KosmoKrator

productivity

Auth0 MCP Integration for Claude Agent SDK

Connect Auth0 to Claude Agent SDK through the local KosmoKrator MCP gateway with scoped tools, credentials, and write policy.

7 functions 6 read 1 write Bearer token auth
Submit Auth0 feedback View package source

Connect Auth0 to Claude Agent SDK

Give Claude Agent SDK workflows access to KosmoKrator integrations through a local MCP server.

Add a KosmoKrator stdio MCP server to the Claude Agent SDK options. The gateway is local, scoped to this integration, and starts with --write=deny so Claude Agent SDK can inspect read-capable tools without receiving write access by default.

Auth0 MCP Config for Claude Agent SDK

Use a narrow integration list so the agent does not load unrelated tools.

{
  "mcpServers": {
    "kosmokrator-auth-zero": {
      "type": "stdio",
      "command": "kosmo",
      "args": [
        "mcp:serve",
        "--integration=auth-zero",
        "--write=deny"
      ]
    }
  }
}

Run the Gateway Manually

kosmokrator mcp:serve --integration=auth-zero --write=deny

Why Use KosmoKrator Here

Scoped tools

Expose only Auth0 instead of a broad multi-service tool list.

Local credentials

Reuse credentials already configured for the KosmoKrator CLI and Lua runtime.

Write policy

Start read-only, then opt into ask or allow for trusted workspaces.

Auth0 Tools Visible to Claude Agent SDK

Claude Agent SDK sees stable MCP tool names generated from the Auth0 integration catalog.

MCP toolSource functionTypeDescription
integration__auth_zero__auth_zero_list_users auth-zero.auth_zero_list_users Read List users in the Auth0 tenant. Supports search with Lucene syntax, pagination, and sorting.
integration__auth_zero__auth_zero_get_user auth-zero.auth_zero_get_user Read Retrieve a single Auth0 user by their user ID (e.g. "auth0|abc123").
integration__auth_zero__auth_zero_create_user auth-zero.auth_zero_create_user Write Create a new user in Auth0. Requires email, password, and the connection name (database connection).
integration__auth_zero__auth_zero_list_connections auth-zero.auth_zero_list_connections Read List identity connections configured in the Auth0 tenant. Optionally filter by strategy (e.g. "auth0", "google-oauth2").
integration__auth_zero__auth_zero_list_roles auth-zero.auth_zero_list_roles Read List roles defined in the Auth0 tenant with optional pagination.
integration__auth_zero__auth_zero_get_tenant_settings auth-zero.auth_zero_get_tenant_settings Read Retrieve the Auth0 tenant settings (session lifetime, idle timeout, default directory, etc.).
integration__auth_zero__auth_zero_get_current_user auth-zero.auth_zero_get_current_user Read Retrieve the profile of the currently authenticated user. Also serves as a health check for the Auth0 connection.

Related Auth0 Pages

Auth0 CLIUse direct JSON commands instead of MCP discovery. Auth0 MCPFull gateway reference and MCP tool names. KosmoKrator for Claude Agent SDKClient-level gateway setup.