Integration

authentik integration

authentik is a self-hosted identity provider. An agent can manage the directory and the access rules around it: create, read, update and delete users (including service accounts, password sets, recovery links and account lockdown), groups and their memberships, RBAC roles and the permissions assigned to them, API tokens and their key values, applications and the check that says whether a user may open one, authentication flows and their stage bindings, policies (the generic registry plus expression policies) and the bindings that attach them to a flow or application, OAuth2 providers with their setup URLs and claim preview, the read side of every provider and source type, certificate key pairs including generation and certificate or private-key retrieval, brands, and the event log with its statistics and export. This is a curated core: authenticator and stage type families, per-provider and per-source property mappings, source user and group connections, endpoint and agent management, outposts, blueprints, tenants and enterprise licensing are not included, and neither are the browser-driven flow executor and impersonation routes. The credential is an authentik API token created under Directory then Tokens, sent as a bearer token. The host is part of the credential because every install is its own deployment.

Connect authentik How integrations work

Ask it in chat

Say what should happen.
The workflow builds itself.

When this happens, do that in authentik.Built from the 148 authentik tools below, on the connection you add once.

What you can do with authentik

Each of these is one operation on one endpoint, available both as a workflow step and as a tool an AI agent can call on its own. Nothing bundles several operations into one action, so what a run did stays readable afterwards.

Most endpoints run on the free plan. A few, mainly the ones that publish on your behalf, need a paid plan.

Used by, 15 operations

list_application_usagesList application usagesGETGet a list of all objects that use this object.
list_brand_usagesList brand usagesGETGet a list of all objects that use this object.
list_certificate_keypair_usagesList certificate keypair usagesGETGet a list of all objects that use this object.
list_expression_policy_usagesList expression policy usagesGETGet a list of all objects that use this object.
list_flow_stage_binding_usagesList flow stage binding usagesGETGet a list of all objects that use this object.
list_flow_usagesList flow usagesGETGet a list of all objects that use this object.
list_group_usagesList group usagesGETGet a list of all objects that use this object.
list_oauth2_provider_usagesList oauth2 provider usagesGETGet a list of all objects that use this object.
list_policy_binding_usagesList policy binding usagesGETGet a list of all objects that use this object.
list_policy_usagesList policy usagesGETGet a list of all objects that use this object.
list_provider_usagesList provider usagesGETGet a list of all objects that use this object.
list_role_usagesList role usagesGETGet a list of all objects that use this object.
list_source_usagesList source usagesGETGet a list of all objects that use this object.
list_token_usagesList token usagesGETGet a list of all objects that use this object.
list_user_usagesList user usagesGETGet a list of all objects that use this object.

All, 9 operations

delete_policyDelete policyDELETEPolicy Viewset.
delete_providerDelete providerDELETEProvider Viewset.
delete_sourceDelete sourceDELETEPrevent deletion of built-in sources.
get_policyGet policyGETPolicy Viewset.
get_providerGet providerGETProvider Viewset.
get_sourceGet sourceGETSource Viewset.
list_policiesList policiesGETPolicy Viewset.
list_providersList providersGETProvider Viewset.
list_sourcesList sourcesGETSource Viewset.

Binding, 9 operations

create_flow_stage_bindingCreate flow stage bindingPOSTFlowStageBinding Viewset.
create_policy_bindingCreate policy bindingPOSTPolicyBinding Viewset.
delete_flow_stage_bindingDelete flow stage bindingDELETEFlowStageBinding Viewset.
delete_policy_bindingDelete policy bindingDELETEPolicyBinding Viewset.
get_flow_stage_bindingGet flow stage bindingGETFlowStageBinding Viewset.
get_policy_bindingGet policy bindingGETPolicyBinding Viewset.
list_flow_stage_bindingsList flow stage bindingsGETFlowStageBinding Viewset.
list_policy_bindingsList policy bindingsGETPolicyBinding Viewset.
replace_flow_stage_bindingReplace flow stage bindingPUTFlowStageBinding Viewset.

