Logto integration
Logto Management API for the open-source customer identity platform, on Logto Cloud or a self-hosted instance. Administer every object of a tenant: users (create, search, suspend, set or verify a password, custom data, linked social and SSO identities, MFA verifications, personal access tokens, grants, sessions, profile), organizations (members, per-organization roles and scopes, just-in-time provisioning by email domain, role or SSO connector, invitations), roles, scopes and API resources, applications (secrets, redirect and access control settings, per-application roles, sign-in experience, consent scopes, protected-app custom domains), SAML applications and their signing secrets, social and enterprise SSO connectors, webhooks and their delivery logs, email templates and custom phrases, custom profile fields, one-time tokens and verification codes, sign-in experience and CAPTCHA settings, JWT customizers and OIDC signing keys, custom domains, audit logs and user statistics. The credential is an access token issued to a machine-to-machine application that holds the Management API 'all' role, and the instance host is your Logto endpoint, for example your-tenant.logto.app.
Say what should happen.
The workflow builds itself.
What you can do with Logto
Each of these is one operation on one endpoint, available both as a workflow step and as a tool an AI agent can call on its own. Nothing bundles several operations into one action, so what a run did stays readable afterwards.
Most endpoints run on the free plan. A few, mainly the ones that publish on your behalf, need a paid plan.
Role, 14 operations
assign_application_rolesAssign application rolesPOSTAssign API resource roles to application.assign_organization_roles_to_applicationAssign organization roles to applicationPOSTAdd organization application role.assign_organization_roles_to_applicationsAssign organization roles to applicationsPOSTAssign roles to applications in an organization.assign_organization_roles_to_userAssign organization roles to userPOSTAssign roles to a user in an organization.assign_organization_roles_to_usersAssign organization roles to usersPOSTAssign roles to organization user members.assign_user_rolesAssign user rolesPOSTAssign roles to user.create_organization_jit_roleCreate organization jit rolePOSTAdd organization JIT default roles.create_roleCreate rolePOSTCreate a role.delete_application_roleDelete application roleDELETERemove a API resource role from application.delete_organization_application_roleDelete organization application roleDELETERemove organization application role.delete_organization_jit_roleDelete organization jit roleDELETERemove organization JIT default role.delete_organization_user_roleDelete organization user roleDELETERemove a role from a user in an organization.delete_roleDelete roleDELETEDelete role.delete_user_roleDelete user roleDELETERemove role from user.
Application, 6 operations
add_organization_applicationsAdd organization applicationsPOSTAdd organization application.assign_applications_to_roleAssign applications to rolePOSTAssign role to applications.create_applicationCreate applicationPOSTCreate an application.delete_applicationDelete applicationDELETEDelete application.delete_organization_applicationDelete organization applicationDELETERemove organization application.get_applicationGet applicationGETGet application.
Scope, 5 operations
assign_organization_role_scopesAssign organization role scopesPOSTAssign organization scopes to organization role.assign_scopes_to_roleAssign scopes to rolePOSTLink scopes to role.create_resource_scopeCreate resource scopePOSTCreate API resource scope.delete_organization_role_scopeDelete organization role scopeDELETERemove organization scope.delete_resource_scopeDelete resource scopeDELETEDelete API resource scope.
Secret, 5 operations
create_application_secretCreate application secretPOSTAdd application secret.create_saml_application_secretCreate saml application secretPOSTCreate SAML application secret.delete_application_secretDelete application secretDELETEDelete application secret.delete_saml_application_secretDelete saml application secretDELETEDelete SAML application secret.delete_secretDelete secretDELETEDelete secret.
User, 5 operations
add_organization_usersAdd organization usersPOSTAdd user members to organization.assign_users_to_roleAssign users to rolePOSTAssign role to users.create_userCreate userPOSTCreate user.delete_organization_userDelete organization userDELETERemove user member from organization.delete_userDelete userDELETEDelete user.
Sso connector, 4 operations
add_organization_jit_sso_connectorsAdd organization jit sso connectorsPOSTAdd organization JIT SSO connectors.create_sso_connectorCreate sso connectorPOSTCreate SSO connector.delete_organization_jit_sso_connectorDelete organization jit sso connectorDELETERemove organization JIT SSO connector.delete_sso_connectorDelete sso connectorDELETEDelete SSO connector.
