Skip to content
actionlake
Start free

Connectors · Identity & security

Stytch MCP server for AI agents.

actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to Stytch and the rest of your systems. It gives your agent 184 Stytch actions (46 reads, 100 writes and 38 that wait for a confirmation) and holds the Stytch credential itself, so the agent never does. It paces Stytch's limits and records every call.

Connect Stytch freeSee pricing

100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you.

claude mcp add --transport http actionlake https://connect.actionlake.com/mcp
the first call
do {  action: "stytch.fraud_rules.list",  intent: "check which Stytch account is connected"}# List fraud rules · read · 1 upstream call
  • 184actionsin one signed file
  • 46readlook, never change
  • 100writecreate and update
  • 38wait for a yesdestructive, confirmed first

Set up

Connect Stytch in three steps.

  1. 01

    Add actionlake to Claude.

    Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us.

    https://connect.actionlake.com/mcp
  2. 02

    Connect Stytch.

    Username and secret. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead. actionlake stores what you paste write-only, sealed under your tenant's key.

    • project_idStytch project ID (Dashboard > Project settings > API keys), e.g. project-live-… or project-test-…
    • secretStytch project secret from the same API keys page
    • environmentYour Stytch environment
    account { op: "connections.requirements", service: "stytch" }
# free: exactly what to paste, and what is found for you
  3. 03

    Make the first call. Check before a write.

    Ask in plain words; Claude picks the action. Before anything changes, check validates the call and prices it, for free.

    do    { action: "stytch.fraud_rules.list" }# list fraud rules · read · 1 upstream callcheck { action: "stytch.users.create", input: { … } }# free: inputs, permissions, cost and confirmations, nothing sent

Stytch at a glance

Sign-in
Username and secret. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead.
You provide
project_idsecret
Setup fields
environment
Limits we pace to
100 calls a second, per connection
API covered
Stytch API 2.1.1 (OpenAPI 3.0.3, stytchauth/stytch-openapi), at your region's stytch.com address, set when you connect
Built from
Stytch's documentation, read 23 October 2026OpenAPI spec (GitHub)stytch.com
Service file
Version 1.0.0, signed (Ed25519)
Cached reads
30 of 46 reads, for up to 5 minutes; a write clears what it affects
Shared entities
3, so ask can line Stytch up with your other systems
Data
Processed and stored in Sydney, Australia. No US region yet

Capabilities

What an AI agent can do in Stytch.

184 actions in 35 areas. Every one carries its effect, so a key can allow the reads and hold the rest.

  • 46readlook, never change
  • 100writecreate and update
  • 38destructivewait for a confirmation

  1. Members

    21

    10 read · 5 write · 6 destructive

    Search members across organizations · Create a member · List a member's Connected Apps · Get a member by ID without an organization ID

  2. Users

    17

    3 read · 3 write · 11 destructive

    Create a user · Get a user · Update a user · Delete a user

  3. B2B passwords

    11

    1 read · 10 write · 0 destructive

    Authenticate a member password · Authenticate a password for discovery · Start a discovery password reset by email · Migrate a member password hash

  4. SSO connections

    11

    1 read · 7 write · 3 destructive

    List an organization's SSO connections · Delete an SSO connection · Create an external SSO connection · Create an OIDC SSO connection

  5. Organizations

    9

    5 read · 2 write · 2 destructive

    Search organizations · Create an organization · List Connected Apps used by an organization · Get an organization

  6. B2B sessions

    8

    2 read · 5 write · 1 destructive

    Attest a member session from a trusted token · Exchange a member session for another organization · Exchange a Connected Apps access token for a member session · List a member's active sessions

  7. Connected app clients

    8

    2 read · 2 write · 4 destructive

    Create a Connected App client · Get a Connected App client · Search Connected App clients · Update a Connected App client

  8. M2M clients

    8

    2 read · 2 write · 4 destructive

    Create an M2M client · Get an M2M client · Update an M2M client · Delete an M2M client

