Get the Authentik MCP server version and service status.

Admin-only Authentik operations: settings, system, version, files, admin authenticator devices.

Call with operation="help" to list all available admin operations. Otherwise pass the operation name and a JSON object with parameters.

Example: authentik_admin(operation="GetSystemInfo")

Delete Authentik resources (destructive, irreversible).

Call with operation="help" to list all available delete operations. Otherwise pass the operation name and a JSON object with parameters.

Example: authentik_delete(operation="DeleteUser", params={"id": 1})

Query Authentik auth pipeline config: flows, stages, policies, sources, events (safe, read-only).

Call with operation="help" to list all available operations. Otherwise pass the operation name and a JSON object with parameters.

Example: authentik_flows_read(operation="ListFlows")

Create or update Authentik auth pipeline config: flows, stages, policies, sources (non-destructive).

Call with operation="help" to list all available operations. Otherwise pass the operation name and a JSON object with parameters.

Example: authentik_flows_write(operation="CreateFlow", params={"name": "my-flow", "slug": "my-flow", "designation": "authorization"})

Query Authentik data (safe, read-only). Policy bindings (app/flow access gates) are in authentik_flows_read.

Call with operation="help" to list all available read operations. Otherwise pass the operation name and a JSON object with parameters.

Example: authentik_read(operation="ListUsers", params={"search": "admin"})

Create or update Authentik resources (non-destructive). Application/flow access gating (policy bindings) is in authentik_flows_write.

Call with operation="help" to list all available write operations. Otherwise pass the operation name and a JSON object with parameters.

Example: authentik_write(operation="CreateUser", params={"username": "alice", "name": "Alice"})