStrike Falcon MCP
Official CrowdStrike Falcon MCP server. Connect AI agents to CrowdStrike Falcon for automated security analysis and threat hunting. 148 stars and 8 commits on main in the last 30 days.
Auth0 MCP Server
Official Auth0 MCP server connecting Claude, Cursor, Windsurf, VS Code, and Gemini to Auth0 Management APIs. Create apps, deploy Actions, debug logs, and query users with natural-language commands. Read-only mode and tool-glob filtering supported. Beta software per Auth0.
HashiCorp Vault MCP
Official HashiCorp MCP for Vault: secrets, mounts, KV, and PKI management with stdio and Streamable HTTP transports. 9 commits on main in the last 30 days. MPL-2.0 with HashiCorp official-vendor signal.
AWS IAM MCP
Official AWS Labs MCP for IAM administration: users, roles, groups, policies, inline policies, access keys, and policy simulation. Read-only mode supported via --allow-write opt-in pattern. Apache-2.0 within awslabs/mcp monorepo.
AWS CloudTrail MCP
Official AWS Labs MCP for CloudTrail: 90 days of management events via lookup_events and Trino-compatible SQL queries against CloudTrail Lake Event Data Stores. 3 commits on the server path in the last 30 days. Pairs with the IAM MCP for security audit workflows.
DISCUSS YOUR
MCP REQUIREMENTS.
Evaluating a server, scoping an internal deployment, or working out whether MCP is the right fit at all. Start the conversation and we will point you at the right piece of the ecosystem.