Application, 5 operations

create_applicationCreate applicationPOSTApplication Viewset.
delete_applicationDelete applicationDELETEApplication Viewset.
get_applicationGet applicationGETApplication Viewset.
list_applicationsList applicationsGETCustom list method that checks Policy based access instead of guardian.
replace_applicationReplace applicationPUTApplication Viewset.

Brand, 5 operations

create_brandCreate brandPOSTBrand Viewset.
delete_brandDelete brandDELETEBrand Viewset.
get_brandGet brandGETBrand Viewset.
list_brandsList brandsGETBrand Viewset.
replace_brandReplace brandPUTBrand Viewset.

Certificatekeypair, 5 operations

create_certificate_keypairCreate certificate keypairPOSTCertificateKeyPair Viewset.
delete_certificate_keypairDelete certificate keypairDELETECertificateKeyPair Viewset.
get_certificate_keypairGet certificate keypairGETCertificateKeyPair Viewset.
list_certificate_keypairsList certificate keypairsGETCertificateKeyPair Viewset.
replace_certificate_keypairReplace certificate keypairPUTCertificateKeyPair Viewset.

Event, 5 operations

create_eventCreate eventPOSTEvent Read-Only Viewset.
delete_eventDelete eventDELETEEvent Read-Only Viewset.
get_eventGet eventGETEvent Read-Only Viewset.
list_eventsList eventsGETEvent Read-Only Viewset.
replace_eventReplace eventPUTEvent Read-Only Viewset.

Expression, 5 operations

create_expression_policyCreate expression policyPOSTSource Viewset.
delete_expression_policyDelete expression policyDELETESource Viewset.
get_expression_policyGet expression policyGETSource Viewset.
list_expression_policiesList expression policiesGETSource Viewset.
replace_expression_policyReplace expression policyPUTSource Viewset.

Instance, 5 operations

create_flowCreate flowPOSTFlow Viewset.
delete_flowDelete flowDELETEFlow Viewset.
get_flowGet flowGETFlow Viewset.
list_flowsList flowsGETFlow Viewset.
replace_flowReplace flowPUTFlow Viewset.

Role, 5 operations

create_roleCreate rolePOSTRole viewset.
delete_roleDelete roleDELETERole viewset.
get_roleGet roleGETRole viewset.
list_role_permissionsList role permissionsGETGet a role's assigned object permissions.
list_rolesList rolesGETRole viewset.

Group, 4 operations

create_groupCreate groupPOSTGroup Viewset.
delete_groupDelete groupDELETEGroup Viewset.
get_groupGet groupGETGroup Viewset.
list_groupsList groupsGETGroup Viewset.

Oauth2, 4 operations

create_oauth2_providerCreate oauth2 providerPOSTOAuth2Provider Viewset.
delete_oauth2_providerDelete oauth2 providerDELETEOAuth2Provider Viewset.
get_oauth2_providerGet oauth2 providerGETOAuth2Provider Viewset.
list_oauth2_providersList oauth2 providersGETOAuth2Provider Viewset.

Token, 4 operations

create_tokenCreate tokenPOSTToken Viewset.
delete_tokenDelete tokenDELETEToken Viewset.
get_tokenGet tokenGETToken Viewset.
list_tokensList tokensGETToken Viewset.

User, 4 operations

create_userCreate userPOSTUser Viewset.
delete_userDelete userDELETEUser Viewset.
get_userGet userGETUser Viewset.
list_usersList usersGETUser Viewset.

Export, 3 operations

export_eventsExport eventsPOSTCreate a data export for this data type. Note that the export is generated asynchronously: this method returns a `DataExport` object that will initially have `completed=false` as.
export_flowExport flowGETExport flow to .yaml file.
export_usersExport usersPOSTCreate a data export for this data type. Note that the export is generated asynchronously: this method returns a `DataExport` object that will initially have `completed=false` as.

Type, 3 operations

list_policy_typesList policy typesGETGet all creatable types.
list_provider_typesList provider typesGETGet all creatable types.
list_source_typesList source typesGETGet all creatable types.

Add user, 2 operations

add_user_to_groupAdd user to groupPOSTAdd user to group.
add_user_to_roleAdd user to rolePOSTAdd user to role.

Cache info, 2 operations

get_flow_cache_infoGet flow cache infoGETInfo about cached flows.
get_policy_cache_infoGet policy cache infoGETInfo about cached policies.