27 more areas · 91 actions
  • Passwords 8
  • Scim connections 8
  • Otps 7
  • Sessions 7
  • B2B otps 6
  • Magic links 6
  • Webauthn 6
  • B2B magic links 5
  • Totps 4
  • B2B rbac 3
  • B2B recovery codes 3
  • B2B totps 3
  • Discovery 3
  • B2B idp oauth 2
  • B2B oauth 2
  • Crypto wallets 2
  • Fraud rules 2
  • Fraud verdict reasons 2
  • Idp oauth 2
  • Oauth 2
  • Project 2
  • B2B impersonation 1
  • Fraud email 1
  • Fraud fingerprints 1
  • Impersonation 1
  • Rbac 1
  • SSO 1

Top actions

The Stytch API, shaped for agents.

The ids your agent types, what each does, and the one name it shares with other systems. 18 of Stytch's 19 action names are shared with at least one other connector, so an agent learns them once.

ActionWhat it doesEffectSame name in
stytch.users.createCreate a userCreate a user.writeidentity.user.create262 connectors
stytch.users.getGet a userGet a user.readidentity.user.get399 connectors
stytch.connected_app_clients.createCreate a Connected App clientCreate a Connected App client.writeidentity.application.create27 connectors
stytch.connected_app_clients.getGet a Connected App clientGet a Connected App client.readidentity.application.get33 connectors
stytch.m2m_clients.createCreate an M2M clientCreate an M2M client.writeidentity.service_account.create32 connectors
stytch.sso_connections.listList an organization's SSO connectionsList an organization's SSO connections.readidentity.identity_provider.list22 connectors
stytch.sessions.listList a user's active sessionsList a user's active sessions.readidentity.user_session.list16 connectors
stytch.m2m_clients.getGet an M2M clientGet an M2M client.readidentity.service_account.get28 connectors
stytch.sso_connections.deleteDelete an SSO connectionDelete an SSO connection.destructiveidentity.identity_provider.delete19 connectors
stytch.sessions.revokeRevoke a sessionRevoke a session.destructiveidentity.user_session.revoke17 connectors
stytch.members.searchSearch members across organizationsSearch members across organizations.readthis connector
stytch.organizations.searchSearch organizationsSearch organizations.readthis connector

Try it

Prompts to paste into Claude.

Each one names the Stytch actions it will call, so you know what it reads and what it changes before you send it.

  1. Readread

    List the companies in Stytch and flag likely duplicates by name or domain.

    callsstytch.organizations.search

  2. Writewrite

    Create a user in Stytch. Show me exactly what you will send before you save it.

    callsstytch.users.create

  3. Across systemsread

    Which Stytch companies have invoices in ConnectWise PSA, and how many each?

    callsstytch.organizations.searchconnectwise_manage.invoices.list

Across your systems

Stytch, joined to the rest of your business.

One ask fetches from Stytch and another system, joins the rows on the same customer on our side, and hands your agent the answer, not every row.

  • Which Stytch companies have invoices in ConnectWise PSA, and how many each?

    stytch.organizations.search + connectwise_manage.invoices.list, on crm.company · ConnectWise PSA

  • Which Stytch companies have invoices in NetSuite, and how many each?

    stytch.organizations.search + netsuite.views.invoices, on crm.company · NetSuite

Also mapped by other connectorsidentity.user 517crm.company 227identity.application 20
ask
ask {  intent: "which Stytch companies have invoices in ConnectWise PSA, and how many each",  steps: [    { action: "stytch.organizations.search", as: "co", input: {}, limit: 100, max_pages: 5 },    { action: "connectwise_manage.invoices.list", as: "inv", input: {}, limit: 100, max_pages: 5 },    { join: {        left: "co",        right: "inv",        on: "crm.company",        group_by: "co.name",        select: ["co.name", "count(inv.id) as invoices"]    } }  ]}
Example. Run it through check first: it validates the steps and prices them, and it is free.

