Integration

FusionAuth integration

Self-hostable and cloud-hosted customer identity and access management (CIAM) platform. Manage users, applications, roles, groups, tenants, registrations, JWTs, passwordless and two-factor authentication, email templates, webhooks, and audit logs against your FusionAuth instance. Suitable for B2C/B2B identity, SSO, and developer-controlled auth flows.

Connect FusionAuth How integrations work

Ask it in chat

Say what should happen.
The workflow builds itself.

When this happens, do that in FusionAuth.Built from the 34 FusionAuth tools below, on the connection you add once.

Common FusionAuth use cases

admin dashboards
admin search
RBAC cleanup
group cleanup
profile edits
team grouping
template audit
app detail page
app offboarding
decommissioning

What you can do with FusionAuth

Each of these is one operation on one endpoint, available both as a workflow step and as a tool an AI agent can call on its own. Nothing bundles several operations into one action, so what a run did stays readable afterwards.

Most endpoints run on the free plan. A few, mainly the ones that publish on your behalf, need a paid plan.

User, 7 operations

create_userCreate userPOSTCreates a new user account in FusionAuth, optionally sending a set-password email.
delete_userDelete userDELETEDeletes a user (soft by default, hard with hardDelete=true).
get_userGet userGETRetrieves a user profile by UUID, including registrations and tenant.
get_user_by_login_idGet user by login idGETLooks up a user by email, username or phone (loginId).
patch_userPatch userPATCHPartial update of a user - merges only the fields supplied.
search_usersSearch usersGETSearches users with a Lucene query string and pagination.
update_userUpdate userPUTReplaces a user's profile fields with the supplied object.

Application, 5 operations

create_applicationCreate applicationPOSTCreates a FusionAuth application (OAuth client / SSO target).
delete_applicationDelete applicationDELETEDeletes an application (soft by default, hard with hardDelete=true).
get_applicationGet applicationGETRetrieves an application configuration including its roles.
list_applicationsList applicationsGETLists all applications in the tenant scope of the API key.
update_applicationUpdate applicationPUTReplaces an application's configuration.

Group, 3 operations

create_groupCreate groupPOSTCreates a group within a FusionAuth tenant.
delete_groupDelete groupDELETEDeletes a group.
list_groupsList groupsGETLists all groups in the tenant scope of the API key.

Jwt, 3 operations

issue_jwtIssue jwtGETMints a new JWT scoped to an application.
refresh_jwtRefresh jwtPOSTExchanges a refresh token for a new access JWT.
validate_jwtValidate jwtGETValidates a JWT and returns its decoded claims.

Password, 2 operations

change_passwordChange passwordPOSTCompletes a password change using a single-use changePasswordId.
forgot_passwordForgot passwordPOSTStarts the forgot-password flow and optionally sends the reset email.

Passwordless, 2 operations

passwordless_loginPasswordless loginPOSTCompletes a passwordless login by validating a magic-link code.
passwordless_startPasswordless startPOSTStarts a passwordless login and returns a one-time code for the magic link.

Registration, 2 operations

create_registrationCreate registrationPOSTRegisters a user to an application, optionally creating the user inline.
delete_registrationDelete registrationDELETERemoves a user's registration from an application.

Role, 2 operations

create_application_roleCreate application rolePOSTCreates a role on a FusionAuth application.
delete_application_roleDelete application roleDELETEDeletes a role from an application.

Tenant, 2 operations

create_tenantCreate tenantPOSTCreates a tenant - an isolated identity boundary in FusionAuth.
list_tenantsList tenantsGETLists all tenants visible to the API key.

Audit log, 1 operation

search_audit_logsSearch audit logsGETSearches FusionAuth audit logs by user, message and time range.

Email template, 1 operation

list_email_templatesList email templatesGETLists all email templates configured in FusionAuth.

Group member, 1 operation

add_group_membersAdd group membersPOSTAdds users to one or more groups in a single call.

Session, 1 operation

loginLoginPOSTAuthenticates a user with credentials and returns JWT plus optional refresh token.

Two factor, 1 operation

two_factor_loginTwo factor loginPOSTCompletes an MFA login by validating a one-time code.

Webhook, 1 operation

create_webhookCreate webhookPOSTCreates a webhook subscription for FusionAuth events.

Use FusionAuth from Claude Code, Cursor or Codex

Connect FusionAuth in LiveContext, create an API key in Settings, then add the LiveContext MCP server to your client. Its FusionAuth operations become tools the client can call, next to every other integration you connected.

Claude Code

claude mcp add --transport http livecontext https://livecontext.ai/mcp --header "X-API-Key: YOUR_API_KEY"

Codex (~/.codex/config.toml)

[mcp_servers.livecontext]
url = "https://livecontext.ai/mcp"

[mcp_servers.livecontext.http_headers]
"X-API-Key" = "YOUR_API_KEY"

Cursor, Claude Desktop and other JSON configs

{
  "mcpServers": {
    "livecontext": {
      "type": "http",
      "url": "https://livecontext.ai/mcp",
      "headers": {
        "X-API-Key": "YOUR_API_KEY"
      }
    }
  }
}

Set up the MCP server step by step

How to connect FusionAuth

Create your workspace
Sign up free. Nothing to install.
Connect FusionAuth once
Add your FusionAuth connection in Settings. Every tool from this integration reuses it, and secrets are encrypted at rest and visible only to you.
Describe the job in chat
The workflow builds itself in front of you and picks the endpoints it needs. Drag the steps yourself on the canvas whenever you would rather be explicit.

FusionAuth integration FAQ

What can you do with the FusionAuth integration?

LiveContext exposes 34 operations on FusionAuth, covering user, application, group and jwt. Common uses include admin dashboards, admin search and RBAC cleanup.