Logto integration
Logto Management API for the open-source customer identity platform, on Logto Cloud or a self-hosted instance. Administer every object of a tenant: users (create, search, suspend, set or verify a password, custom data, linked social and SSO identities, MFA verifications, personal access tokens, grants, sessions, profile), organizations (members, per-organization roles and scopes, just-in-time provisioning by email domain, role or SSO connector, invitations), roles, scopes and API resources, applications (secrets, redirect and access control settings, per-application roles, sign-in experience, consent scopes, protected-app custom domains), SAML applications and their signing secrets, social and enterprise SSO connectors, webhooks and their delivery logs, email templates and custom phrases, custom profile fields, one-time tokens and verification codes, sign-in experience and CAPTCHA settings, JWT customizers and OIDC signing keys, custom domains, audit logs and user statistics. The credential is an access token issued to a machine-to-machine application that holds the Management API 'all' role, and the instance host is your Logto endpoint, for example your-tenant.logto.app.
What you can do with Logto
Each of these is one operation on one endpoint, available both as a workflow step and as a tool an AI agent can call on its own. Nothing bundles several operations into one action, so what a run did stays readable afterwards.
Most endpoints run on the free plan. A few, mainly the ones that publish on your behalf, need a paid plan.
Role, 14 operations
- POSTassign_application_roles
Assign API resource roles to application.
- POSTassign_organization_roles_to_application
Add organization application role.
- POSTassign_organization_roles_to_applications
Assign roles to applications in an organization.
- POSTassign_organization_roles_to_user
Assign roles to a user in an organization.
- POSTassign_organization_roles_to_users
Assign roles to organization user members.
- POSTassign_user_roles
Assign roles to user.
- POSTcreate_organization_jit_role
Add organization JIT default roles.
- POSTcreate_role
Create a role.
- DELETEdelete_application_role
Remove a API resource role from application.
- DELETEdelete_organization_application_role
Remove organization application role.
- DELETEdelete_organization_jit_role
Remove organization JIT default role.
- DELETEdelete_organization_user_role
Remove a role from a user in an organization.
- DELETEdelete_role
Delete role.
- DELETEdelete_user_role
Remove role from user.
Application, 6 operations
- POSTadd_organization_applications
Add organization application.
- POSTassign_applications_to_role
Assign role to applications.
- POSTcreate_application
Create an application.
- DELETEdelete_application
Delete application.
- DELETEdelete_organization_application
Remove organization application.
- GETget_application
Get application.
Scope, 5 operations
- POSTassign_organization_role_scopes
Assign organization scopes to organization role.
- POSTassign_scopes_to_role
Link scopes to role.
- POSTcreate_resource_scope
Create API resource scope.
- DELETEdelete_organization_role_scope
Remove organization scope.
- DELETEdelete_resource_scope
Delete API resource scope.
Secret, 5 operations
- POSTcreate_application_secret
Add application secret.
- POSTcreate_saml_application_secret
Create SAML application secret.
- DELETEdelete_application_secret
Delete application secret.
- DELETEdelete_saml_application_secret
Delete SAML application secret.
- DELETEdelete_secret
Delete secret.
User, 5 operations
- POSTadd_organization_users
Add user members to organization.
- POSTassign_users_to_role
Assign role to users.
- POSTcreate_user
Create user.
- DELETEdelete_organization_user
Remove user member from organization.
- DELETEdelete_user
Delete user.
Sso connector, 4 operations
- POSTadd_organization_jit_sso_connectors
Add organization JIT SSO connectors.
- POSTcreate_sso_connector
Create SSO connector.
- DELETEdelete_organization_jit_sso_connector
Remove organization JIT SSO connector.
- DELETEdelete_sso_connector
Delete SSO connector.
User consent scope, 4 operations
- POSTassign_application_user_consent_scope
Assign user consent scopes to application.
- POSTassign_cimd_user_consent_scopes
Assign CIMD user consent scopes.