Governance for Stytch

Destructive actions wait for a yes.

38 Stytch actions are destructive. The first 10:

  • Delete a userstytch.users.delete
  • Delete a Connected App clientstytch.connected_app_clients.delete
  • Delete an M2M clientstytch.m2m_clients.delete
  • Delete an SSO connectionstytch.sso_connections.delete
  • Revoke a sessionstytch.sessions.revoke
  • Delete a memberstytch.members.delete
  • Delete a user's TOTP registrationstytch.users.delete_totp
  • Delete a user's emailstytch.users.delete_email
  • Revoke a member sessionstytch.b2b_sessions.revoke
  • Delete a member's TOTP registrationstytch.members.delete_totp

A destructive action runs only with confirm: true. Under the human policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after.

dostytch.users.deleteconfirm_policy: human

Delete a user?

intent: the user asked me to delete a user

run suspended · waiting for a named person · key stytch-agent cannot confirm itself
In the console, or from an emailed signed link.
a key for this connector
account {  op: "keys.create", name: "stytch-agent",  allowed_actions: ["stytch.*"], cap_calls: 2000,  confirm_policy: "human_for_writes",  approval_rules: [    { match: "stytch.users.delete", approver: "[email protected]" },    { match: "stytch.connected_app_clients.delete", approver: "[email protected]" },    { match: "stytch.m2m_clients.delete", approver: "[email protected]" }  ]}
Illustrative. Scoped to Stytch only, capped at 2,000 upstream calls, every write confirmed, and the destructive ones approved by a named person.

Cost

What Stytch costs on actionlake.

Every Stytch action is one upstream call, the only thing actionlake bills. Searching, check, cost, account and any call Stytch refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.

  • 1upstream call per actionall 184 Stytch actions
  • 184actions pageeach page of a long list is one call
  • 30reads can be cacheda cache hit costs nothing
  • 100,000calls a month, freepaid plans from US$49 a month for 250,000

See pricing

Action index

Every Stytch action.

184 actions by area: the id your agent calls, what it does, and its effect.