User consent scope, 4 operations
assign_application_user_consent_scopeAssign application user consent scopePOSTAssign user consent scopes to application.assign_cimd_user_consent_scopesAssign cimd user consent scopesPOSTAssign CIMD user consent scopes.delete_application_user_consent_scopeDelete application user consent scopeDELETERemove user consent scope from application.delete_cimd_user_consent_scopeDelete cimd user consent scopeDELETEDelete a CIMD user consent scope.
Connector, 3 operations
create_connectorCreate connectorPOSTCreate connector.delete_connectorDelete connectorDELETEDelete connector.get_connectorGet connectorGETGet connector.
Custom profile field, 3 operations
create_custom_profile_fieldCreate custom profile fieldPOSTCreate a custom profile field.delete_custom_profile_fieldDelete custom profile fieldDELETEDelete a custom profile field by name.get_custom_profile_fieldGet custom profile fieldGETGet a custom profile field by name.
Domain, 3 operations
create_domainCreate domainPOSTCreate domain.delete_domainDelete domainDELETEDelete domain.get_domainGet domainGETGet domain.
Email template, 3 operations
delete_email_templateDelete email templateDELETEDelete an email template.delete_email_templatesDelete email templatesDELETEDelete email templates.get_email_templateGet email templateGETGet email template by ID.
Hook, 3 operations
create_hookCreate hookPOSTCreate a hook.delete_hookDelete hookDELETEDelete hook.get_hookGet hookGETGet hook.
One time token, 3 operations
create_one_time_tokenCreate one time tokenPOSTCreate one-time token.delete_one_time_tokenDelete one time tokenDELETEDelete one-time token by ID.get_one_time_tokenGet one time tokenGETGet one-time token by ID.
Organization, 3 operations
create_organizationCreate organizationPOSTCreate an organization.delete_organizationDelete organizationDELETEDelete organization.get_organizationGet organizationGETGet organization.
Organization invitation, 3 operations
create_organization_invitationCreate organization invitationPOSTCreate organization invitation.delete_organization_invitationDelete organization invitationDELETEDelete organization invitation.get_organization_invitationGet organization invitationGETGet organization invitation.
Organization role, 3 operations
create_organization_roleCreate organization rolePOSTCreate an organization role.delete_organization_roleDelete organization roleDELETEDelete organization role.get_organization_roleGet organization roleGETGet organization role.
Organization scope, 3 operations
create_organization_scopeCreate organization scopePOSTCreate an organization scope.delete_organization_scopeDelete organization scopeDELETEDelete organization scope.get_organization_scopeGet organization scopeGETGet organization scope.
Action, 2 operations
delete_actionDelete actionDELETEDelete action.get_actionGet actionGETGet action.
Captcha provider, 2 operations
delete_captcha_providerDelete captcha providerDELETEDelete captcha provider.get_captcha_providerGet captcha providerGETGet captcha provider.
Consent organization, 2 operations
add_application_user_consent_organizationsAdd application user consent organizationsPOSTGrant a list of organization access of a user for a application.delete_application_user_consent_organizationDelete application user consent organizationDELETERevoke a user's access to an organization for a application.
Custom domain, 2 operations
create_application_custom_domainCreate application custom domainPOSTAdd a custom domain to the application.delete_application_custom_domainDelete application custom domainDELETERemove custom domain.
Custom phrase, 2 operations
delete_custom_phraseDelete custom phraseDELETEDelete custom phrase.get_custom_phraseGet custom phraseGETGet custom phrases.
Delete, 2 operations
delete_sentinel_activitiesDelete sentinel activitiesPOSTBulk delete sentinel activities.delete_user_personal_access_token_by_nameDelete user personal access token by namePOSTDelete personal access token.
Email domain, 2 operations
add_organization_jit_email_domainAdd organization jit email domainPOSTAdd organization JIT email domain.delete_organization_jit_email_domainDelete organization jit email domainDELETERemove organization JIT email domain.
Identitie, 2 operations
create_user_identityCreate user identityPOSTLink social identity to user.delete_user_identityDelete user identityDELETEDelete social identity from user.
