Okta's official self-hosted MCP server lets agents manage users, groups, applications and policies through the Okta Management API. It runs locally via uvx (or Docker) and authenticates with an Okta API service app using a client ID and either device authorization or a private key.
Connect
- 1Add the server to Codex
codex mcp add okta --env OKTA_ORG_URL=YOUR_OKTA_ORG_URL --env OKTA_CLIENT_ID=YOUR_OKTA_CLIENT_ID --env OKTA_SCOPES=YOUR_OKTA_SCOPES -- uvx okta-mcp-server
Configs are generated from the publisher's documented endpoint. Check their docs for plan requirements and scopes. New to this? Read the step-by-step tutorial.
Tools 9
list_usersget_usercreate_userdeactivate_userlist_groupsadd_user_to_grouplist_applicationslist_policiescreate_policyThings to ask
- “Which users haven't logged in for 90 days?”
- “Add jane@example.com to the Engineering group”
- “List the applications assigned to the Sales group”
- “Deactivate the user account for a departed contractor”