Okta MCP

Okta MCP is Okta's open-source Model Context Protocol server for the identity platform's admin management APIs. It runs against your own Okta org and lets an MCP client carry out directory and access administration in natural language: look up a user, see which groups and applications they hold, create an account, update or deactivate one, or pull system log events for an investigation. Coverage follows Okta's admin surface. Users and groups are the core, with list, read, create, update, membership changes and deactivation. Applications sit next to them, showing which apps exist and who is assigned. The System Log gives filtered access to authentication and lifecycle events. Depending on the granted scopes the server also reaches policies, device assurance, brands and email templates. Tools are registered dynamically from the scopes on the Okta admin application, so an agent never sees a tool it is not authorized to call, and the org rejects anything out of scope regardless. That scope model is the reason to use it rather than hand an agent a raw admin token. Destructive operations prompt for human confirmation before they run, and self-hosting keeps identity traffic inside your own perimeter. Realistic uses are IT helpdesk triage, joiner and leaver chores, access reviews that need group and application assignments joined together, and security work where an analyst wants to question the log in plain language rather than build a filter by hand.