- DELETEdelete_application_user_consent_scope
Remove user consent scope from application.
- DELETEdelete_cimd_user_consent_scope
Delete a CIMD user consent scope.
Connector, 3 operations
- POSTcreate_connector
Create connector.
- DELETEdelete_connector
Delete connector.
- GETget_connector
Get connector.
Custom profile field, 3 operations
- POSTcreate_custom_profile_field
Create a custom profile field.
- DELETEdelete_custom_profile_field
Delete a custom profile field by name.
- GETget_custom_profile_field
Get a custom profile field by name.
Domain, 3 operations
- POSTcreate_domain
Create domain.
- DELETEdelete_domain
Delete domain.
- GETget_domain
Get domain.
Email template, 3 operations
- DELETEdelete_email_template
Delete an email template.
- DELETEdelete_email_templates
Delete email templates.
- GETget_email_template
Get email template by ID.
Hook, 3 operations
- POSTcreate_hook
Create a hook.
- DELETEdelete_hook
Delete hook.
- GETget_hook
Get hook.
One time token, 3 operations
- POSTcreate_one_time_token
Create one-time token.
- DELETEdelete_one_time_token
Delete one-time token by ID.
- GETget_one_time_token
Get one-time token by ID.
Organization, 3 operations
- POSTcreate_organization
Create an organization.
- DELETEdelete_organization
Delete organization.
- GETget_organization
Get organization.
Organization invitation, 3 operations
- POSTcreate_organization_invitation
Create organization invitation.
- DELETEdelete_organization_invitation
Delete organization invitation.
- GETget_organization_invitation
Get organization invitation.
Organization role, 3 operations
- POSTcreate_organization_role
Create an organization role.
- DELETEdelete_organization_role
Delete organization role.
- GETget_organization_role
Get organization role.
Organization scope, 3 operations
- POSTcreate_organization_scope
Create an organization scope.
- DELETEdelete_organization_scope
Delete organization scope.
- GETget_organization_scope
Get organization scope.
Action, 2 operations
- DELETEdelete_action
Delete action.
- GETget_action
Get action.
Captcha provider, 2 operations
- DELETEdelete_captcha_provider
Delete captcha provider.
- GETget_captcha_provider
Get captcha provider.
Consent organization, 2 operations
- POSTadd_application_user_consent_organizations
Grant a list of organization access of a user for a application.
- DELETEdelete_application_user_consent_organization
Revoke a user's access to an organization for a application.
Custom domain, 2 operations
- POSTcreate_application_custom_domain
Add a custom domain to the application.
- DELETEdelete_application_custom_domain
Remove custom domain.
Custom phrase, 2 operations
- DELETEdelete_custom_phrase
Delete custom phrase.
- GETget_custom_phrase
Get custom phrases.
Delete, 2 operations
- POSTdelete_sentinel_activities
Bulk delete sentinel activities.
- POSTdelete_user_personal_access_token_by_name
Delete personal access token.
Email domain, 2 operations
- POSTadd_organization_jit_email_domain
Add organization JIT email domain.
- DELETEdelete_organization_jit_email_domain
Remove organization JIT email domain.
Identitie, 2 operations
- POSTcreate_user_identity
Link social identity to user.
- DELETEdelete_user_identity
Delete social identity from user.
Jwt customizer, 2 operations
- DELETEdelete_jwt_customizer
Delete JWT customizer.
- GETget_jwt_customizer
Get JWT customizer.
Mfa verification, 2 operations
- POSTcreate_user_mfa_verification
Create an MFA verification for a user.
- DELETEdelete_user_mfa_verification
Delete an MFA verification for a user.
Personal access token, 2 operations
- POSTcreate_user_personal_access_token
Add personal access token.
- DELETEdelete_user_personal_access_token
Delete personal access token.
Resource, 2 operations
- POSTcreate_resource
Create an API resource.
- DELETEdelete_resource
Delete API resource.
Resource scope, 2 operations
- POSTassign_organization_role_resource_scopes
Assign resource scopes to organization role.
