Connectors · Accounting & finance

Kinde Management API MCP server for AI agents.

actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to Kinde Management API and the rest of your systems. It gives your agent 187 Kinde Management API actions (73 reads, 68 writes and 46 that wait for a confirmation) and holds the Kinde Management API credential itself, so the agent never does. It paces Kinde Management API's limits and records every call.

Connect Kinde Management API free See pricing

100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you.

claude mcp add --transport http actionlake https://connect.actionlake.com/mcp

187actionsin one signed file
73readlook, never change
68writecreate and update
46wait for a yesdestructive, confirmed first

Set up

Connect Kinde Management API in three steps.

01
Add actionlake to Claude.
Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us.
https://connect.actionlake.com/mcp
02
Connect Kinde Management API.
OAuth 2.0, client credentials. Paste the app's client id and secret; actionlake fetches and renews the token, and nobody has to sign in. actionlake stores what you paste write-only, sealed under your tenant's key.
- client_idClient ID of a Kinde machine-to-machine (M2M) application authorized for the Kinde Management API (Settings > APIs >…
- client_secretClient secret of that M2M application (Settings > Applications > the app > Details)
- hostWhere your Kinde Management API lives: your host
```
account { op: "connections.requirements", service: "kinde" }
# free: exactly what to paste, and what is found for you
```

Make the first call. Check before a write.

Ask in plain words; Claude picks the action. Before anything changes, check validates the call and prices it, for free.

do    { action: "kinde.users.list" }# get users · read · 1 upstream callcheck { action: "kinde.users.create", input: { … } }# free: inputs, permissions, cost and confirmations, nothing sent

Kinde Management API at a glance

Sign-in: OAuth 2.0, client credentials. Paste the app's client id and secret; actionlake fetches and renews the token, and nobody has to sign in.
You provide: client_idclient_secret
Setup fields: host
Limits we pace to: 10 calls a second, per connection
API covered: Kinde Management API v1 (OpenAPI 3.0.0), at your Kinde Management API instance's API base URL, which you enter when connecting (path /api/v1)
Built from: Kinde Management API's documentation, read 23 October 2026api-spec.kinde.com docs.kinde.com
Service file: Version 1.0.0, signed (Ed25519)
Cached reads: 69 of 73 reads, for up to 5 minutes; a write clears what it affects
Shared entities: 3, so ask can line Kinde Management API up with your other systems
Data: Processed and stored in Sydney, Australia. No US region yet

Capabilities

What an AI agent can do in Kinde Management API.

187 actions in 75 areas. Every one carries its effect, so a key can allow the reads and hold the rest.

73readlook, never change
68writecreate and update
46destructivewait for a confirmation

Connections
6
2 read · 3 write · 1 destructive
Get connections · Create Connection · Get Connection · Update Connection
API keys
5
2 read · 1 write · 2 destructive
Create API key · Get API keys · Get API key · Delete API key
API scopes
5
2 read · 2 write · 1 destructive
Create API scope · Get API scopes · Get API scope · Update API scope
Applications
5
2 read · 2 write · 1 destructive
Get applications · Create application · Get application · Update Application
Directories
5
2 read · 2 write · 1 destructive
Get SCIM directories · Get SCIM directory · Update SCIM directory · Create SCIM directory
Environment variables
5
2 read · 2 write · 1 destructive
Create environment variable · Get environment variables · Get environment variable · Update environment variable
Organizations
5
2 read · 2 write · 1 destructive
Create organization · Get organizations · Get organization · Update Organization
Roles
5
2 read · 2 write · 1 destructive
List roles · Create role · Get role · Update role

67 more areas · 146 actions

Users 5
Apis 4
Application auth logout urls 4
Application auth redirect urls 4
Environment feature flags 4
Identities 4
Organization feature flags 4
Organization invites 4
Organization users 4
Permissions 4
Properties 4
Webhooks 4
Application access roles 3
Application connections 3
Billing agreements 3
Feature flags 3
Organization connections 3
Organization properties 3
Organization user mfa 3
Organization user permissions 3
Organization user roles 3
Property categories 3
Role permissions 3
Role scopes 3
Subscribers 3
User mfa 3
User properties 3
API application scopes 2
Application properties 2
Billing meter usage 2
Business 2
Environment logos 2
Organization logos 2
Organization passkey 2
Organization user API scopes 2
Passkey 2
Role system permissions 2
User identities 2
User sessions 2
API applications 1
API keys verify 1
Application tokens 1
Billing entitlements 1
Billing one time purchases 1
Connected apps auth URL 1
Connected apps revoke 1
Connected apps token 1
Directory rotate secret 1
Environment 1
Event types 1
Events 1
Industries 1
Mfa 1
Organization handle 1
Organization mfa 1
Organization role active users count 1
Organization role users 1
Organization role users count 1
Organization sessions 1
Role users 1
Search users 1
System permissions 1
Timezones 1
User billing customer 1
User feature flags 1
User password 1
User refresh claims 1

Top actions

The Kinde Management API API, shaped for agents.

