Authentik MCP Server

Manage Authentik through AI assistants. Its 40 documented tools cover authentik, users, admin, apps. It runs locally over stdio via the published package.

People connecting this server to Claude, Cursor, VS Code, or another MCP client. The project is written in TypeScript.

VERIFIED ACTIVE

LAST COMMIT 2026-08-13 · ★ 6 · #243 OF 848 MAINTAINED OTHER · VERIFIED 2026-08-25

MIT · TypeScript servers · how we verify → /methodology

01 · Install Authentik MCP Server

before you install - you'll need

Set AUTHENTIK_URL before connecting. AUTHENTIK_TOKEN, MCP_TRANSPORT are optional or environment-specific per the README.

Claude Code

claude mcp add samik081-mcp-authentik -- npx -y @samik081/mcp-authentik

Claude Desktop / Cursor / VS Code - add to config

{
  "mcpServers": {
    "samik081-mcp-authentik": {
      "command": "npx",
      "args": [
        "-y",
        "@samik081/mcp-authentik"
      ]
    }
  }
}

Same JSON for Cursor. For VS Code, rename the top-level key from `mcpServers` to `servers`.

Using another client? Same JSON, different key

Claude Desktop · mcpServers

Cursor · mcpServers

VS Code · servers

Windsurf · mcpServers

Zed · context_servers

Cline · mcpServers

Roo Code · mcpServers

Continue · mcpServers

LibreChat · mcpServers

Gemini CLI · mcpServers

Codex CLI · mcp_servers

Full setup guides: every client.

02 · Evidence

Security posture

What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.

runs as local process (stdio) - runs on your machine with your user's permissions · container (OCI image) - can be sandboxed away from your filesystem

license MIT - declared in the repository

npm package @samik081/mcp-authentik - published under the repo owner's npm scope (@samik081)

registry namespace io.github.Samik081 is GitHub-verified and matches the repo owner

03 · What Authentik MCP Server can do

Prose above is summarized from the project's README and registry record - no invented capabilities.

What you can build

With this server connected, an agent can get system information including HTTP host, runtime environment, server time, and embedded outpost status, get current system settings, update system settings (partial update), and list installed Django applications in the Authentik instance.

The 40 tools it gives your agent

Extracted from the project's README - what Authentik MCP Server lets an agent do.

authentik_admin_system_info: - Get system information including HTTP host, runtime environment, server time, and embedded outpost status
authentik_admin_version: - Get Authentik version information including current version and build hash
authentik_admin_settings_get: - Get current system settings
authentik_admin_settings_update: - Update system settings (partial update)
authentik_admin_apps: - List installed Django applications in the Authentik instance
authentik_admin_models: - List all data models available in the Authentik instance
authentik_admin_version_history: - List Authentik version history entries
authentik_admin_system_task_trigger: - Trigger all system tasks (e.g., cleanup, cache clear)
authentik_authenticators_list: - List all authenticator devices across all types for the current user
authentik_authenticators_admin_by_type_list: - List authenticator devices of a specific type (admin view)
authentik_authenticators_admin_by_type_get: - Get a single authenticator device by type and ID (admin view)
authentik_authenticators_admin_by_type_delete: - Delete an authenticator device by type and ID (admin view)