Members21
  • stytch.members.createCreate a memberwrite
  • stytch.members.dangerously_getGet a member by ID without an organization IDread
  • stytch.members.deleteDelete a memberdestructive
  • stytch.members.delete_external_idDelete a member's external IDdestructive
  • stytch.members.delete_mfa_phone_numberDelete a member's MFA phone numberdestructive
  • stytch.members.delete_passwordDelete a member's passworddestructive
  • stytch.members.delete_totpDelete a member's TOTP registrationdestructive
  • stytch.members.getGet a memberread
  • stytch.members.get_github_oauth_tokensGet a member's GitHub OAuth tokensread
  • stytch.members.get_google_oauth_tokensGet a member's Google OAuth tokensread
  • stytch.members.get_hubspot_oauth_tokensGet a member's HubSpot OAuth tokensread
  • stytch.members.get_microsoft_oauth_tokensGet a member's Microsoft OAuth tokensread
  • stytch.members.get_oidc_providersGet a member's OIDC provider tokensread
  • stytch.members.get_slack_oauth_tokensGet a member's Slack OAuth tokensread
  • stytch.members.list_connected_appsList a member's Connected Appsread
  • stytch.members.reactivateReactivate a memberwrite
  • stytch.members.revoke_connected_appRevoke a member's Connected App accessdestructive
  • stytch.members.searchSearch members across organizationsread
  • stytch.members.start_email_updateStart a member email updatewrite
  • stytch.members.unlink_retired_emailUnlink a member's retired emailwrite
  • stytch.members.updateUpdate a memberwrite
Users17
  • stytch.users.createCreate a userwrite
  • stytch.users.deleteDelete a userdestructive
  • stytch.users.delete_biometric_registrationDelete a user's biometric registrationdestructive
  • stytch.users.delete_crypto_walletDelete a user's crypto walletdestructive
  • stytch.users.delete_emailDelete a user's emaildestructive
  • stytch.users.delete_external_idDelete a user's external IDdestructive
  • stytch.users.delete_oauth_registrationDelete a user's OAuth registrationdestructive
  • stytch.users.delete_passwordDelete a user's passworddestructive
  • stytch.users.delete_phone_numberDelete a user's phone numberdestructive
  • stytch.users.delete_totpDelete a user's TOTP registrationdestructive
  • stytch.users.delete_webauthn_registrationDelete a user's WebAuthn registrationdestructive
  • stytch.users.exchange_primary_factorExchange a user's primary factorwrite
  • stytch.users.getGet a userread
  • stytch.users.list_connected_appsList a user's Connected Appsread
  • stytch.users.revoke_connected_appRevoke a user's Connected App accessdestructive
  • stytch.users.searchSearch usersread
  • stytch.users.updateUpdate a userwrite
B2B passwords11
  • stytch.b2b_passwords.authenticateAuthenticate a member passwordwrite
  • stytch.b2b_passwords.authenticate_discoveryAuthenticate a password for discoverywrite
  • stytch.b2b_passwords.discovery_reset_by_emailReset a discovery password by email tokenwrite
  • stytch.b2b_passwords.discovery_reset_by_email_startStart a discovery password reset by emailwrite
  • stytch.b2b_passwords.migrateMigrate a member password hashwrite
  • stytch.b2b_passwords.require_reset_by_emailRequire a member password reset by emailwrite
  • stytch.b2b_passwords.reset_by_emailReset a member password by email tokenwrite
  • stytch.b2b_passwords.reset_by_email_startStart a member password reset by emailwrite
  • stytch.b2b_passwords.reset_by_existing_passwordReset a member password using the existing passwordwrite
  • stytch.b2b_passwords.reset_by_sessionReset a member password using a sessionwrite
  • stytch.b2b_passwords.strength_checkCheck a B2B password's strengthread
SSO connections11
  • stytch.sso_connections.create_externalCreate an external SSO connectionwrite
  • stytch.sso_connections.create_oidcCreate an OIDC SSO connectionwrite
  • stytch.sso_connections.create_samlCreate a SAML SSO connectionwrite
  • stytch.sso_connections.deleteDelete an SSO connectiondestructive
  • stytch.sso_connections.delete_saml_encryption_private_keyDelete a SAML encryption private keydestructive
  • stytch.sso_connections.delete_saml_verification_certificateDelete a SAML verification certificatedestructive
  • stytch.sso_connections.listList an organization's SSO connectionsread
  • stytch.sso_connections.update_externalUpdate an external SSO connectionwrite
  • stytch.sso_connections.update_oidcUpdate an OIDC SSO connectionwrite
  • stytch.sso_connections.update_samlUpdate a SAML SSO connectionwrite
  • stytch.sso_connections.update_saml_by_urlUpdate a SAML SSO connection from a metadata URLwrite
Organizations9
  • stytch.organizations.createCreate an organizationwrite
