Authentik MCP Server
Wire Authentik identity flows into your build by having the agent provision apps, flows, and policies through MCP while you ship SSO for your SaaS.
Overview
Authentik MCP Server is an MCP server for the Build phase that exposes Authentik IdP management to agents using URL and API token authentication.
What is this MCP server?
- Manage Authentik through AI assistants via MCP
- AUTHENTIK_URL and AUTHENTIK_TOKEN required for API access
- npm @samik081/mcp-authentik v0.7.0 and OCI ghcr.io/samik081/mcp-authentik:0.7.0
- stdio transport for agent hosts
- Suited to self-hosted Authentik on your own domain
- Published version 0.7.0
- 2 required secrets/config vars: AUTHENTIK_URL, AUTHENTIK_TOKEN
- npm and OCI publish channels
Community signal: 3 GitHub stars.
What problem does it solve?
Shipping SSO means bouncing between Authentik admin UI, docs, and your repo while the agent cannot safely apply IdP changes in one place.
Who is it for?
Indie SaaS builders self-hosting Authentik who want faster IdP configuration during OAuth, SAML, or social login integration.
Skip if: Teams on Auth0 or Clerk only, production changes without review, or environments where API tokens cannot be stored in local MCP config.
What do I get? / Deliverables
With AUTHENTIK_URL and AUTHENTIK_TOKEN configured, your agent can manage Authentik resources over MCP as you integrate authentication.
- Agent-executed Authentik configuration aligned with app integration
- Reduced context switch between IdP admin and codebase
- Repeatable SSO setup steps captured in agent transcripts
Recommended MCP Servers
Journey fit
How it compares
Authentik API bridge for agents, not a generic OAuth tutorial skill or end-user login UI generator.
Common Questions / FAQ
Who is mcp-authentik for?
Solo developers running Authentik who integrate SSO into SaaS or APIs and already use MCP in Claude Code or Cursor.
When should I use mcp-authentik?
Use it in Build while creating applications, providers, and policies in Authentik alongside your app’s auth code.
How do I add mcp-authentik to my agent?
Export AUTHENTIK_URL and AUTHENTIK_TOKEN, then add @samik081/mcp-authentik or the matching ghcr.io image with stdio in your MCP settings.