Ory MCP Server

Ory's MCP server provides an enterprise-grade interface for AI agents and autonomous workflows to interact directly with the Ory Network APIs. It enables agents to inspect and manage user identities, introspect OAuth2 tokens, issue and revoke OAuth2 and OpenID Connect client credentials, and check and manage fine-grained relation-based access control policies with Ory Keto.

Start for free

Ory MCP Server

Benefits with Ory + Ory MCP Server

Agents you build or run against the Ory MCP server can reach the identities, OAuth2 clients, and permission relationships that decide who signs in to your applications and what they can access. Ory Agent Security checks every tool call your agents make to the Ory MCP server against the user and agent behind it, so a support agent can look up a customer's account while changes to identities and project settings stay with the provisioning agents you approve. A denied change never reaches your Ory Network project.

npm install -g @ory/mcp-server

View on npm

Use Cases

— 01 use case

Agent IAM

Set support agents to Read for user lookups, provisioning agents to Write, keep project configuration with one Admin agent, and Block Ory for everything else.

Explore Agent IAM

Core Functionality

— 04 capabilities

Read, write, admin, or no access
Ory Agent Security classifies every tool on the Ory MCP server as read, write, or admin, so you can give each user, team, or agent type only the level it needs: read for support and audit agents, write for provisioning agents that onboard users, admin for the few agents your identity team owns, and no access for agents with no identity responsibilities.
Enforced before execution
Ory Agent Security checks each tool call against the user, the agent acting for them, and any sub-agent inside the agent harness, so a denied identity deletion stops before it reaches your Ory Network project, with nothing to roll back and no gateway to deploy.
Observe, then enforce
Observe mode shows which agents try to create, change, or delete identities and on whose behalf without blocking anything, so you can apply Ory's pre-built policy for the Ory MCP server and enforce it on your own schedule.
Complete audit trail
Every allow and deny decision on the Ory MCP server streams to your SIEM through OpenTelemetry with the user, agent, and action attached, so you can show who changed an identity or OAuth2 client, through which agent, and when.