  • stytch.organizations.deleteDelete an organizationdestructive
  • stytch.organizations.delete_external_idDelete an organization's external IDdestructive
  • stytch.organizations.getGet an organizationread
  • stytch.organizations.get_connected_appGet a Connected App's use by an organizationread
  • stytch.organizations.get_metricsGet organization metricsread
  • stytch.organizations.list_connected_appsList Connected Apps used by an organizationread
  • stytch.organizations.searchSearch organizationsread
  • stytch.organizations.updateUpdate an organizationwrite
B2B sessions8
  • stytch.b2b_sessions.attestAttest a member session from a trusted tokenwrite
  • stytch.b2b_sessions.authenticateAuthenticate a member sessionwrite
  • stytch.b2b_sessions.exchangeExchange a member session for another organizationwrite
  • stytch.b2b_sessions.exchange_access_tokenExchange a Connected Apps access token for a member sessionwrite
  • stytch.b2b_sessions.get_jwksGet the B2B session JWKSread
  • stytch.b2b_sessions.listList a member's active sessionsread
  • stytch.b2b_sessions.migrateMigrate a member session from an external OIDC providerwrite
  • stytch.b2b_sessions.revokeRevoke a member sessiondestructive
Connected app clients8
  • stytch.connected_app_clients.createCreate a Connected App clientwrite
  • stytch.connected_app_clients.deleteDelete a Connected App clientdestructive
  • stytch.connected_app_clients.getGet a Connected App clientread
  • stytch.connected_app_clients.rotate_secretComplete a Connected App client secret rotationdestructive
  • stytch.connected_app_clients.rotate_secret_cancelCancel a Connected App client secret rotationdestructive
  • stytch.connected_app_clients.rotate_secret_startStart a Connected App client secret rotationdestructive
  • stytch.connected_app_clients.searchSearch Connected App clientsread
  • stytch.connected_app_clients.updateUpdate a Connected App clientwrite
M2M clients8
  • stytch.m2m_clients.createCreate an M2M clientwrite
  • stytch.m2m_clients.deleteDelete an M2M clientdestructive
  • stytch.m2m_clients.getGet an M2M clientread
  • stytch.m2m_clients.rotate_secretComplete an M2M client secret rotationdestructive
  • stytch.m2m_clients.rotate_secret_cancelCancel an M2M client secret rotationdestructive
  • stytch.m2m_clients.rotate_secret_startStart an M2M client secret rotationdestructive
  • stytch.m2m_clients.searchSearch M2M clientsread
  • stytch.m2m_clients.updateUpdate an M2M clientwrite
Passwords8
  • stytch.passwords.authenticateAuthenticate a passwordwrite
  • stytch.passwords.createCreate a user with a passwordwrite
  • stytch.passwords.migrateMigrate a password hashwrite
  • stytch.passwords.reset_by_emailReset a password by email tokenwrite
  • stytch.passwords.reset_by_email_startStart a password reset by emailwrite
  • stytch.passwords.reset_by_existing_passwordReset a password using the existing passwordwrite
  • stytch.passwords.reset_by_sessionReset a password using a sessionwrite
  • stytch.passwords.strength_checkCheck a password's strengthread
Scim connections8
  • stytch.scim_connections.createCreate a SCIM connectionwrite
  • stytch.scim_connections.deleteDelete a SCIM connectiondestructive
  • stytch.scim_connections.getGet an organization's SCIM connectionread
  • stytch.scim_connections.list_groupsList the SCIM groups of a SCIM connectionread
  • stytch.scim_connections.rotate_token_cancelCancel a SCIM bearer token rotationdestructive
  • stytch.scim_connections.rotate_token_completeComplete a SCIM bearer token rotationdestructive
  • stytch.scim_connections.rotate_token_startStart a SCIM bearer token rotationdestructive
  • stytch.scim_connections.updateUpdate a SCIM connectionwrite
Otps7
  • stytch.otps.authenticateAuthenticate a one-time passcodewrite
  • stytch.otps.login_or_create_emailSend a login or signup email OTPwrite
  • stytch.otps.login_or_create_smsSend a login or signup SMS OTPwrite
  • stytch.otps.login_or_create_whatsappSend a login or signup WhatsApp OTPwrite
  • stytch.otps.send_emailSend an email OTPwrite
  • stytch.otps.send_smsSend an SMS OTPwrite
  • stytch.otps.send_whatsappSend a WhatsApp OTPwrite
Sessions7
  • stytch.sessions.attestAttest a session from a trusted tokenwrite
  • stytch.sessions.authenticateAuthenticate a sessionwrite
  • stytch.sessions.exchange_access_tokenExchange a Connected Apps access token for a sessionwrite
  • stytch.sessions.get_jwksGet the session JWKSread
  • stytch.sessions.listList a user's active sessionsread
  • stytch.sessions.migrateMigrate a session from an external OIDC providerwrite
  • stytch.sessions.revokeRevoke a sessiondestructive
B2B otps6
  • stytch.b2b_otps.authenticate_discovery_emailAuthenticate a discovery email OTPwrite