The ids your agent types, what each does, and the one name it shares with other systems. 39 of Kinde Management API's 39 action names are shared with at least one other connector, so an agent learns them once.

Action	What it does	Effect	Same name in
`kinde.users.list`Get users	Get users.	read	`identity.user.list`474 connectors
`kinde.roles.list`List roles	List roles.	read	`identity.role.list`184 connectors
`kinde.users.create`Create user	Create user.	write	`identity.user.create`262 connectors
`kinde.applications.list`Get applications	Get applications.	read	`identity.application.list`37 connectors
`kinde.roles.create`Create role	Create role.	write	`identity.role.create`105 connectors
`kinde.users.delete`Delete user	Delete user.	destructive	`identity.user.delete`253 connectors
`kinde.applications.create`Create application	Create application.	write	`identity.application.create`27 connectors
`kinde.api_keys.create`Create API key	Create API key.	write	`identity.api_key.create`100 connectors
`kinde.api_keys.list`Get API keys	Get API keys.	read	`identity.api_key.list`96 connectors
`kinde.organization_invites.create`Create organization invite	Create organization invite.	write	`identity.invitation.create`41 connectors
`kinde.permissions.list`List Permissions	List Permissions.	read	`identity.permission.list`33 connectors
`kinde.organization_invites.list`Get organization invites	Get organization invites.	read	`identity.invitation.list`33 connectors

Try it

Prompts to paste into Claude.

Each one names the Kinde Management API actions it will call, so you know what it reads and what it changes before you send it.

Readread
Who has access in Kinde Management API? List every user and their role.
callskinde.users.list
Writewrite
Create user in Kinde Management API. Show me exactly what you will send before you save it.
callskinde.users.create

Governance for Kinde Management API

Destructive actions wait for a yes.

46 Kinde Management API actions are destructive. The first 10:

Delete userkinde.users.delete
Delete rolekinde.roles.delete
Delete applicationkinde.applications.delete
Delete API keykinde.api_keys.delete
Delete organization invitekinde.organization_invites.delete
Delete Connectionkinde.connections.delete
Delete APIkinde.apis.delete
Reset specific environment MFA for a userkinde.user_mfa.reset
Rotate API keykinde.api_keys.rotate
Add role scopekinde.role_scopes.add

A destructive action runs only with confirm: true. Under the human policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after.

dokinde.users.deleteconfirm_policy: human

Delete user?

intent: the user asked me to delete user

run suspended · waiting for a named person · key kinde-agent cannot confirm itself

In the console, or from an emailed signed link.

a key for this connector

account {  op: "keys.create", name: "kinde-agent",  allowed_actions: ["kinde.*"], cap_calls: 2000,  confirm_policy: "human_for_writes",  approval_rules: [    { match: "kinde.users.delete", approver: "[email protected]" },    { match: "kinde.roles.delete", approver: "[email protected]" },    { match: "kinde.applications.delete", approver: "[email protected]" }  ]}

Illustrative. Scoped to Kinde Management API only, capped at 2,000 upstream calls, every write confirmed, and the destructive ones approved by a named person.

Cost

What Kinde Management API costs on actionlake.

Every Kinde Management API action is one upstream call, the only thing actionlake bills. Searching, check, cost, account and any call Kinde Management API refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.

1upstream call per actionall 187 Kinde Management API actions
187actions pageeach page of a long list is one call
69reads can be cacheda cache hit costs nothing
100,000calls a month, freepaid plans from US$49 a month for 250,000

See pricing

Action index

Every Kinde Management API action.

187 actions by area: the id your agent calls, what it does, and its effect.

