--- title: "authentik MCP server for AI agents - actionlake" description: "Give Claude 1,159 authentik actions through one MCP server: stages, sources, providers. Your agent never holds the credential. 100,000 calls a month free." canonical: https://actionlake.com/connectors/authentik updated: 2026-10-23 --- Connectors · MSP & PSA # authentik MCP server for AI agents. actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to authentik and the rest of your systems. It gives your agent 1,159 authentik actions (552 reads, 438 writes and 169 that wait for a confirmation) and holds the authentik credential itself, so the agent never does. It paces authentik's limits and records every call. [Connect authentik free](https://actionlake.com/console?start=sandbox) [See pricing](https://actionlake.com/pricing) 100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you. `claude mcp add --transport http actionlake https://connect.actionlake.com/mcp` the first call ``` do { action: "authentik.core.users_list", intent: "check which authentik account is connected" } # User Viewset · read · 1 upstream call ``` - 1,159 actions in one signed file - 552 read look, never change - 438 write create and update - 169 wait for a yes destructive, confirmed first Set up ## Connect authentik in three steps. 1. 01 ### Add actionlake to Claude. Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us. `https://connect.actionlake.com/mcp` 2. 02 ### Connect authentik. Bearer token. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead. actionlake stores what you paste write-only, sealed under your tenant's key. - `access_token` authentik API token, sent as `Authorization - `host` Where your authentik lives: your host ``` account { op: "connections.requirements", service: "authentik" } # free: exactly what to paste, and what is found for you ``` 3. 03 ### Make the first call. Check before a write. Ask in plain words; Claude picks the action. Before anything changes, `check` validates the call and prices it, for free. ``` do { action: "authentik.core.users_list" } # user viewset · read · 1 upstream call check { action: "authentik.core.users_create", input: { … } } # free: inputs, permissions, cost and confirmations, nothing sent ``` authentik at a glance **Sign-in** Bearer token. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead. **You provide** `access_token` **Setup fields** `host` **Limits we pace to** 20 calls a second, per connection **API covered** Authentik API v3, schema of release 2026.8.5 (OpenAPI 3.0.3), at your authentik instance's API base URL, which you enter when connecting (path /api/v3) **Built from** authentik's documentation, read 23 October 2026[OpenAPI spec (GitHub)](https://raw.githubusercontent.com/goauthentik/authentik/version/2026.8.5/schema.yml) [docs.goauthentik.io](https://docs.goauthentik.io/developer-docs/api/) **Service file** Version 1.0.0, signed (Ed25519) **Cached reads** 517 of 552 reads, for up to 5 minutes; a write clears what it affects **Shared entities** 5, so ask can line authentik up with your other systems **Data** Processed and stored in Sydney, Australia. No US region yet Capabilities ## What an AI agent can do in authentik. 1,159 actions in 25 areas. Every one carries its effect, so a key can allow the reads and hold the rest. - **552** read look, never change - **438** write create and update - **169** destructive wait for a confirmation 1. ### Stages 209 93 read · 87 write · 29 destructive Invitation Viewset · Invitation Viewset · Send invitation link via email to one or more addresses · Invitation Viewset 2. ### Sources 172 79 read · 69 write · 24 destructive Source Viewset · Source Viewset · Prevent deletion of built-in sources · Get all creatable types 3. ### Providers 128 64 read · 45 write · 19 destructive Provider Viewset · Get all creatable types · Get a list of all objects that use this object · GoogleWorkspaceProvider Viewset 4. ### Propertymappings 111 50 read · 45 write · 16 destructive PropertyMapping Viewset · Test Property Mapping · Get all creatable types · Get a list of all objects that use this object 5. ### Authenticators 83 37 read · 33 write · 13 destructive Get all devices for current user · Viewset for Duo authenticator devices (for admins) · Viewset for Duo authenticator devices (for admins) · Viewset for email authenticator devices (for admins) 6. ### Policies 76 37 read · 27 write · 12 destructive Policy Viewset · Test policy · Get all creatable types · Get a list of all objects that use this object 7. ### Core 75 33 read · 31 write · 11 destructive User Viewset · Group Viewset · Get information about current user · User Viewset 8. ### Endpoints 63 31 read · 23 write · 9 destructive Agents connectors create (endpoints) · Agents connectors list (endpoints) · Generate configuration for MDM systems to deploy authentik Agent · Get a list of all objects that use this object **17 more areas · 242 actions** - Outposts **34** - Events **33** - Requests **29** - Rbac **22** - Flows **20** - Lifecycle **14** - Admin **13** - Rac **13** - Oauth2 **12** - Crypto **10** - Enterprise **10** - Tasks **10** - Managed **9** - Agents **6** - Reports **3** - SSF **3** - Root **1** Top actions ## The authentik API, shaped for agents. The ids your agent types, what each does, and the one name it shares with other systems. 