Jwt customizer, 2 operations
delete_jwt_customizerDelete jwt customizerDELETEDelete JWT customizer.get_jwt_customizerGet jwt customizerGETGet JWT customizer.
Mfa verification, 2 operations
create_user_mfa_verificationCreate user mfa verificationPOSTCreate an MFA verification for a user.delete_user_mfa_verificationDelete user mfa verificationDELETEDelete an MFA verification for a user.
Personal access token, 2 operations
create_user_personal_access_tokenCreate user personal access tokenPOSTAdd personal access token.delete_user_personal_access_tokenDelete user personal access tokenDELETEDelete personal access token.
Resource, 2 operations
create_resourceCreate resourcePOSTCreate an API resource.delete_resourceDelete resourceDELETEDelete API resource.
Resource scope, 2 operations
assign_organization_role_resource_scopesAssign organization role resource scopesPOSTAssign resource scopes to organization role.delete_organization_role_resource_scopeDelete organization role resource scopeDELETERemove resource scope.
Saml application, 2 operations
create_saml_applicationCreate saml applicationPOSTCreate SAML application.delete_saml_applicationDelete saml applicationDELETEDelete SAML application.
Session, 2 operations
delete_user_sessionDelete user sessionDELETERevoke a user session.get_oidc_session_configGet oidc session configGETGet OIDC session config.
Signing key, 2 operations
create_sso_connector_signing_keyCreate sso connector signing keyPOSTCreate an SP signing key.delete_sso_connector_signing_keyDelete sso connector signing keyDELETEDelete an SP signing key.
Access control, 1 operation
get_application_access_controlGet application access controlGETGet application access-control rules.
Account center, 1 operation
get_account_center_settingsGet account center settingsGETGet account center settings.
Active, 1 operation
get_active_user_statisticsGet active user statisticsGETGet active user data.
Admin console, 1 operation
get_admin_console_configGet admin console configGETGet admin console config.
Check password, 1 operation
check_default_passwordCheck default passwordPOSTCheck if a password meets the password policy.
Cimd, 1 operation
get_cimd_configGet cimd configGETGet CIMD config.
Cleanup, 1 operation
cleanup_domainsCleanup domainsPOSTCleanup stale domains.
Connector factorie, 1 operation
get_connector_factoryGet connector factoryGETGet connector factory.
Grant, 1 operation
delete_user_grantDelete user grantDELETERevoke a user grant.
Id token, 1 operation
get_id_token_configGet id token configGETGet ID token claims configuration.
Legacy secret, 1 operation
delete_application_legacy_secretDelete application legacy secretDELETEDelete application legacy secret.
Log, 1 operation
get_logGet logGETGet log.
New, 1 operation
get_new_user_statisticsGet new user statisticsGETGet new user count.
Oidc, 1 operation
delete_oidc_keyDelete oidc keyDELETEDelete OIDC key.
Sign in experience, 1 operation
get_application_sign_in_experienceGet application sign in experienceGETGet the application level sign-in experience.
Showing the first 120 of 267 endpoints. The rest are in the product, searchable from the workflow builder and from chat.
Use Logto from Claude Code, Cursor or Codex
Connect Logto in LiveContext, create an API key in Settings, then add the LiveContext MCP server to your client. Its Logto operations become tools the client can call, next to every other integration you connected.
claude mcp add --transport http livecontext https://livecontext.ai/mcp --header "X-API-Key: YOUR_API_KEY"[mcp_servers.livecontext]
url = "https://livecontext.ai/mcp"
[mcp_servers.livecontext.http_headers]
"X-API-Key" = "YOUR_API_KEY"{
"mcpServers": {
"livecontext": {
"type": "http",
"url": "https://livecontext.ai/mcp",
"headers": {
"X-API-Key": "YOUR_API_KEY"
}
}
}
}How to connect Logto
- Create your workspace
Sign up free. Nothing to install.
- Connect Logto once
Add your Logto connection in Settings. Every tool from this integration reuses it, and secrets are encrypted at rest and visible only to you.
- Describe the job in chat
The workflow builds itself in front of you and picks the endpoints it needs. Drag the steps yourself on the canvas whenever you would rather be explicit.
Logto integration FAQ
What can you do with the Logto integration?
LiveContext exposes 267 operations on Logto, covering role, application, scope and secret.
