Use cases for the Okta Managed MCP Server
Learn how to use the Okta Managed MCP Server to streamline your org's admin tasks.
Early Access release
Overview
The Okta Managed MCP Server enables Okta admins and end users to manage their Okta org using natural language. Instead of navigating complex admin interfaces or writing API calls, you can simply ask questions and request actions through an AI agent.
The Okta Managed MCP Server intelligently routes your requests to the right tool, validates your permissions, and executes actions securely.
Key capabilities
- Natural language requests: Ask the AI agent what you need in plain English
- Scope-based security: Actions respect your Okta permissions automatically
- Built-in validation: Required fields and data formats are enforced
- Audit trails: Every action is logged for compliance
- Token optimization: Responses are optimized to reduce AI processing costs
- Multi-user support: Flexible tools to support both admins and end users
Available tools
The Okta Managed MCP Server provides the following tools for Identity and Access Management (IAM) and Okta Identity Governance (OIG) solutions. Each tool name links to the topics that describe its available actions and required Okta scopes. For the full list of scopes required by each tool, see the Scope-to-tool mapping section in Scope-based tool loading.
okta_identity_governance tool is now seven tools. If a client calls tools by their previous names, such as okta_user_management or okta_syslog, you must update them to the names in the following table. Clients that use tools/list use the new names automatically. Action names don't change.| Tool name | Type | Description |
|---|---|---|
manage_access
(Policy management) |
IAM | Create and manage policies |
manage_application
(App management) |
IAM | Manage apps and assignments |
manage_customization
(Customization management) |
IAM | Manage brands, themes, custom pages, email templates, custom domains, and email domains |
manage_device
(Device management) |
IAM | Manage device assurance policies and the device inventory |
manage_governance_access_certification
(Access certifications) |
OIG | Run access certification campaigns and manage reviews, including the reviews that are assigned to you |
manage_governance_access_request
(Access requests, My requests) |
OIG | Manage access requests, request types, conditions, and settings, and browse and submit your own requests |
manage_governance_collection
(Collections) |
OIG | Manage collections, resources, and assigned principals |
manage_governance_entitlement
(Entitlement management) |
OIG | Manage entitlements, entitlement bundles, and grants, and review and revoke user access |
manage_governance_organization_setting
(Delegate appointments, My settings) |
OIG | Manage delegate appointments and principal settings, and manage your own governance settings |
manage_governance_resource
(Resources) |
OIG | Manage resource owners and labels |
manage_governance_security_access_review
(Security access reviews) |
OIG | Create and work through security access reviews, including the reviews that are assigned to you |
manage_group
(Group management) |
IAM | Manage groups and memberships |
manage_user
(User management) |
IAM | Create, update, list, get, deactivate, and delete users |
query_syslog
(System Log management) |
IAM | Query System Log events |
Tool execution flow
When you submit a prompt, the Okta Managed MCP Server follows this three-step process:
- Tool identification: The server recognizes the request and selects the appropriate tool.
- Action discovery: The server identifies the correct action for the tool to perform.
- Execution: The server runs the action within your parameters and returns results.
