KosmoKrator

productivity

Auth0 CLI for AI Agents

Use the Auth0 CLI from KosmoKrator to call Auth0 tools headlessly, return JSON, inspect schemas, and automate workflows from coding agents, scripts, and CI.

7 functions 6 read 1 write Bearer token auth

Auth0 CLI Setup

Auth0 can be configured headlessly with `kosmokrator integrations:configure auth-zero`.

# Install KosmoKrator first if it is not available on PATH.
curl -fsSL https://raw.githubusercontent.com/OpenCompanyApp/kosmokrator/main/install.sh | bash

# Configure and verify this integration.
kosmokrator integrations:configure auth-zero --set access_token="$AUTH_ZERO_ACCESS_TOKEN" --set domain="$AUTH_ZERO_DOMAIN" --enable --read allow --write ask --json
kosmokrator integrations:doctor auth-zero --json
kosmokrator integrations:status --json

Credentials

Authentication type: Bearer token bearer_token. Configure credentials once, then use the same stored profile from scripts, coding CLIs, Lua code mode, and the MCP gateway.

KeyEnv varTypeRequiredLabel
access_token AUTH_ZERO_ACCESS_TOKEN Secret secret yes Access Token
domain AUTH_ZERO_DOMAIN Text text yes Tenant Domain

Call Auth0 Headlessly

Use the generic call form when another coding CLI or script needs a stable universal interface.

kosmo integrations:call auth-zero.auth_zero_list_users '{
  "page": 1,
  "per_page": 1,
  "q": "example_q",
  "sort": "example_sort"
}' --json

Use the provider shortcut form for shorter human-facing commands.

kosmo integrations:auth-zero auth_zero_list_users '{
  "page": 1,
  "per_page": 1,
  "q": "example_q",
  "sort": "example_sort"
}' --json

Agent Discovery Commands

These commands return structured output for coding agents that need to inspect capabilities before choosing a function.

kosmo integrations:docs auth-zero --json
kosmo integrations:docs auth-zero.auth_zero_list_users --json
kosmo integrations:schema auth-zero.auth_zero_list_users --json
kosmo integrations:search "Auth0" --json
kosmo integrations:list --json

All CLI Functions

Every function below can be called headlessly. The generic form is stable across all integrations; the provider shortcut is shorter but specific to Auth0.

auth-zero.auth_zero_list_users

Read read

List users in the Auth0 tenant. Supports search with Lucene syntax, pagination, and sorting.

Parameters
page, per_page, q, sort

Generic CLI call

kosmo integrations:call auth-zero.auth_zero_list_users '{"page":1,"per_page":1,"q":"example_q","sort":"example_sort"}' --json

Provider shortcut

kosmo integrations:auth-zero auth_zero_list_users '{"page":1,"per_page":1,"q":"example_q","sort":"example_sort"}' --json

auth-zero.auth_zero_get_user

Read read

Retrieve a single Auth0 user by their user ID (e.g. "auth0|abc123").

Parameters
id

Generic CLI call

kosmo integrations:call auth-zero.auth_zero_get_user '{"id":"example_id"}' --json

Provider shortcut

kosmo integrations:auth-zero auth_zero_get_user '{"id":"example_id"}' --json

auth-zero.auth_zero_create_user

Write write

Create a new user in Auth0. Requires email, password, and the connection name (database connection).

Parameters
email, password, connection, name

Generic CLI call

kosmo integrations:call auth-zero.auth_zero_create_user '{"email":"example_email","password":"example_password","connection":"example_connection","name":"example_name"}' --json

Provider shortcut

kosmo integrations:auth-zero auth_zero_create_user '{"email":"example_email","password":"example_password","connection":"example_connection","name":"example_name"}' --json

auth-zero.auth_zero_list_connections

Read read

List identity connections configured in the Auth0 tenant. Optionally filter by strategy (e.g. "auth0", "google-oauth2").

Parameters
strategy

Generic CLI call

kosmo integrations:call auth-zero.auth_zero_list_connections '{"strategy":"example_strategy"}' --json

Provider shortcut

kosmo integrations:auth-zero auth_zero_list_connections '{"strategy":"example_strategy"}' --json

auth-zero.auth_zero_list_roles

Read read

List roles defined in the Auth0 tenant with optional pagination.

