What can you do with the FusionAuth integration?

LiveContext exposes 34 operations on FusionAuth, covering user, application, group and jwt. Common uses include admin dashboards, admin search and RBAC cleanup.

LiveContext

All integrations

FusionAuth integration

Self-hostable and cloud-hosted customer identity and access management (CIAM) platform. Manage users, applications, roles, groups, tenants, registrations, JWTs, passwordless and two-factor authentication, email templates, webhooks, and audit logs against your FusionAuth instance. Suitable for B2C/B2B identity, SSO, and developer-controlled auth flows.

34 toolsAPI keyAPI docs

Connect FusionAuth How integrations work

Common FusionAuth use cases

admin dashboards
admin search
RBAC cleanup
group cleanup
profile edits
team grouping
template audit
app detail page
app offboarding
decommissioning

What you can do with FusionAuth

Each of these is one operation on one endpoint, available both as a workflow step and as a tool an AI agent can call on its own. Nothing bundles several operations into one action, so what a run did stays readable afterwards.

Most endpoints run on the free plan. A few, mainly the ones that publish on your behalf, need a paid plan.

User, 7 operations

POSTcreate_user
Creates a new user account in FusionAuth, optionally sending a set-password email.
DELETEdelete_user
Deletes a user (soft by default, hard with hardDelete=true).
GETget_user
Retrieves a user profile by UUID, including registrations and tenant.
GETget_user_by_login_id
Looks up a user by email, username or phone (loginId).
PATCHpatch_user
Partial update of a user - merges only the fields supplied.
GETsearch_users
Searches users with a Lucene query string and pagination.
PUTupdate_user
Replaces a user's profile fields with the supplied object.

Application, 5 operations

POSTcreate_application
Creates a FusionAuth application (OAuth client / SSO target).
DELETEdelete_application
Deletes an application (soft by default, hard with hardDelete=true).
GETget_application
Retrieves an application configuration including its roles.
GETlist_applications
Lists all applications in the tenant scope of the API key.
PUTupdate_application
Replaces an application's configuration.

Group, 3 operations

POSTcreate_group
Creates a group within a FusionAuth tenant.
DELETEdelete_group
Deletes a group.
GETlist_groups
Lists all groups in the tenant scope of the API key.

Jwt, 3 operations

GETissue_jwt
Mints a new JWT scoped to an application.
POSTrefresh_jwt
Exchanges a refresh token for a new access JWT.
GETvalidate_jwt
Validates a JWT and returns its decoded claims.

Password, 2 operations

POSTchange_password
Completes a password change using a single-use changePasswordId.
POSTforgot_password
Starts the forgot-password flow and optionally sends the reset email.

Passwordless, 2 operations

POSTpasswordless_login
Completes a passwordless login by validating a magic-link code.
POSTpasswordless_start
Starts a passwordless login and returns a one-time code for the magic link.

Registration, 2 operations

POSTcreate_registration
Registers a user to an application, optionally creating the user inline.
DELETEdelete_registration
Removes a user's registration from an application.

Role, 2 operations

POSTcreate_application_role
Creates a role on a FusionAuth application.
DELETEdelete_application_role
Deletes a role from an application.

Tenant, 2 operations

POSTcreate_tenant
Creates a tenant - an isolated identity boundary in FusionAuth.
GETlist_tenants
Lists all tenants visible to the API key.

Audit log, 1 operation

GETsearch_audit_logs
Searches FusionAuth audit logs by user, message and time range.

Email template, 1 operation

GETlist_email_templates
Lists all email templates configured in FusionAuth.

Group member, 1 operation

POSTadd_group_members
Adds users to one or more groups in a single call.

Session, 1 operation

POSTlogin
Authenticates a user with credentials and returns JWT plus optional refresh token.

Two factor, 1 operation

POSTtwo_factor_login
Completes an MFA login by validating a one-time code.

Webhook, 1 operation

POSTcreate_webhook
Creates a webhook subscription for FusionAuth events.

Use FusionAuth from Claude Code, Cursor or Codex

Connect FusionAuth in LiveContext, create an API key in Settings, then add the LiveContext MCP server to your client. Its FusionAuth operations become tools the client can call, next to every other integration you connected.

Claude Code

claude mcp add --transport http livecontext https://livecontext.ai/mcp --header "X-API-Key: YOUR_API_KEY"

Codex (~/.codex/config.toml)

[mcp_servers.livecontext]
url = "https://livecontext.ai/mcp"

[mcp_servers.livecontext.http_headers]
"X-API-Key" = "YOUR_API_KEY"

Cursor, Claude Desktop and other JSON configs

{
  "mcpServers": {
    "livecontext": {
      "type": "http",
      "url": "https://livecontext.ai/mcp",
      "headers": {
        "X-API-Key": "YOUR_API_KEY"
      }
    }
  }
}

Set up the MCP server step by step

How to connect FusionAuth

Create your workspace
Sign up free. Nothing to install.
Connect FusionAuth once
Add your FusionAuth connection in Settings. Every tool from this integration reuses it, and secrets are encrypted at rest and visible only to you.
Describe the job in chat
The workflow builds itself in front of you and picks the endpoints it needs. Drag the steps yourself on the canvas whenever you would rather be explicit.

FusionAuth integration FAQ

What can you do with the FusionAuth integration?: LiveContext exposes 34 operations on FusionAuth, covering user, application, group and jwt. Common uses include admin dashboards, admin search and RBAC cleanup.