  • stytch.b2b_otps.authenticate_emailAuthenticate a B2B email OTPwrite
  • stytch.b2b_otps.authenticate_smsAuthenticate a member SMS OTPwrite
  • stytch.b2b_otps.login_or_signup_emailSend a B2B login or signup email OTPwrite
  • stytch.b2b_otps.send_discovery_emailSend a discovery email OTPwrite
  • stytch.b2b_otps.send_smsSend a member an SMS OTPwrite
Magic links6
  • stytch.magic_links.authenticateAuthenticate a magic link tokenwrite
  • stytch.magic_links.createCreate an embeddable magic linkwrite
  • stytch.magic_links.invite_emailSend an invite magic link by emailwrite
  • stytch.magic_links.login_or_create_emailSend a login or signup magic link by emailwrite
  • stytch.magic_links.revoke_inviteRevoke a pending email invitedestructive
  • stytch.magic_links.send_emailSend a magic link by emailwrite
Webauthn6
  • stytch.webauthn.authenticateComplete WebAuthn authenticationwrite
  • stytch.webauthn.authenticate_startStart WebAuthn authenticationwrite
  • stytch.webauthn.list_credentialsList a user's WebAuthn credentialsread
  • stytch.webauthn.registerComplete a WebAuthn registrationwrite
  • stytch.webauthn.register_startStart a WebAuthn registrationwrite
  • stytch.webauthn.updateUpdate a WebAuthn registrationwrite
B2B magic links5
  • stytch.b2b_magic_links.authenticateAuthenticate a B2B magic link tokenwrite
  • stytch.b2b_magic_links.authenticate_discoveryAuthenticate a discovery magic link tokenwrite
  • stytch.b2b_magic_links.invite_emailSend a B2B invite magic linkwrite
  • stytch.b2b_magic_links.login_or_signup_emailSend a B2B login or signup magic linkwrite
  • stytch.b2b_magic_links.send_discovery_emailSend a discovery magic linkwrite
Totps4
  • stytch.totps.authenticateAuthenticate a TOTP codewrite
  • stytch.totps.createCreate a TOTP registrationwrite
  • stytch.totps.get_recovery_codesGet a user's TOTP recovery codesread
  • stytch.totps.recoverAuthenticate a TOTP recovery codewrite
B2B rbac3
  • stytch.b2b_rbac.get_organization_policyGet an organization's RBAC policyread
  • stytch.b2b_rbac.get_policyGet the B2B RBAC policyread
  • stytch.b2b_rbac.set_organization_policySet an organization's RBAC policywrite
B2B recovery codes3
  • stytch.b2b_recovery_codes.getGet a member's recovery codesread
  • stytch.b2b_recovery_codes.recoverAuthenticate a member with a recovery codewrite
  • stytch.b2b_recovery_codes.rotateRotate a member's recovery codesdestructive
B2B totps3
  • stytch.b2b_totps.authenticateAuthenticate a member TOTP codewrite
  • stytch.b2b_totps.createCreate a member TOTP registrationwrite
  • stytch.b2b_totps.migrateMigrate a member TOTP registrationwrite
Discovery3
  • stytch.discovery.create_organizationCreate an organization via discoverywrite
  • stytch.discovery.exchange_intermediate_sessionExchange an intermediate session for a member sessionwrite
  • stytch.discovery.list_organizationsList discovered organizationsread
B2B idp oauth2
  • stytch.b2b_idp_oauth.authorizeComplete a B2B Connected App authorizationwrite
  • stytch.b2b_idp_oauth.authorize_startStart a B2B Connected App authorizationread
B2B oauth2
  • stytch.b2b_oauth.authenticateAuthenticate a B2B OAuth tokenwrite
  • stytch.b2b_oauth.authenticate_discoveryAuthenticate a discovery OAuth tokenwrite
Crypto wallets2
  • stytch.crypto_wallets.authenticateAuthenticate a crypto wallet signaturewrite
  • stytch.crypto_wallets.authenticate_startStart crypto wallet authenticationwrite
Fraud rules2
  • stytch.fraud_rules.listList fraud rulesread
  • stytch.fraud_rules.setSet a fraud rulewrite
Fraud verdict reasons2
  • stytch.fraud_verdict_reasons.listList verdict reason actionsread
  • stytch.fraud_verdict_reasons.overrideOverride a verdict reason actionwrite
Idp oauth2
  • stytch.idp_oauth.authorizeComplete a Connected App authorizationwrite
  • stytch.idp_oauth.authorize_startStart a Connected App authorizationread
Oauth2
  • stytch.oauth.attachCreate an OAuth attach tokenwrite
  • stytch.oauth.authenticateAuthenticate an OAuth tokenwrite
Project2
  • stytch.project.get_metricsGet project metricsread
  • stytch.project.whoamiIdentify the project these credentials belong toread
B2B impersonation1
  • stytch.b2b_impersonation.authenticateAuthenticate a B2B impersonation tokenwrite
Fraud email1
  • stytch.fraud_email.riskAssess an email address's riskread
Fraud fingerprints1
  • stytch.fraud_fingerprints.lookupLook up a device fingerprint verdictread
Impersonation1
  • stytch.impersonation.authenticateAuthenticate an impersonation tokenwrite
Rbac1
  • stytch.rbac.get_policyGet the consumer RBAC policyread
SSO1
  • stytch.sso.authenticateAuthenticate an SSO tokenwrite