show all 40 tools

authentik_authenticators_user_by_type_list: - List authenticator devices of a specific type for the current user
authentik_users_list: - List users with optional filters for username, email, name, active status, superuser status, path, groups, and search
authentik_users_get: - Get a single user by their numeric ID
authentik_users_create: - Create a new user
authentik_users_update: - Update an existing user (partial update)
authentik_users_delete: - Delete a user by their numeric ID
authentik_users_me: - Get information about the currently authenticated user
authentik_users_set_password: - Set a new password for a user
authentik_users_create_service_account: - Create a new service account user with an optional associated group and token
authentik_users_generate_recovery_link: - Generate a temporary recovery link for a user to regain account access
authentik_users_send_recovery_email: - Send a recovery email to a user using a specified email stage
authentik_users_list_paths: - List all user paths configured in the system
authentik_users_account_lockdown: - Lock down a user account, deactivating it and terminating its active sessions
authentik_users_export: - Trigger an export of users with optional filters, producing a downloadable export artifact
authentik_groups_list: - List groups with optional filters for name, superuser status, members, and search
authentik_groups_get: - Get a single group by its UUID
authentik_groups_create: - Create a new group with optional parent group UUIDs, superuser status, users, and custom attributes
authentik_groups_update: - Update an existing group (partial update)
authentik_groups_delete: - Delete a group by its UUID
authentik_groups_add_user: - Add a user to a group by group UUID and user ID
authentik_groups_remove_user: - Remove a user from a group by group UUID and user ID
authentik_apps_list: - List applications with optional filters for name, slug, group, search, and more
authentik_apps_get: - Get a single application by its slug
authentik_apps_create: - Create a new application with name, slug, and optional provider, group, and metadata
authentik_apps_update: - Update an existing application (partial update)
authentik_apps_set_icon_url: - Set an application's icon to an external URL (sets the meta_icon field), or clear the current icon with clear: true
authentik_apps_delete: - Delete an application by its slug
authentik_apps_check_access: - Check whether a specific user has access to an application

Latest releases

v0.8.0 · 2026-08-13

add docker job timeout and make npm publish idempotent · bump MCP SDK to 1.30.0, TypeScript 7.0 and @goauthentik/api 2026.5.6, require Node >=22.12 · eliminate flaky EADDRINUSE failures in HTTP server tests

v0.7.0 · 2026-05-25

upgrade to authentik 2026.5 (@goauthentik/api 2025.6.3 → 2026.5.0)

v0.6.1 · 2026-05-23

bump @modelcontextprotocol/sdk 1.27→1.29, zod, biome, typescript, vitest

04 · Who maintains Authentik MCP Server

Authentik MCP Server is maintained by samik081. We track 4 MCP servers from samik081 - 4 actively maintained, 35 combined GitHub stars, oldest repo from Feb 2026. Full record: all servers from samik081.

05 · Facts

repository: github.com/samik081/mcp-authentik
category: other - ranked #243 of 848 actively-maintained other servers as of 2026-08-25.
release cadence: 1 release in the last 90 days (latest 2026-08-13)
registry: io.github.Samik081/mcp-authentik (active, first published 2026-03-09 · 6 versions)
packages: npm:@samik081/mcp-authentik · oci:ghcr.io/samik081/mcp-authentik:0.8.0

06 · Authentik MCP Server FAQ

Is Authentik MCP Server still maintained?

Yes - as of 2026-08-25, its last commit was 2026-08-13 and it shipped 1 release in the last 90 days. We re-verify nightly.

What can Authentik MCP Server do?

How do I install Authentik MCP Server?

Run `npx -y @samik081/mcp-authentik`. The README documents 3 environment variables (AUTHENTIK_URL, AUTHENTIK_TOKEN, MCP_TRANSPORT) to set first. Set AUTHENTIK_URL before connecting. AUTHENTIK_TOKEN, MCP_TRANSPORT are optional or environment-specific per the README. You can also paste the ready-made client config above.

Does Authentik MCP Server run locally?

Yes - it's a stdio server: it runs on your machine (via npx) with your user's permissions. Your data stays local unless the server itself calls external APIs.

07 · Alternatives to Authentik MCP Server

Alternatives to Authentik MCP Server

Maintained other servers if Authentik MCP Server isn't the fit.

More MCP servers to compare · Proxmox VE MCP Server · reMarkable MCP Server · Nfse Nacional · Agentic SSH · Sandbox API

More TypeScript MCP servers · Transcriptor MCP · Banco Inter · SandBase Harness · see all