How do I use pocketid-mcp?

1. Click on "Deploy Server". 2. Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state. 3. In the chat, type @ followed by the MCP server name and your instructions, e.g., "@pocketid-mcp List all users" That's it! The server will respond to your query, and you can continue using it as needed. Here is a step-by-step guide with screenshots.

pocketid-mcp

by nikkomiu

Overview Schema Source Related Servers Discussions Admin

TypeScript

Remote

pocketid-mcp

MCP (Model Context Protocol) server for managing Pocket ID instances. Provides 57 tools for user management, OIDC client configuration, group management, audit logs, and more — all accessible through any MCP-compatible client.

Requirements

Bun v1.0+
A running Pocket ID instance with an API key

Related MCP server: AccelMCP

Installation

From Release Binary

Download the latest binary for your platform from the Releases page.

From Source

git clone https://github.com/nikkomiu/pocketid-mcp.git
cd pocketid-mcp
bun install

Configuration

Environment Variables

Variable	Required	Default	Description
`POCKETID_URL`	Yes	—	Base URL of your Pocket ID instance (e.g. `https://auth.example.com`)
`POCKETID_API_KEY`	Yes	—	API key for authentication (create via Pocket ID admin dashboard under Settings > API Keys)
`LOG_LEVEL`	No	`info`	Log level (`debug`, `info`, `warn`, `error`)
`LOG_FILE`	No	`pocketid-mcp.log`	Log file name or absolute path
`LOG_DIR`	No	(auto-resolved)	Directory for log file
`LOG_TO_STDERR`	No	`true`	Also write logs to stderr
`LOG_TRUNCATE`	No	`true`	Truncate old log entries on startup
`LOG_MAX_AGE_HOURS`	No	`24`	Max age in hours for log truncation

Claude Code

Add to your Claude Code MCP settings (~/.claude/settings.json or project .mcp.json):

{
  "mcpServers": {
    "pocketid": {
      "command": "/path/to/pocketid-mcp",
      "env": {
        "POCKETID_URL": "https://auth.example.com",
        "POCKETID_API_KEY": "your-api-key"
      }
    }
  }
}

Or when running from source:

{
  "mcpServers": {
    "pocketid": {
      "command": "bun",
      "args": ["run", "/path/to/pocketid-mcp/src/index.ts"],
      "env": {
        "POCKETID_URL": "https://auth.example.com",
        "POCKETID_API_KEY": "your-api-key"
      }
    }
  }
}

Usage

Once configured, the following tools are available through your MCP client:

Users

Tool	Description
`user_list`	List users with pagination, search, and sorting
`user_get`	Get a user by ID
`user_create`	Create a new user
`user_update`	Update an existing user
`user_delete`	Delete a user
`user_groups`	List groups for a specific user
`user_update_groups`	Update group memberships for a user
`user_create_one_time_access_token`	Create a one-time access token for a user
`user_send_access_email`	Send a one-time access email to a user

User Groups

Tool	Description
`user_group_list`	List user groups with pagination and search
`user_group_get`	Get a user group by ID
`user_group_create`	Create a new user group
`user_group_update`	Update a user group
`user_group_delete`	Delete a user group
`user_group_update_users`	Add or remove users from a group
`user_group_update_allowed_clients`	Configure which OIDC clients can access this group

OIDC Clients

Tool	Description
`oidc_client_list`	List OIDC clients with pagination and search
`oidc_client_get`	Get an OIDC client by ID
`oidc_client_create`	Create a new OIDC client
`oidc_client_update`	Update an OIDC client
`oidc_client_delete`	Delete an OIDC client
`oidc_client_create_secret`	Generate a new client secret
`oidc_client_update_allowed_groups`	Configure allowed user groups for a client
`oidc_client_preview_claims`	Preview token claims for a specific user
`oidc_client_authorized_list`	List authorized clients for a user
`oidc_client_revoke_authorization`	Revoke a client authorization

API Keys

Tool	Description
`api_key_list`	List API keys
`api_key_create`	Create a new API key
`api_key_renew`	Renew an API key's expiration
`api_key_delete`	Delete an API key

Audit Logs

Tool	Description
`audit_log_list`	List current user's audit logs
`audit_log_list_all`	List all audit logs (admin only)
`audit_log_filter_clients`	Get client names for audit log filtering
`audit_log_filter_users`	Get usernames for audit log filtering

Custom Claims

Tool	Description
`custom_claim_suggestions`	Get suggested custom claim names
`custom_claim_set_user`	Set custom claims for a user
`custom_claim_set_group`	Set custom claims for a user group