Parameters
page, per_page

Generic CLI call

kosmo integrations:call auth-zero.auth_zero_list_roles '{"page":1,"per_page":1}' --json

Provider shortcut

kosmo integrations:auth-zero auth_zero_list_roles '{"page":1,"per_page":1}' --json

auth-zero.auth_zero_get_tenant_settings

Read read

Retrieve the Auth0 tenant settings (session lifetime, idle timeout, default directory, etc.).

Parameters
none

Generic CLI call

kosmo integrations:call auth-zero.auth_zero_get_tenant_settings '{}' --json

Provider shortcut

kosmo integrations:auth-zero auth_zero_get_tenant_settings '{}' --json

auth-zero.auth_zero_get_current_user

Read read

Retrieve the profile of the currently authenticated user. Also serves as a health check for the Auth0 connection.

Parameters
none

Generic CLI call

kosmo integrations:call auth-zero.auth_zero_get_current_user '{}' --json

Provider shortcut

kosmo integrations:auth-zero auth_zero_get_current_user '{}' --json

Function Schemas

Use these parameter tables when building CLI payloads without calling integrations:schema first.

auth-zero.auth_zero_list_users

List users in the Auth0 tenant. Supports search with Lucene syntax, pagination, and sorting.

Operation
Read read
Schema command
kosmo integrations:schema auth-zero.auth_zero_list_users --json
ParameterTypeRequiredDescription
page integer no Page index (zero-based). Default: 0.
per_page integer no Number of results per page. Default: 50, max: 100.
q string no Lucene search query (e.g. "email:*@example.com").
sort string no Field to sort by, with optional direction (e.g. "created_at:-1" or "name:1").

auth-zero.auth_zero_get_user

Retrieve a single Auth0 user by their user ID (e.g. "auth0|abc123").

Operation
Read read
Schema command
kosmo integrations:schema auth-zero.auth_zero_get_user --json
ParameterTypeRequiredDescription
id string yes The Auth0 user identifier (e.g. "auth0|abc123", "google-oauth2|xyz").

auth-zero.auth_zero_create_user

Create a new user in Auth0. Requires email, password, and the connection name (database connection).

Operation
Write write
Schema command
kosmo integrations:schema auth-zero.auth_zero_create_user --json
ParameterTypeRequiredDescription
email string yes Email address for the new user.
password string yes Password for the new user (must meet connection requirements).
connection string yes The database connection name to create the user in (e.g. "Username-Password-Authentication").
name string no Full name of the user.

auth-zero.auth_zero_list_connections

List identity connections configured in the Auth0 tenant. Optionally filter by strategy (e.g. "auth0", "google-oauth2").

Operation
Read read
Schema command
kosmo integrations:schema auth-zero.auth_zero_list_connections --json
ParameterTypeRequiredDescription
strategy string no Filter by connection strategy (e.g. "auth0", "google-oauth2", "samlp", "oidc").

auth-zero.auth_zero_list_roles

List roles defined in the Auth0 tenant with optional pagination.

Operation
Read read
Schema command
kosmo integrations:schema auth-zero.auth_zero_list_roles --json
ParameterTypeRequiredDescription
page integer no Page index (zero-based). Default: 0.
per_page integer no Number of results per page. Default: 50.

auth-zero.auth_zero_get_tenant_settings

Retrieve the Auth0 tenant settings (session lifetime, idle timeout, default directory, etc.).

Operation
Read read
Schema command
kosmo integrations:schema auth-zero.auth_zero_get_tenant_settings --json
ParameterTypeRequiredDescription
No parameters.

auth-zero.auth_zero_get_current_user

Retrieve the profile of the currently authenticated user. Also serves as a health check for the Auth0 connection.

Operation
Read read
Schema command
kosmo integrations:schema auth-zero.auth_zero_get_current_user --json
ParameterTypeRequiredDescription
No parameters.

Permissions

Headless calls still follow the integration read/write permission policy. Configure read/write defaults with integrations:configure. Add --force only for trusted automation that should bypass that policy.