Connections6

kinde.connections.createCreate Connectionwrite
kinde.connections.deleteDelete Connectiondestructive
kinde.connections.getGet Connectionread
kinde.connections.listGet connectionsread
kinde.connections.replaceReplace Connectionwrite
kinde.connections.updateUpdate Connectionwrite

API keys5

kinde.api_keys.createCreate API keywrite
kinde.api_keys.deleteDelete API keydestructive
kinde.api_keys.getGet API keyread
kinde.api_keys.listGet API keysread
kinde.api_keys.rotateRotate API keydestructive

API scopes5

kinde.api_scopes.createCreate API scopewrite
kinde.api_scopes.deleteDelete API scopedestructive
kinde.api_scopes.getGet API scoperead
kinde.api_scopes.listGet API scopesread
kinde.api_scopes.updateUpdate API scopewrite

Applications5

kinde.applications.createCreate applicationwrite
kinde.applications.deleteDelete applicationdestructive
kinde.applications.getGet applicationread
kinde.applications.listGet applicationsread
kinde.applications.updateUpdate Applicationwrite

Directories5

kinde.directories.createCreate SCIM directorywrite
kinde.directories.deleteDelete SCIM directorydestructive
kinde.directories.getGet SCIM directoryread
kinde.directories.listGet SCIM directoriesread
kinde.directories.updateUpdate SCIM directorywrite

Environment variables5

kinde.environment_variables.createCreate environment variablewrite
kinde.environment_variables.deleteDelete environment variabledestructive
kinde.environment_variables.getGet environment variableread
kinde.environment_variables.listGet environment variablesread
kinde.environment_variables.updateUpdate environment variablewrite

Organizations5

kinde.organizations.createCreate organizationwrite
kinde.organizations.deleteDelete Organizationdestructive
kinde.organizations.getGet organizationread
kinde.organizations.listGet organizationsread
kinde.organizations.updateUpdate Organizationwrite

Roles5

kinde.roles.createCreate rolewrite
kinde.roles.deleteDelete roledestructive
kinde.roles.getGet roleread
kinde.roles.listList rolesread
kinde.roles.updateUpdate rolewrite

Users5

kinde.users.createCreate userwrite
kinde.users.deleteDelete userdestructive
kinde.users.getGet userread
kinde.users.listGet usersread
kinde.users.updateUpdate userwrite

Apis4

kinde.apis.createCreate APIwrite
kinde.apis.deleteDelete APIdestructive
kinde.apis.getGet APIread
kinde.apis.listGet APIsread

Application auth logout urls4

kinde.application_auth_logout_urls.createAdd logout redirect URLswrite
kinde.application_auth_logout_urls.deleteDelete Logout URLsdestructive
kinde.application_auth_logout_urls.listList logout URLsread
kinde.application_auth_logout_urls.replaceReplace logout redirect URlswrite

Application auth redirect urls4

kinde.application_auth_redirect_urls.createAdd Redirect Callback URLswrite
kinde.application_auth_redirect_urls.deleteDelete Callback URLsdestructive
kinde.application_auth_redirect_urls.listList Callback URLsread
kinde.application_auth_redirect_urls.replaceReplace Redirect Callback URLswrite

Environment feature flags4

kinde.environment_feature_flags.deleteDelete Environment Feature Flag Overridedestructive
kinde.environment_feature_flags.delete_allDelete Environment Feature Flag Overridesdestructive
kinde.environment_feature_flags.getList Environment Feature Flagsread
kinde.environment_feature_flags.updateUpdate Environment Feature Flag Overridewrite

Identities4

kinde.identities.deleteDelete identitydestructive
kinde.identities.getGet identityread
kinde.identities.listGet identitiesread
kinde.identities.updateUpdate identitywrite

Organization feature flags4

kinde.organization_feature_flags.deleteDelete Organization Feature Flag Overridedestructive
kinde.organization_feature_flags.delete_allDelete Organization Feature Flag Overridesdestructive
kinde.organization_feature_flags.getList Organization Feature Flagsread
kinde.organization_feature_flags.updateUpdate Organization Feature Flag Overridewrite

Organization invites4

kinde.organization_invites.createCreate organization invitewrite
kinde.organization_invites.deleteDelete organization invitedestructive
kinde.organization_invites.getGet organization inviteread
kinde.organization_invites.listGet organization invitesread

Organization users4

kinde.organization_users.addAdd Organization Userswrite
kinde.organization_users.listGet organization usersread
kinde.organization_users.removeRemove Organization Userdestructive
kinde.organization_users.updateUpdate Organization Userswrite

Permissions4

kinde.permissions.createCreate Permissionwrite
kinde.permissions.deleteDelete Permissiondestructive
kinde.permissions.listList Permissionsread
kinde.permissions.updateUpdate Permissionwrite

Properties4

kinde.properties.createCreate Propertywrite
kinde.properties.deleteDelete Propertydestructive
kinde.properties.listList propertiesread
kinde.properties.updateUpdate Propertywrite

