Logto MCP Server
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| LOGTO_APP_ID | Yes | M2M application ID | |
| LOGTO_BASE_URL | No | Self-hosted Logto base URL (alternative) | |
| LOGTO_ENDPOINT | No | Self-hosted Logto base URL (required for OSS) | |
| LOGTO_CLIENT_ID | No | M2M application ID (alternative) | |
| LOGTO_TENANT_ID | No | Cloud tenant ID (required for Cloud; defaults to 'default' for OSS) | |
| LOGTO_APP_SECRET | Yes | M2M application secret | |
| LOGTO_API_INDICATOR | No | API indicator (OSS default: https://default.logto.app/api) | |
| LOGTO_CLIENT_SECRET | No | M2M application secret (alternative) |
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Features and capabilities supported by this server
Protocol revision2025-11-25
| Capability | Details |
|---|---|
| tools | {
"listChanged": true
} |
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| list_usersA | List Logto users with optional search and pagination. Search uses Logto advanced user search query syntax. |
| get_userB | Get a Logto user by ID. |
| create_userB | Create a Logto user. At least one of username, primaryEmail, or primaryPhone is typically required. |
| update_userC | Update a Logto user by ID (partial update). |
| delete_userA | Delete a Logto user by ID. |
| logto_healthA | Verify Logto Management API credentials by listing one user page. |
| list_applicationsA | List Logto applications with optional type filter and pagination. |
| get_applicationB | Get a Logto application by ID. |
| create_applicationB | Create a Logto application. |
| update_applicationA | Update a Logto application by ID (partial update). |
| delete_applicationA | Delete a Logto application by ID. |
| list_organizationsB | List Logto organizations with optional query and pagination. |
| get_organizationA | Get a Logto organization by ID. |
| create_organizationC | Create a Logto organization. |
| update_organizationC | Update a Logto organization by ID (partial update). |
| delete_organizationB | Delete a Logto organization by ID. |
| list_organization_membersC | List user members of a Logto organization. |
| add_organization_membersC | Add users as members of a Logto organization. |
| remove_organization_memberB | Remove a user from a Logto organization. |
| list_rolesB | List Logto API resource roles with optional filters and pagination. |
| get_roleB | Get a Logto role by ID. |
| create_roleB | Create a Logto API resource role. |
| update_roleB | Update a Logto role by ID (partial update). |
| delete_roleB | Delete a Logto role by ID. |
| list_user_rolesC | List API resource roles assigned to a user. |
| assign_user_rolesB | Assign API resource roles to a user (adds to existing roles). |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
TDQS
Scored across 26 tools
Every tool targets a distinct resource-action pair (user, application, organization, role) with no ambiguity. Even similar operations like list_users vs list_organization_members are clearly differentiated by resource.
Tools consistently use verb_noun pattern with snake_case (e.g., get_user, create_user). The only deviation is the logto_health tool which doesn't follow the pattern, but it's a single utility tool.
26 tools is slightly above the typical 3-15 range but each tool serves a necessary CRUD or management function across four resource types. The count is justified for the scope.
CRUD operations are fully covered for users, applications, organizations, and roles. Organization membership and user role assignment are also included. Missing details like application secrets or OIDC config are minor gaps.