Skip to main content
Glama
takleb3rry

Zitadel MCP

zitadel_create_oidc_app

Create an OIDC application in Zitadel to enable user authentication. Configure redirect URIs, response types, and grant types for secure login integration.

Instructions

Create a new OIDC application in a Zitadel project. Returns the Client ID (and Client Secret for confidential clients). Configure redirect URIs, response types, and grant types.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
projectIdYesThe project ID to create the app in
nameYesApplication name
redirectUrisYesOAuth redirect URIs (e.g., ["https://myapp.example.com/api/auth/callback/zitadel"])
postLogoutRedirectUrisNoPost-logout redirect URIs (optional)
appTypeNoApplication type (default: OIDC_APP_TYPE_WEB)
authMethodTypeNoAuth method. Use NONE for PKCE public clients (default: OIDC_AUTH_METHOD_TYPE_NONE)
devModeNoEnable dev mode to allow http:// redirect URIs (default: false)
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already indicate this is a non-readOnly, non-destructive, non-idempotent operation. The description adds valuable behavioral context by specifying what gets returned (Client ID and Client Secret for confidential clients) and mentioning key configuration aspects like redirect URIs, which helps the agent understand the tool's behavior beyond the basic annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is appropriately sized with two sentences. The first sentence states the core purpose and return value, while the second mentions configuration aspects. It's front-loaded with the most important information, though the second sentence could be slightly more specific about what 'response types' and 'grant types' refer to.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a creation tool with good annotations and comprehensive schema coverage, the description provides adequate context. It mentions the return values (Client ID/Secret) which is important since there's no output schema. The main gap is lack of explicit guidance on when to use this versus update or get operations, but overall it's reasonably complete for the tool's complexity.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

With 100% schema description coverage, the input schema already documents all 7 parameters thoroughly. The description adds minimal parameter semantics by mentioning redirect URIs, response types, and grant types configuration, but doesn't provide additional details beyond what's in the schema. Baseline 3 is appropriate when schema does the heavy lifting.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the action ('Create a new OIDC application'), the target resource ('in a Zitadel project'), and the return value ('Returns the Client ID (and Client Secret for confidential clients)'). It distinguishes from sibling tools like 'zitadel_create_project' or 'zitadel_create_user' by specifying OIDC application creation.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies usage context by mentioning configuration of redirect URIs, response types, and grant types, but doesn't explicitly state when to use this tool versus alternatives like 'zitadel_update_app' or 'zitadel_get_app'. No prerequisites or exclusions are provided.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Install Server

Other Tools

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/takleb3rry/zitadel-mcp'

If you have feedback or need assistance with the MCP directory API, please join our Discord server