How auth0/auth0-mcp-server works
This is the Auth0 MCP Server: AI clients invoke MCP tools to manage an Auth0 tenant. The principal flow is client setup and device authorization, followed by launching the server, selecting and dispatching tools, and performing tenant operations. A guided onboarding branch creates an application, writes project credentials, and supplies framework-specific quickstart guidance. The graph includes the documented management capabilities; several tool modules were not sampled, so their internal call details are not inferred.
Main entry points: index.ts Tool registry · server.ts MCP server · onboarding.ts Onboarding tools · quickstarts.ts Quickstart tools
Components 23
Setup and authentication
- Init command
src/commands/init.ts - Device authorization
src/auth/device-auth-flow.ts - Credential keychain
src/utils/keychain.ts - MCP client configuration
src/clients/base.ts - Client adapters
src/clients
MCP runtime
- Run command
src/commands/run.ts - MCP server
src/server.ts - Tool selection
src/utils/tools.ts - Tool registry
src/tools/index.ts - Auth configuration
src/utils/config.ts
Tenant management
- Applications
src/tools/applications.ts - Actions
src/tools/actions.ts - Forms
src/tools/forms.ts - Logs
src/tools/logs.ts - Resource servers
src/tools/resource-servers.ts - Application grants
src/tools/application-grants.ts
Project onboarding
- Onboarding tools
src/tools/onboarding.ts - Quickstart tools
src/tools/quickstarts.ts - Quickstart guidance
src/utils/quickstarts.ts - Project credentials
src/utils/onboarding.ts
Other components
- Developer
- AI client
- Auth0 tenant
Connections 31
- Developer → Init command: configures
README.md - Init command → Device authorization: starts authorization
src/commands/init.ts - Device authorization → Credential keychain: stores credentials
src/auth/device-auth-flow.ts - Init command → Client adapters: selects client
src/commands/init.ts - Client adapters → MCP client configuration: updates configuration
src/clients/claude-code.ts - AI client → MCP server: calls tools
README.md - Run command → MCP server: starts
src/commands/run.ts - Run command → Credential keychain: reads credentials
src/commands/run.ts - MCP server → Auth configuration: loads and validates
src/server.ts - MCP server → Tool selection: filters tools
src/server.ts - MCP server → Tool registry: dispatches tools
src/server.ts - Tool selection → Tool registry: filters registry
src/utils/tools.ts - Tool registry → Applications: registers handlers
src/tools/index.ts - Tool registry → Actions: registers handlers
src/tools/index.ts - Tool registry → Forms: registers handlers
src/tools/index.ts - Tool registry → Logs: registers handlers
src/tools/index.ts - Tool registry → Resource servers: registers handlers
src/tools/index.ts - Tool registry → Application grants: registers handlers
src/tools/index.ts - Tool registry → Onboarding tools: registers handlers
src/tools/index.ts - Tool registry → Quickstart tools: registers handlers
src/tools/index.ts - Applications → Auth0 tenant: manages tenant apps
src/tools/applications.ts - Actions → Auth0 tenant: manages actions
src/tools/actions.ts - Forms → Auth0 tenant: manages forms
src/tools/forms.ts - Logs → Auth0 tenant: queries logs
README.md - Resource servers → Auth0 tenant: manages APIs
src/tools/resource-servers.ts - Application grants → Auth0 tenant: manages grants
- Onboarding tools → Applications: creates application
README.md - Onboarding tools → Project credentials: writes credentials
README.md - Onboarding tools → Quickstart tools: hands off
README.md - Quickstart tools → Quickstart guidance: resolves guidance
src/tools/quickstarts.ts - Quickstart tools → Applications: updates application
README.md