History, 2 operations

get_version_history_entryGet version history entryGETVersionHistory Viewset.
list_version_historyList version historyGETVersionHistory Viewset.

Permission, 2 operations

get_permissionGet permissionGETRead-only list of all permissions, filterable by model and app.
list_permissionsList permissionsGETRead-only list of all permissions, filterable by model and app.

Remove user, 2 operations

remove_user_from_groupRemove user from groupPOSTRemove user from group.
remove_user_from_roleRemove user from rolePOSTRemove user from role.

Account lockdown, 1 operation

lock_down_user_accountLock down user accountPOSTChoose the target account, then return a flow link.

Action, 1 operation

list_event_actionsList event actionsGETGet all actions.

Assign, 1 operation

assign_role_permissionAssign role permissionPOSTAssign permission(s) to role. When `object_pk` is set, the permissions are only assigned to the specific object, otherwise they are assigned globally.

Assigned by role, 1 operation

list_permissions_assigned_by_rolesList permissions assigned by rolesGETGet assigned object permissions for a single object.

Check acces, 1 operation

check_application_accessCheck application accessGETCheck access to a single application by slug.

Current, 1 operation

get_current_brandGet current brandGETGet current brand.

Diagram, 1 operation

get_flow_diagramGet flow diagramGETReturn diagram for flow with slug `slug`, in the format used by flowchart.js.

Generate, 1 operation

generate_certificate_keypairGenerate certificate keypairPOSTGenerate a new, self-signed certificate-key pair.

Me, 1 operation

get_current_userGet current userGETGet information about current user.

Path, 1 operation

list_user_pathsList user pathsGETGet all user paths.

Preview user, 1 operation

preview_oauth2_provider_userPreview oauth2 provider userGETPreview user data for provider.

Recovery, 1 operation

create_user_recovery_linkCreate user recovery linkPOSTCreate a temporary link that a user can use to recover their account.

Requestable, 1 operation

list_requestable_applicationsList requestable applicationsGETList applications which the current user can request access to.

Service account, 1 operation

create_service_accountCreate service accountPOSTCreate a new user account that is marked as a service account.

Setup url, 1 operation

get_oauth2_provider_setup_urlsGet oauth2 provider setup urlsGETGet Providers setup URLs.

Stat, 1 operation

get_event_statsGet event statsGETGet event stats for specified filters and count steps.

Top per user, 1 operation

list_top_events_per_userList top events per userGETGet the top_n events grouped by user count.

User setting, 1 operation

list_source_user_settingsList source user settingsGETGet all sources the user can configure.

Version, 1 operation

get_versionGet versionGETGet running and latest version.

Volume, 1 operation

list_event_volumeList event volumeGETGet event volume for specified filters and timeframe.

Showing the first 120 of 148 endpoints. The rest are in the product, searchable from the workflow builder and from chat.

Use authentik from Claude Code, Cursor or Codex

Connect authentik in LiveContext, create an API key in Settings, then add the LiveContext MCP server to your client. Its authentik operations become tools the client can call, next to every other integration you connected.

Claude Code

claude mcp add --transport http livecontext https://livecontext.ai/mcp --header "X-API-Key: YOUR_API_KEY"

Codex (~/.codex/config.toml)

[mcp_servers.livecontext]
url = "https://livecontext.ai/mcp"

[mcp_servers.livecontext.http_headers]
"X-API-Key" = "YOUR_API_KEY"

Cursor, Claude Desktop and other JSON configs

{
  "mcpServers": {
    "livecontext": {
      "type": "http",
      "url": "https://livecontext.ai/mcp",
      "headers": {
        "X-API-Key": "YOUR_API_KEY"
      }
    }
  }
}

Set up the MCP server step by step

How to connect authentik

Create your workspace
Sign up free. Nothing to install.
Connect authentik once
Add your authentik connection in Settings. Every tool from this integration reuses it, and secrets are encrypted at rest and visible only to you.
Describe the job in chat
The workflow builds itself in front of you and picks the endpoints it needs. Drag the steps yourself on the canvas whenever you would rather be explicit.