Webhooks4

kinde.webhooks.createCreate a Webhookwrite
kinde.webhooks.deleteDelete Webhookdestructive
kinde.webhooks.listList Webhooksread
kinde.webhooks.updateUpdate a Webhookwrite

Application access roles3

kinde.application_access_roles.addAdd application access roledestructive
kinde.application_access_roles.listGet application access rolesread
kinde.application_access_roles.removeRemove application access roledestructive

Application connections3

kinde.application_connections.enableEnable connectionwrite
kinde.application_connections.listGet connectionsread
kinde.application_connections.removeRemove connectiondestructive

Billing agreements3

kinde.billing_agreements.createCreate billing agreementwrite
kinde.billing_agreements.deleteCancel billing agreementdestructive
kinde.billing_agreements.listGet billing agreementsread

Feature flags3

kinde.feature_flags.createCreate Feature Flagwrite
kinde.feature_flags.deleteDelete Feature Flagdestructive
kinde.feature_flags.updateReplace Feature Flagwrite

Organization connections3

kinde.organization_connections.enableEnable connectionwrite
kinde.organization_connections.listGet connectionsread
kinde.organization_connections.removeRemove connectiondestructive

Organization properties3

kinde.organization_properties.listGet Organization Property Valuesread
kinde.organization_properties.updateUpdate Organization Property valueswrite
kinde.organization_properties.update_oneUpdate Organization Property valuewrite

Organization user mfa3

kinde.organization_user_mfa.getGet an organization user's MFA configurationread
kinde.organization_user_mfa.resetReset specific organization MFA for a userdestructive
kinde.organization_user_mfa.reset_allReset all organization MFA for a userdestructive

Organization user permissions3

kinde.organization_user_permissions.createAdd Organization User Permissionwrite
kinde.organization_user_permissions.deleteDelete Organization User Permissiondestructive
kinde.organization_user_permissions.listList Organization User Permissionsread

Organization user roles3

kinde.organization_user_roles.createAdd Organization User Rolewrite
kinde.organization_user_roles.deleteDelete Organization User Roledestructive
kinde.organization_user_roles.listList Organization User Rolesread

Property categories3

kinde.property_categories.createCreate Categorywrite
kinde.property_categories.listList categoriesread
kinde.property_categories.updateUpdate Categorywrite

Role permissions3

kinde.role_permissions.listGet role permissionsread
kinde.role_permissions.removeRemove role permissiondestructive
kinde.role_permissions.updateUpdate role permissionswrite

Role scopes3

kinde.role_scopes.addAdd role scopedestructive
kinde.role_scopes.listGet role scopesread
kinde.role_scopes.removeDelete role scopedestructive

Subscribers3

kinde.subscribers.createCreate Subscriberwrite
kinde.subscribers.getGet Subscriberread
kinde.subscribers.listList Subscribersread

User mfa3

kinde.user_mfa.getGet user's MFA configurationread
kinde.user_mfa.resetReset specific environment MFA for a userdestructive
kinde.user_mfa.reset_allReset all environment MFA for a userdestructive

User properties3

kinde.user_properties.listGet property valuesread
kinde.user_properties.updateUpdate Property valueswrite
kinde.user_properties.update_oneUpdate Property valuewrite

API application scopes2

kinde.api_application_scopes.addAdd scope to API applicationwrite
kinde.api_application_scopes.removeDelete API application scopedestructive

Application properties2

kinde.application_properties.listGet property valuesread
kinde.application_properties.updateUpdate propertywrite

Billing meter usage2

kinde.billing_meter_usage.createCreate meter usage recordwrite
kinde.billing_meter_usage.listGet billing meter usageread

Business2

kinde.business.getGet businessread
kinde.business.updateUpdate businesswrite

Environment logos2

kinde.environment_logos.deleteDelete logodestructive
kinde.environment_logos.getRead logo detailsread

Organization logos2

kinde.organization_logos.deleteDelete organization logodestructive
kinde.organization_logos.getRead organization logo detailsread

Organization passkey2

kinde.organization_passkey.getGet organization passkey settingsread
kinde.organization_passkey.updateUpdate organization passkey settingswrite

Organization user API scopes2

kinde.organization_user_api_scopes.addAdd scope to organization user apiwrite
kinde.organization_user_api_scopes.removeDelete scope from organization user APIdestructive

Passkey2

kinde.passkey.getGet environment passkey settingsread
kinde.passkey.updateUpdate environment passkey settingswrite

