@ory/mcp-server
MCP server exposing the Ory CLI and Ory Network REST API as tools for AI agents to manage identities, OAuth2 clients, permissions, projects, and configuration
npm · fingerprint 01fcd7e73ca905cea6e74330 · repository · RSS
54tools
2recorded versions
15dtracked
changed since 26 Oct
What changed
Changed between 26 October 2026 and 30 October 2026 (first seen 2026-10-30 12:48 UTC)
1 description rewritten.
--- pinned/ory_api_request +++ observed/ory_api_request { - "description": "Make an authenticated request against the Ory Network REST API. Use this for endpoints not exposed by the dedicated tools (e.g. self-service flows, identity sessions, recovery codes, consent challenges, trusted JWT issuers, schemas). The base URL defaults to ORY_PROJECT_URL and authentication uses ORY_API_KEY as a Bearer token unless overridden. The full API reference is at https://ory.com/docs/reference/api.", + "description": "Make an authenticated request against the Ory Network REST API. Use this for endpoints not exposed by the dedicated tools (e.g. self-service flows, identity sessions, recovery codes, consent challenges, trusted JWT issuers, schemas). The base URL defaults to the connected project (ORY_PROJECT_URL, or the project the Ory Agent plugins are connected to) and authentication uses ORY_API_KEY as a Bearer token unless overridden. The full API reference is at https://ory.com/docs/reference/api.", "execution": { "taskSupport": "forbidden" }, - "description": "Override the base URL. Defaults to ORY_PROJECT_URL or ORY_SDK_URL env var. The env-configured API key is only attached automatically when the URL targets a trusted Ory host (the configured project URL origin, *.oryapis.com, api.console.ory.sh over https, or localhost).", + "description": "Override the base URL. Defaults to ORY_PROJECT_URL / ORY_SDK_URL, then the connected project, then the ory CLI's selected project. The env-configured API key is only attached automatically when the URL targets a trusted Ory host (the configured project URL origin, *.oryapis.com, api.console.ory.sh over https, or localhost).", "type": "string" }, "body": {
Current tools
Show all 54 tool fingerprints
ory_api_request
ory_check_permission
ory_create_event_stream
ory_create_jwk
ory_create_oauth2_client
ory_create_organization
ory_create_project
ory_create_relationship
ory_create_relationships_from_file
ory_create_workspace
ory_delete_event_stream
ory_delete_identity
ory_delete_jwk
ory_delete_oauth2_access_tokens
ory_delete_oauth2_client
ory_delete_organization
ory_delete_relationships
ory_get_identity
ory_get_identity_config
ory_get_jwk
ory_get_oauth2_client
ory_get_oauth2_config
ory_get_permission_config
ory_get_project
ory_get_workspace
ory_import_identities
ory_import_jwk
ory_import_oauth2_client
ory_introspect_token
ory_list_event_streams
ory_list_identities
ory_list_oauth2_clients
ory_list_organizations
ory_list_projects
ory_list_relationships
ory_list_workspaces
ory_parse_relationships
ory_patch_identity_config
ory_patch_oauth2_config
ory_patch_opl
ory_patch_permission_config
ory_patch_project
ory_perform_client_credentials
ory_revoke_token
ory_update_event_stream
ory_update_identity_config
ory_update_oauth2_client
ory_update_oauth2_config
ory_update_opl
ory_update_organization
ory_update_permission_config
ory_update_project
ory_use_project
ory_validate_identity
Watch this server yourself
If you run this server, put the proxy in front of it. It pins these exact fingerprints on first connect and stops the session if they move.
npx -y mcp-pin@0.2.3 -- <your @ory/mcp-server command>
Or subscribe to this page's RSS feed to be told when it changes.
Badge
The badge states one fact about time and nothing else. It never claims a server is safe.
[](https://mcp-pin.gautamkhosla.com/servers/0d52704b6e56c39c.html)