Scalekit MCP Server

The Scalekit MCP server is a service that provides a comprehensive toolset for the identity and access management platform, supporting functions such as environment management, organizational user management, connection configuration, and MCP server registration. It enables standardized interaction between AI assistants and the Scalekit platform through OAuth security authentication.

Developer tools Security #Identity management #Access control #MCP service #OAuth authentication .TypeScript

rating : 2.5 points

downloads : 0

update time : 2025-09-09

Open Site

What is the Scalekit MCP Server?

The Scalekit MCP Server is a server based on the Model Context Protocol (MCP) standard, specifically designed to interact with the Scalekit identity management platform. It allows AI assistants to manage resources such as users, organizations, authentication connections, and workspaces through simple natural language queries.

How to use the Scalekit MCP Server?

Configure the server connection in a supported MCP client (such as VS Code, Claude Desktop, Cursor, etc.), and then use OAuth 2.1 authentication for secure access. After configuration, you can perform various management operations through natural language instructions.

Use cases

Suitable for scenarios where developers and IT administrators need to quickly manage the identity authentication system, create and manage organizational users, set up OIDC connections, manage workspace members, and configure the MCP server itself.

Main features

Environment management

Create, view, and manage different Scalekit environments, including the management of roles and permission scopes

Organization management

Manage the organizational structure, create organizations, manage organizational users, and update organizational settings

User management

Create, list, and manage user accounts within an organization, supporting external ID and metadata settings

Connection management

Set up and manage OIDC authentication connections, supporting multiple identity providers (such as Okta, Google, Microsoft, etc.)

Workspace management

Manage workspace members and invite new members to join the workspace

MCP server management

Administrator portal access

Generate a magic link to the administrator portal for easy and quick access to the management interface

Advantages

A unified identity management interface simplifies complex operations

Supports OAuth 2.1 secure authentication to ensure data security

Natural language interaction reduces the technical threshold

Supports multiple clients (VS Code, Claude, Cursor, etc.)

Complete lifecycle management, a full - set of tools from environment to user

Limitations

Requires configuring the MCP client, with a certain learning curve

Relies on the OAuth authentication process, and the initial setup is relatively complex

Some advanced features require specific permission scopes

How to use

Select and configure an MCP client

According to the development tool you use (VS Code, Claude Desktop, Cursor, or Windsurf), follow the corresponding configuration guide for setup

Add Scalekit MCP server configuration

Add the connection information of the Scalekit MCP server to the client's configuration file

Complete OAuth authentication

After restarting the client, the system will guide you through the OAuth 2.1 authentication process to obtain an access token

Start using natural language instructions

After successful authentication, you can use natural language to perform various management operations

Usage examples

Quickly create a test user

Quickly create a test user account in the development and testing environment

Set up a new OIDC connection

Configure a Google OIDC authentication connection for the production environment

Manage workspace access

Invite a new member to join the current workspace

Frequently Asked Questions

What is an MCP server?

What permissions are required to use this MCP server?

Which identity providers are supported?

How to obtain the environment ID and organization ID?

Do authentication tokens expire?

Related resources

Scalekit official documentation

Complete documentation and API reference for using the Scalekit platform

MCP protocol specification

Official specification and standard documentation of the Model Context Protocol

OAuth 2.1 guide

Detailed guide and best practices for the OAuth 2.1 authentication protocol

GitHub example code

Usage examples and code snippets for the Scalekit MCP server

🚀 Scalekit MCP Server

The Scalekit MCP Server offers a comprehensive set of tools for managing Scalekit environments, organizations, users, connections, and workspace operations. It's designed for developers to connect their AI tools to Scalekit context and capabilities via simple natural - language queries.

🚀 Quick Start

This MCP server allows AI assistants to interact with Scalekit's identity and access management platform through a standardized toolset. It provides secure, OAuth - protected access for managing environments, organizations, users, authentication connections, etc.

✨ Features

Environment management and configuration
Organization and user management
Workspace member administration
OIDC connection setup and management
MCP server registration and configuration
Role and scope management
Admin portal link generation

📦 Installation

Configuration

Using OAuth	Using mcp - remote proxy
VS Code (version 1.101 or greater)	VS Code (version 1.101 or greater)
```json
{
"servers": {

"scalekit": {
  "type": "http",
  "url": "https://mcp.scalekit.com/"
}

} } |json { "mcpServers": { "scalekit": { "command": "npx", "args": ["-y", "mcp-remote", "https://mcp.scalekit.com/"] } } }


Based on your MCP Host, here are the configuration instructions to add Scalekit as an MCP Server:

#### Claude Desktop
Configure the Claude app to use the MCP server:
1. Open the Claude Desktop app, go to Settings, then Developer.
2. Click Edit Config.
3. Open the claude_desktop_config.json file.
4. Copy and paste the server config to your existing file, then save.
5. Restart Claude.

```json
{
  "mcpServers": {
    "scalekit": {
      "command": "npx", 
      "args": ["-y", "mcp-remote", "https://mcp.scalekit.com/"]
    }
  }
}

Cursor

Configure Cursor to use the MCP server:

Open Cursor, go to Settings, then Cursor Settings.
Select MCP on the left.
Click Add "New Global MCP Server" at the top right.
Copy and paste the server config to your existing file, then save.
Restart Cursor.