App Configuration

Tool	Description
`app_config_get`	Get public application configuration
`app_config_get_all`	Get all configuration (admin only)
`app_config_update`	Update application configuration
`app_config_test_email`	Send a test email
`app_config_sync_ldap`	Trigger LDAP synchronization

Tool	Description
`signup_token_list`	List signup tokens
`signup_token_create`	Create a signup token
`signup_token_delete`	Delete a signup token

SCIM Provisioning

Tool	Description
`scim_provider_create`	Create a SCIM service provider
`scim_provider_update`	Update a SCIM service provider
`scim_provider_delete`	Delete a SCIM service provider
`scim_provider_sync`	Trigger a manual SCIM sync

OIDC Discovery

Tool	Description
`oidc_discovery`	Get OpenID Connect discovery document
`oidc_jwks`	Get JSON Web Key Set

App Images

Tool	Description
`app_image_update_logo`	Upload or update the application logo
`app_image_update_favicon`	Upload or update the favicon
`app_image_update_background`	Upload or update the background image
`app_image_delete_default_profile_picture`	Remove the default profile picture

Utility

Tool	Description
`health_check`	Check Pocket ID instance health
`version_latest`	Get the latest available Pocket ID version

Audit Trail

All mutating operations (POST, PUT, DELETE) are automatically logged at info level with structured fields:

{
  "level": 30,
  "time": "2026-02-13T10:30:00.000Z",
  "tool": "user_create",
  "httpMethod": "POST",
  "path": "/api/users",
  "resourceId": null,
  "success": true,
  "msg": "audit: user_create POST /api/users OK"
}

Request/response bodies, API keys, and PII are never logged.

Development

Run from Source

bun run start

Build Standalone Binary

bun run build

Produces dist/pocketid-mcp.

Type Check

bun run type-check

Lint

bun run lint

Format

bun run format

License

MIT

This server cannot be deployed

One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

Maintenance

ActivityInactive

ResponsivenessNo issues

Resources

GitHub Repository

Need Help?

Related Servers

Related MCP Connectors

MANDATE Credential Broker B
io.github.projetnanocorp
MCP server for mandates, delegation, policy-gated execution, credential grants, and audit.
Security
111
mcp-docs B
io.fusionauth
FusionAuth Documentation MCP server
Documentation Access Developer Tools Security
22
StytchOAuth
dev.stytch.mcp
The Stytch MCP server is a reference implementation that demonstrates remote MCP server authentication and authorization using Stytch Connected Apps. It provides OAuth 2.1-compliant authorization (including PKCE), Dynamic Client Registration, and validates Stytch-issued access tokens to enable AI agents to securely interact with external services through permissioned access, supporting scopes like openid, email, profile, and manage:project_data.
Security Autonomous Agents App Automation
2
Product Management Mcp D
io.github.varvararatta
MCP server for Product Management
Product Management Project Management
2

Related MCP Servers

Okta-MCP
Security Databases
vaibhavGoyal1096
F
license
Not graded
quality
D
maintenance
A production-ready MCP server for Identity and Access Management with Okta integration, providing user and group management, audit logging, and permission guardrails.
Updated 9 months ago (2025-12-21 10:18 UTC)
-
AccelMCP
Developer Tools Agent Orchestration
t-ogawa-dev
F
license
Not graded
quality
B
maintenance
An MCP server with HTTP/stdio support, a web admin panel for managing services, capabilities, and user permissions with Bearer token authentication, enabling relay and access control for MCP tools.
Updated 7 days ago (2026-09-10 06:42 UTC)
-
mcp-ory-kratos
Security Developer Tools
feedback-loop-ai
A
license
Not graded
quality
A
maintenance
MCP server for managing Ory Kratos identities, sessions, and authentication flows, enabling AI assistants to perform identity management tasks via natural language.
Updated 5 days ago (2026-09-12 08:13 UTC)
341 npm
1
MIT
MCP OAuth Test
Security
emave
F
license
Not graded
quality
B
maintenance
Multi-tenant MCP server with OAuth 2.1 authorization, enabling tenant-scoped tool access and audit logging.
Updated 3 months ago (2026-06-30 12:36 UTC)
-

pocketid-mcp

Requirements

Installation

From Release Binary

From Source

Configuration

Environment Variables

Claude Code

Usage

Users

User Groups

OIDC Clients

API Keys

Audit Logs

Custom Claims

App Configuration

Signup Tokens

SCIM Provisioning

OIDC Discovery

App Images

Utility

Audit Trail

Development

Run from Source

Build Standalone Binary

Type Check

Lint

Format

License

Maintenance

Resources

Related MCP Connectors

Related MCP Servers

Okta-MCP

AccelMCP

mcp-ory-kratos

MCP OAuth Test