52 of authentik's 52 action names are shared with at least one other connector, so an agent learns them once. | Action | What it does | Effect | Same name in | | --- | --- | --- | --- | | `authentik.core.users_list` User Viewset | User Viewset | read | `identity.user.list` 474 connectors | | `authentik.core.groups_list` Group Viewset | Group Viewset | read | `identity.group.list` 262 connectors | | `authentik.rbac.roles_list` Role viewset | Role viewset | read | `identity.role.list` 184 connectors | | `authentik.core.users_me_retrieve` Get information about current user | Get information about current user | read | `identity.current_user.get` 307 connectors | | `authentik.core.users_create` User Viewset | User Viewset | write | `identity.user.create` 262 connectors | | `authentik.core.applications_list` Custom list method that checks Policy based access instead of guardian | Custom list method that checks Policy based access instead of guardian | read | `identity.application.list` 37 connectors | | `authentik.core.groups_create` Group Viewset | Group Viewset | write | `identity.group.create` 205 connectors | | `authentik.rbac.roles_create` Role viewset | Role viewset | write | `identity.role.create` 105 connectors | | `authentik.core.users_destroy` User Viewset | User Viewset | destructive | `identity.user.delete` 253 connectors | | `authentik.core.applications_create` Application Viewset | Application Viewset | write | `identity.application.create` 27 connectors | | `authentik.core.tokens_create` Token Viewset | Token Viewset | write | `identity.api_key.create` 100 connectors | | `authentik.core.tokens_list` Token Viewset | Token Viewset | read | `identity.api_key.list` 96 connectors | Try it ## Prompts to paste into Claude. Each one names the authentik actions it will call, so you know what it reads and what it changes before you send it. 1. Read read Who has access in authentik? List every user and their role. calls `authentik.core.users_list` 2. Write write User Viewset in authentik. Show me exactly what you will send before you save it. calls `authentik.core.users_create` Governance for authentik ## Destructive actions wait for a yes. 169 authentik actions are destructive. The first 10: - User Viewset `authentik.core.users_destroy` - Group Viewset `authentik.core.groups_destroy` - Role viewset `authentik.rbac.roles_destroy` - Application Viewset `authentik.core.applications_destroy` - Token Viewset `authentik.core.tokens_destroy` - Remove user from group `authentik.core.groups_remove_user_create` - Remove user from role `authentik.rbac.roles_remove_user_create` - Prevent deletion of built-in sources `authentik.sources.all_destroy` - AuthenticatedSession Viewset `authentik.core.authenticated_sessions_destroy` - Invitation Viewset `authentik.stages.invitation_invitations_destroy` A destructive action runs only with `confirm: true`. Under the `human` policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after. do authentik.core.users_destroy confirm_policy: **human** User Viewset? **intent:** the user asked me to user Viewset run suspended · waiting for a named person · key _authentik-agent_ cannot confirm itself In the console, or from an emailed signed link. a key for this connector ``` account { op: "keys.create", name: "authentik-agent", allowed_actions: ["authentik.*"], cap_calls: 2000, confirm_policy: "human_for_writes", approval_rules: [ { match: "authentik.core.users_destroy", approver: "lead@example.com" }, { match: "authentik.core.groups_destroy", approver: "lead@example.com" }, { match: "authentik.rbac.roles_destroy", approver: "lead@example.com" } ] } ``` Illustrative. Scoped to authentik only, capped at 2,000 upstream calls, every write confirmed, and the destructive ones approved by a named person. Cost ## What authentik costs on actionlake. Every authentik action is one upstream call, the only thing actionlake bills. Searching, `check`, `cost`, `account` and any call authentik refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000. - 1 upstream call per action all 1,159 authentik actions - 1,159 actions page each page of a long list is one call - 517 reads can be cached a cache hit costs nothing - 100,000 calls a month, free paid plans from US$49 a month for 250,000 [See pricing](https://actionlake.com/pricing) Action index ## Every authentik action. 