Role system permissions2

kinde.role_system_permissions.listGet role system permissionsread
kinde.role_system_permissions.updateUpdate role system permissionswrite

User identities2

kinde.user_identities.createCreate identitywrite
kinde.user_identities.listGet identitiesread

User sessions2

kinde.user_sessions.deleteDelete user sessionsdestructive
kinde.user_sessions.listGet user sessionsread

API applications1

kinde.api_applications.updateAuthorize API applicationswrite

API keys verify1

kinde.api_keys.verifyVerify API keyread

Application tokens1

kinde.application_tokens.updateUpdate application tokenswrite

Billing entitlements1

kinde.billing_entitlements.listGet billing entitlementsread

Billing one time purchases1

kinde.billing_one_time_purchases.listGet billing one-time purchasesread

Connected apps auth URL1

kinde.connected_apps.get_auth_urlGet Connected App URLread

Connected apps revoke1

kinde.connected_apps.revoke_tokenRevoke Connected App Tokendestructive

Connected apps token1

kinde.connected_apps.get_tokenGet Connected App Tokenread

Directory rotate secret1

kinde.directories.rotate_secretRotate SCIM directory secret tokendestructive

Environment1

kinde.environment.getGet environmentread

Event types1

kinde.event_types.listList Event Typesread

Events1

kinde.events.getGet Eventread

Industries1

kinde.industries.listGet industriesread

Mfa1

kinde.mfa.replaceReplace MFA Configurationwrite

Organization handle1

kinde.organization_handle.deleteDelete organization handledestructive

Organization mfa1

kinde.organization_mfa.replaceReplace Organization MFA Configurationwrite

Organization role active users count1

kinde.organization_role_active_users.countGet organization role active users countread

Organization role users1

kinde.organization_role_users.listList organization role usersread

Organization role users count1

kinde.organization_role_users.countCount organization role usersread

Organization sessions1

kinde.organization_sessions.updateUpdate organization session configurationwrite

Role users1

kinde.role_users.listList role usersread

Search users1

kinde.users.searchSearch usersread

System permissions1

kinde.system_permissions.listList system permissionsread

Timezones1

kinde.timezones.listGet timezonesread

User billing customer1

kinde.users.create_billing_customerCreate user billing customerwrite

User feature flags1

kinde.user_feature_flags.updateUpdate User Feature Flag Overridewrite

User password1

kinde.users.set_passwordSet User passwordwrite

User refresh claims1

kinde.users.refresh_claimsRefresh User Claims and Invalidate Cachewrite

Questions

The Kinde Management API MCP server, answered.

Is there a Kinde Management API MCP server for Claude?

Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 187 Kinde Management API actions across connections, API keys, API scopes and applications, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by Kinde Management API.

What do I need to connect Kinde Management API?

Client ID of a Kinde machine-to-machine (M2M) application authorized for the Kinde Management API (Settings > APIs >… and Client secret of that M2M application (Settings > Applications > the app > Details). Plus your host. The free call account { op: "connections.requirements", service: "kinde" } lists exactly what to paste.

Can an AI agent delete or change things in Kinde Management API?

Only if its key allows it, and only with an explicit confirmation. 46 Kinde Management API actions are destructive, including delete user, delete role and delete application. Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it.

Will an AI agent use up my Kinde Management API API limit?

actionlake paces every call to the limits in the Kinde Management API service file: 10 calls a second per connection. Repeated reads are answered from cache (69 Kinde Management API actions can be), which never reaches Kinde Management API.

What does a Kinde Management API action cost?

One upstream call, the only unit actionlake bills. A list that pages bills one call per page (187 Kinde Management API actions page). Cache hits, searches, dry runs and calls Kinde Management API refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.

Which Kinde Management API API does it cover?

The Kinde Management API v1 (OpenAPI 3.0.0) at your Kinde Management API instance's API base URL, which you enter when connecting (path /api/v1). It is built from Kinde Management API's documentation as read on 23 October 2026. 187 actions in 75 areas, each one in the signed service file (version 1.0.0).

Does actionlake keep my Kinde Management API data, and where?

actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to 5 minutes, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your Kinde Management API credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models.

Which AI clients can use it?

Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names.

Give your agent Kinde Management API today.

Connect Kinde Management API free See pricing

Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free.

Kinde Management API MCP server for AI agents.

Connect Kinde Management API in three steps.

Add actionlake to Claude.

Connect Kinde Management API.

Make the first call. Check before a write.

What an AI agent can do in Kinde Management API.

Connections

API keys

API scopes

Applications

Directories

Environment variables

Organizations

Roles