- DELETEdelete_organization_role_resource_scope
Remove resource scope.
Saml application, 2 operations
- POSTcreate_saml_application
Create SAML application.
- DELETEdelete_saml_application
Delete SAML application.
Session, 2 operations
- DELETEdelete_user_session
Revoke a user session.
- GETget_oidc_session_config
Get OIDC session config.
Signing key, 2 operations
- POSTcreate_sso_connector_signing_key
Create an SP signing key.
- DELETEdelete_sso_connector_signing_key
Delete an SP signing key.
Access control, 1 operation
- GETget_application_access_control
Get application access-control rules.
Account center, 1 operation
- GETget_account_center_settings
Get account center settings.
Active, 1 operation
- GETget_active_user_statistics
Get active user data.
Admin console, 1 operation
- GETget_admin_console_config
Get admin console config.
Check password, 1 operation
- POSTcheck_default_password
Check if a password meets the password policy.
Cimd, 1 operation
- GETget_cimd_config
Get CIMD config.
Cleanup, 1 operation
- POSTcleanup_domains
Cleanup stale domains.
Connector factorie, 1 operation
- GETget_connector_factory
Get connector factory.
Grant, 1 operation
- DELETEdelete_user_grant
Revoke a user grant.
Id token, 1 operation
- GETget_id_token_config
Get ID token claims configuration.
Legacy secret, 1 operation
- DELETEdelete_application_legacy_secret
Delete application legacy secret.
Log, 1 operation
- GETget_log
Get log.
New, 1 operation
- GETget_new_user_statistics
Get new user count.
Oidc, 1 operation
- DELETEdelete_oidc_key
Delete OIDC key.
Sign in experience, 1 operation
- GETget_application_sign_in_experience
Get the application level sign-in experience.
Showing the first 120 of 267 endpoints. The rest are in the product, searchable from the workflow builder and from chat.
Use Logto from Claude Code, Cursor or Codex
Connect Logto in LiveContext, create an API key in Settings, then add the LiveContext MCP server to your client. Its Logto operations become tools the client can call, next to every other integration you connected.
claude mcp add --transport http livecontext https://livecontext.ai/mcp --header "X-API-Key: YOUR_API_KEY"[mcp_servers.livecontext]
url = "https://livecontext.ai/mcp"
[mcp_servers.livecontext.http_headers]
"X-API-Key" = "YOUR_API_KEY"{
"mcpServers": {
"livecontext": {
"type": "http",
"url": "https://livecontext.ai/mcp",
"headers": {
"X-API-Key": "YOUR_API_KEY"
}
}
}
}How to connect Logto
Create your workspace
Sign up free. Nothing to install.
Connect Logto once
Add your Logto connection in Settings. Every tool from this integration reuses it, and secrets are encrypted at rest and visible only to you.
Describe the job in chat
The workflow builds itself in front of you and picks the endpoints it needs. Drag the steps yourself on the canvas whenever you would rather be explicit.
Logto integration FAQ
- What can you do with the Logto integration?
- LiveContext exposes 267 operations on Logto, covering role, application, scope and secret.
Popular integrations
Instagram (Instagram Login)Instagram API with Instagram Login (graph.instagram.com). Manage a Business/Creator Instagram account…
TelegramMessaging platform API for building bots and integrations. Send messages, manage chats and channels, handle…
GmailGoogle email service API for sending, receiving, and managing emails. Access messages, threads, labels,…
YouTube Data APIGoogle's video platform API for accessing video, channel, playlist, and comment data
TikTokSocial media platform API for content creators and businesses. Access user info, manage videos, get…
Twitter / XSocial media platform API for posting, reading, and managing Twitter/X content. Post tweets, read timelines,…
LinkedInProfessional networking platform API for managing profiles, connections, and content. Share posts, manage…
xAIAI API from xAI (Elon Musk's AI company) powering Grok models. Access state-of-the-art language models with…