1,159 actions by area: the id your agent calls, what it does, and its effect. **Stages 209** - `authentik.stages.invitation_invitations_create` Invitation Viewset write - `authentik.stages.invitation_invitations_destroy` Invitation Viewset destructive - `authentik.stages.invitation_invitations_list` Invitation Viewset read - `authentik.stages.invitation_invitations_partial_update` Invitation Viewset write - `authentik.stages.invitation_invitations_retrieve` Invitation Viewset read - `authentik.stages.invitation_invitations_send_email_create` Send invitation link via email to one or more addresses write - and 203 more in this area **Sources 172** - `authentik.sources.all_destroy` Prevent deletion of built-in sources destructive - `authentik.sources.all_list` Source Viewset read - `authentik.sources.all_retrieve` Source Viewset read - `authentik.sources.all_types_list` Get all creatable types read - `authentik.sources.oauth_create` Source Viewset write - `authentik.sources.oauth_destroy` Source Viewset destructive - and 166 more in this area **Providers 128** - `authentik.providers.all_destroy` Provider Viewset destructive - `authentik.providers.all_list` Provider Viewset read - `authentik.providers.all_retrieve` Provider Viewset read - `authentik.providers.all_types_list` Get all creatable types read - `authentik.providers.all_used_by_list` Get a list of all objects that use this object read - `authentik.providers.google_workspace_create` GoogleWorkspaceProvider Viewset write - and 122 more in this area **Propertymappings 111** - `authentik.propertymappings.all_destroy` PropertyMapping Viewset destructive - `authentik.propertymappings.all_list` PropertyMapping Viewset read - `authentik.propertymappings.all_retrieve` PropertyMapping Viewset read - `authentik.propertymappings.all_test_create` Test Property Mapping read - `authentik.propertymappings.all_types_list` Get all creatable types read - `authentik.propertymappings.all_used_by_list` Get a list of all objects that use this object read - and 105 more in this area **Authenticators 83** - `authentik.authenticators.admin_all_list` Get all devices for current user read - `authentik.authenticators.admin_duo_create` Viewset for Duo authenticator devices (for admins) write - `authentik.authenticators.admin_duo_destroy` Viewset for Duo authenticator devices (for admins) destructive - `authentik.authenticators.admin_duo_list` Viewset for Duo authenticator devices (for admins) read - `authentik.authenticators.admin_duo_partial_update` Viewset for Duo authenticator devices (for admins) write - `authentik.authenticators.admin_duo_retrieve` Viewset for Duo authenticator devices (for admins) read - and 77 more in this area **Policies 76** - `authentik.policies.all_destroy` Policy Viewset destructive - `authentik.policies.all_list` Policy Viewset read - `authentik.policies.all_retrieve` Policy Viewset read - `authentik.policies.all_test_create` Test policy read - `authentik.policies.all_types_list` Get all creatable types read - `authentik.policies.all_used_by_list` Get a list of all objects that use this object read - and 70 more in this area **Core 75** - `authentik.core.groups_create` Group Viewset write - `authentik.core.groups_destroy` Group Viewset destructive - `authentik.core.groups_list` Group Viewset read - `authentik.core.groups_partial_update` Group Viewset write - `authentik.core.groups_retrieve` Group Viewset read - `authentik.core.groups_update` Group Viewset write - and 69 more in this area **Endpoints 63** - `authentik.endpoints.agents_connectors_create` Agents connectors create (endpoints) write - `authentik.endpoints.agents_connectors_list` Agents connectors list (endpoints) read - `authentik.endpoints.agents_connectors_mdm_config_create` Generate configuration for MDM systems to deploy authentik Agent read - `authentik.endpoints.agents_connectors_used_by_list` Get a list of all objects that use this object read - `authentik.endpoints.agents_enrollment_tokens_used_by_list` Get a list of all objects that use this object read - `authentik.endpoints.agents_psso_ise_used_by_list` Get a list of all objects that use this object read - and 57 more in this area **Outposts 34** - `authentik.outposts.instances_create` Outpost Viewset write - `authentik.outposts.instances_destroy` Outpost Viewset destructive - `authentik.outposts.instances_health_list` Get outposts current health read - `authentik.outposts.instances_list` Outpost Viewset read - `authentik.outposts.instances_partial_update` Outpost Viewset write - `authentik.outposts.instances_retrieve` Outpost Viewset read - and 28 more in this area **Events 33** - `authentik.events.events_actions_list` Get all actions read - `authentik.events.events_create` Event Read-Only Viewset write - `authentik.events.events_destroy` Event Read-Only Viewset destructive - `authentik.events.events_list` Event Read-Only Viewset read - `authentik.events.events_partial_update` Event Read-Only Viewset write - `authentik.events.events_retrieve` Event Read-Only Viewset read - and 27 more in this area **Requests 29** - `authentik.requests.grant_requests_agent_create` Delegate access an agent's owner already holds to the agent, time-boxed write - `authentik.requests.grant_requests_create` Grant requests create write - `authentik.requests.grant_requests_list` Grant requests list read - `authentik.requests.grant_requests_pending_review_list` List pending grant requests the current user is eligible to review read - `authentik.requests.grant_requests_destroy` Grant requests destroy destructive - `authentik.requests.grant_requests_fulfill_partial_update` Grant requests fulfill partial update write - and 23 more in this area **Rbac 22** - `authentik.rbac.roles_create` Role viewset write - `authentik.rbac.roles_destroy` Role viewset destructive - `authentik.rbac.roles_list` Role viewset read - `authentik.rbac.roles_partial_update` Role viewset write - `authentik.rbac.roles_retrieve` Role viewset read - `authentik.rbac.roles_update` Role viewset write - and 16 more in this area **Flows 20** - `authentik.flows.bindings_create` FlowStageBinding Viewset write - `authentik.flows.bindings_destroy` FlowStageBinding Viewset destructive - `authentik.flows.bindings_list` FlowStageBinding Viewset read - `authentik.flows.bindings_partial_update` FlowStageBinding Viewset write - `authentik.flows.bindings_retrieve` FlowStageBinding Viewset read - `authentik.flows.bindings_update` FlowStageBinding Viewset write - and 14 more in this area **Lifecycle 14** - `authentik.lifecycle.iterations_create` Iterations create (lifecycle) write - `authentik.lifecycle.iterations_list_latest` Iterations list latest (lifecycle) read - `authentik.lifecycle.iterations_list_open` Iterations list open (lifecycle) read - `authentik.lifecycle.reviews_create` Reviews create (lifecycle) write - `authentik.lifecycle.rules_create` Rules create write - `authentik.lifecycle.rules_destroy` Rules destroy destructive - and 8 more in this area **Admin 13** - `authentik.admin.apps_list` Read-only view list all installed apps read - `authentik.admin.file_list` List files from storage backend read - `authentik.admin.file_used_by_list` File used by list read - `authentik.admin.models_list` Read-only view list all installed models read - `authentik.admin.file_destroy` Delete file from storage backend destructive - `authentik.admin.settings_partial_update` Settings view write - and 7 more in this area **Rac 13** - `authentik.rac.connection_tokens_destroy` ConnectionToken Viewset destructive - `authentik.rac.connection_tokens_list` ConnectionToken Viewset read - `authentik.rac.connection_tokens_partial_update` ConnectionToken Viewset write - `authentik.rac.connection_tokens_retrieve` ConnectionToken Viewset read - `authentik.rac.connection_tokens_update` ConnectionToken Viewset write - `authentik.rac.connection_tokens_used_by_list` Get a list of all objects that use this object read - and 7 more in this area **Oauth2 12** - `authentik.oauth2.access_tokens_destroy` AccessToken Viewset destructive - `authentik.oauth2.access_tokens_list` AccessToken Viewset read - `authentik.oauth2.access_tokens_retrieve` AccessToken Viewset read - `authentik.oauth2.access_tokens_used_by_list` Get a list of all objects that use this object read - `authentik.oauth2.authorization_codes_destroy` AuthorizationCode Viewset destructive - `authentik.oauth2.authorization_codes_list` AuthorizationCode Viewset read - and 6 more in this area **Crypto 10** - `authentik.crypto.certificatekeypairs_create` CertificateKeyPair Viewset write - `authentik.crypto.certificatekeypairs_destroy` CertificateKeyPair Viewset destructive - `authentik.crypto.certificatekeypairs_list` CertificateKeyPair Viewset read - `authentik.crypto.certificatekeypairs_partial_update` CertificateKeyPair Viewset write - `authentik.crypto.certificatekeypairs_retrieve` CertificateKeyPair Viewset read - `authentik.crypto.certificatekeypairs_update` CertificateKeyPair Viewset write - and 4 more in this area **Enterprise 10** - `authentik.enterprise.license_create` License Viewset write - `authentik.enterprise.license_destroy` License Viewset destructive - `authentik.enterprise.license_forecast_retrieve` Forecast how many users will be required in a year read - `authentik.enterprise.license_list` License Viewset read - `authentik.enterprise.license_partial_update` License Viewset write - `authentik.enterprise.license_retrieve` License Viewset read - and 4 more in this area **Tasks 10** - `authentik.tasks.schedules_list` Schedules list read - `authentik.tasks.schedules_partial_update` Schedules partial update write - `authentik.tasks.tasks_list` Tasks list read - `authentik.tasks.workers_list` Get currently connected worker count read - `authentik.tasks.schedules_retrieve` Schedules retrieve read - `authentik.tasks.schedules_send_create` Trigger this schedule now write - and 4 more in this area **Managed 9** - `authentik.managed.blueprints_available_list` Get blueprints read - `authentik.managed.blueprints_create` Blueprint instances write - `authentik.managed.blueprints_destroy` Blueprint instances destructive - `authentik.managed.blueprints_list` Blueprint instances read - `authentik.managed.blueprints_partial_update` Blueprint instances write - `authentik.managed.blueprints_retrieve` Blueprint instances read - and 3 more in this area **Agents 6** - `authentik.agents.agents_create` Admin-provisioned delegate identities write - `authentik.agents.agents_destroy` Admin-provisioned delegate identities destructive - `authentik.agents.agents_list` Admin-provisioned delegate identities read - `authentik.agents.agents_partial_update` Admin-provisioned delegate identities write - `authentik.agents.agents_retrieve` Admin-provisioned delegate identities read - `authentik.agents.agents_update` Admin-provisioned delegate identities write **Reports 3** - `authentik.reports.exports_destroy` Exports destroy destructive - `authentik.reports.exports_list` Exports list read - `authentik.reports.exports_retrieve` Exports retrieve read **SSF 3** - `authentik.ssf.streams_destroy` SSFStream Viewset destructive - `authentik.ssf.streams_list` SSFStream Viewset read - `authentik.ssf.streams_retrieve` SSFStream Viewset read **Root 1** - `authentik.root.config_retrieve` Retrieve public configuration options read This index shows a sample of each area. All 1,159 actions, with their inputs and prices, are in the [catalogue](https://actionlake.com/console/catalogue), which a free sandbox key can search. Questions ## The authentik MCP server, answered. **Is there an authentik MCP server for Claude?** Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 1,159 authentik actions across stages, sources, providers and propertymappings, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by authentik. **What do I need to connect authentik?** Authentik API token, sent as `Authorization. Plus your host. The free call account { op: "connections.requirements", service: "authentik" } lists exactly what to paste. **Can an AI agent delete or change things in authentik?** Only if its key allows it, and only with an explicit confirmation. 169 authentik actions are destructive, including user Viewset, group Viewset and role viewset. Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it. **Will an AI agent use up my authentik API limit?** actionlake paces every call to the limits in the authentik service file: 20 calls a second per connection. Repeated reads are answered from cache (517 authentik actions can be), which never reaches authentik. **What does an authentik action cost?** One upstream call, the only unit actionlake bills. A list that pages bills one call per page (1,159 authentik actions page). Cache hits, searches, dry runs and calls authentik refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000. **Which authentik API does it cover?** The authentik API v3, schema of release 2026.8.5 (OpenAPI 3.0.3) at your authentik instance's API base URL, which you enter when connecting (path /api/v3). It is built from authentik's documentation as read on 23 October 2026. 1,159 actions in 25 areas, each one in the signed service file (version 1.0.0). **Does actionlake keep my authentik data, and where?** actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to 5 minutes, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your authentik credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models. **Which AI clients can use it?** Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names. ## More connectors like authentik Shares the most action names with - [Octopus Deploy 21](https://actionlake.com/connectors/octopus-deploy) - [NetBox 20](https://actionlake.com/connectors/netbox) - [SUSE Rancher Manager 19](https://actionlake.com/connectors/suse-rancher-manager) - [Zabbix 17](https://actionlake.com/connectors/zabbix) - [Delinea Secret Server 16](https://actionlake.com/connectors/delinea-secret-server) - [Commvault Cloud 15](https://actionlake.com/connectors/commvault-cloud) Joins with, on shared entities - [Cloudflare 5](https://actionlake.com/connectors/cloudflare) - [Rubrik Security Cloud 4](https://actionlake.com/connectors/rubrik-security-cloud) - [SailPoint Identity Security Cloud 4](https://actionlake.com/connectors/sailpoint-identity-security-cloud) - [Spacelift 4](https://actionlake.com/connectors/spacelift) - [PingOne Platform API 4](https://actionlake.com/connectors/pingone-platform-api) - [Okta 4](https://actionlake.com/connectors/okta) Browse - [All MSP & PSA connectors](https://actionlake.com/connectors/category/msp-and-psa) - [All connectors](https://actionlake.com/connectors) - [How actionlake compares](https://actionlake.com/compare) actionlake is independent. It is not made or endorsed by authentik; the name is the vendor's own. Counts are from the authentik service file, version 1.0.0. ## Give your agent authentik today. [Connect authentik free](https://actionlake.com/console?start=sandbox) [See pricing](https://actionlake.com/pricing) Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free. --- Source: https://actionlake.com/connectors/authentik More: https://actionlake.com/llms.txt