Questions

The Stytch MCP server, answered.

Is there a Stytch MCP server for Claude?

Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 184 Stytch actions across members, users, b2B passwords and SSO connections, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by Stytch.

What do I need to connect Stytch?

Stytch project ID (Dashboard > Project settings > API keys), e.g. project-live-… or project-test-… and Stytch project secret from the same API keys page. Plus your environment. The free call account { op: "connections.requirements", service: "stytch" } lists exactly what to paste.

Can an AI agent delete or change things in Stytch?

Only if its key allows it, and only with an explicit confirmation. 38 Stytch actions are destructive, including delete a user, delete a Connected App client and delete an M2M client. Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it.

Will an AI agent use up my Stytch API limit?

actionlake paces every call to the limits in the Stytch service file: 100 calls a second per connection. Repeated reads are answered from cache (30 Stytch actions can be), which never reaches Stytch.

What does a Stytch action cost?

One upstream call, the only unit actionlake bills. A list that pages bills one call per page (184 Stytch actions page). Cache hits, searches, dry runs and calls Stytch refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.

Which Stytch API does it cover?

The Stytch API 2.1.1 (OpenAPI 3.0.3, stytchauth/stytch-openapi) at your region's stytch.com address, set when you connect. It is built from Stytch's documentation as read on 23 October 2026. 184 actions in 35 areas, each one in the signed service file (version 1.0.0).

Can I combine Stytch with my other systems?

Yes. ask joins Stytch to ConnectWise PSA or NetSuite on the same customer and returns the answer rather than every row. Stytch maps crm.company, which 227 other connectors also map.

Does actionlake keep my Stytch data, and where?

actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to 5 minutes, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your Stytch credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models.

Which AI clients can use it?

Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names.

More connectors like Stytch

Shares the most action names with

Joins with, on shared entities

Browse

actionlake is independent. It is not made or endorsed by Stytch; the name is the vendor's own. Counts are from the Stytch service file, version 1.0.0.

Give your agent Stytch today.

Connect Stytch freeSee pricing

Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free.