{
  "mcpServers": {
    "scalekit": {
      "command": "npx", 
      "args": ["-y", "mcp-remote", "https://mcp.scalekit.com/"]
    }
  }
}

Windsurf

Configure Windsurf to use the MCP server:

Open Windsurf, go to Settings, then Developer.
Click Edit Config.
Open the windsurf_config.json file.
Copy and paste the server config to your existing file, then save.
Restart Windsurf.

{
  "mcpServers": {
    "scalekit": {
      "command": "npx", 
      "args": ["-y", "mcp-remote", "https://mcp.scalekit.com/"]
    }
  }
}

💻 Usage Examples

Available Tools

Environment Management

API	Description	Parameters	Scopes
`list_environments`	List all available environments	None	Environment Read
`get_environment_details`	Get environment details by ID (e.g., env_123)	environmentId	Environment Read
`list_environment_roles`	List all roles in the specified environment	environmentId (format: env_)	Environment Read
`create_environment_role`	Create a new role in the specified environment	environmentId (format: env_), roleName, displayName, description, isDefault (boolean)	Environment Write
`list_environment_scopes`	List all scopes in the specified environment	environmentId (format: env_)	Environment Read
`create_environment_scope`	Create a new scope in the specified environment	environmentId (format: env_), scopeName, description	Environment Write

Workspace Management

API	Description	Parameters	Scopes
`list_workspace_members`	List all members in the current workspace	pageToken (1 - based index)	Workspace Read
`invite_workspace_member`	Invite a new member to the current workspace	email	Workspace Write

Organization Management

API	Description	Parameters	Scopes
`list_organizations`	List all organizations under the specified environment	environmentId (format: env_), pageToken	Organization Read
`get_organization_details`	Get details of an organization by ID (e.g., org_123)	environmentId (format: env_), organizationId	Organization Read
`create_organization`	Create a new organization under the specified environment	environmentId (format: env_)	Organization Write
`generate_admin_portal_link`	Generate a magic link to the admin portal for the selected organization	environmentId (format: env_), organizationId (e.g., org_123)	Organization Write
`create_organization_user`	Create a new user in the selected organization	environmentId (format: env_), organizationId, email, externalId, firstName, lastName, metadata (JSON key - value pairs)	Organization Write
`list_organization_users`	List all users in the selected organization	environmentId (format: env_), organizationId, pageToken	Organization Read
`update_organization_settings`	Update the settings of an organization	environmentId (format: env_), organizationId, feature (JSON array of feature objects)	Organization Write

Connection Management

API	Description	Parameters	Scopes
`list_environment_connections`	List all connections for the specified environment	environmentId (format: env_)	Environment Read
`list_organization_connections`	List all connections for the selected organization	environmentId (format: env_), organizationId (e.g., org_123)	Organization Read
`create_environment_oidc_connection`	Create a new OIDC connection for the specified environment	environmentId (format: env_), provider (OKTA, GOOGLE, MICROSOFT_AD, AUTH0, ONELOGIN, PING_IDENTITY, JUMPCLOUD, CUSTOM, GITHUB, GITLAB, LINKEDIN, SALESFORCE, MICROSOFT, IDP_SIMULATOR, SCALEKIT, ADFS)	Environment Write
`update_environment_oidc_connection`	Update an existing OIDC connection for the specified environment	environmentId (format: env_), connectionId (e.g., conn_123), key_id, provider, oidc_config (comprehensive OIDC configuration object)	Environment Write
`enable_environment_connection`	Enable an existing connection for the specified environment	environmentId (format: env_), connectionId (e.g., conn_123)	Environment Write

MCP Server Management

API	Description	Parameters	Scopes
`list_mcp_servers`	List all MCP servers in the specified environment	environmentId (format: env_), pageToken	Environment Read
`register_mcp_server`	Register a new MCP server in the specified environment	environmentId (format: env_), name, description, url, access_token_expiry (in seconds), provider (optional, required when use_scalekit_authentication is false), use_scalekit_authentication (boolean)	Environment Write
`update_mcp_server`	Update an existing MCP server in the specified environment	environmentId (format: env_), id (MCP server ID), name (optional), description (optional), url (optional), access_token_expiry (optional, in seconds), provider (optional), use_scalekit_authentication (optional boolean)	Environment Write
`switch_mcp_auth_to_scalekit`	Switch the authentication of an existing MCP server to Scalekit authentication	environmentId (format: env_), id (MCP server ID)	Environment Write

🔧 Technical Details

Authentication for MCP Server

The Scalekit MCP server uses OAuth2.1 - based authentication. Once you register the Scalekit MCP Server in your MCP Host, your MCP Host will initiate an OAuth authorization workflow. This allows the MCP Client to obtain appropriate tokens for secure communication with Scalekit's MCP Server.

⚠️ Important Note

If you are building your own MCP Server and would like to add OAuth - based authorization, you can refer to our solution Auth for MCP Servers here: https://docs.scalekit.com/guides/mcp/overview/