Integration

Ory Kratos integration

Ory Kratos (Ory Identities) is an identity and user-management server. This catalog entry covers its machine-facing surface: create, read, update, patch, delete and batch-patch identities including their traits, metadata, verifiable and recoverable addresses and credentials, look an identity up by its external id, delete one credential type from an identity, list and revoke an identity's sessions, mint a recovery link or a one-time recovery code for an identity, list and read sessions across the deployment, extend or disable a session, read and revoke the caller's own sessions, resolve the caller's session with whoami, list and read identity JSON schemas, read the courier delivery log of sent email and SMS messages, and read server version and readiness. The end-user self-service flows (login, registration, recovery, verification, settings, logout) are not included: they need a browser, a per-flow CSRF cookie and a two-call flow handle, and they exchange a password for a session token rather than doing work. The host is part of the credential because every install is its own deployment: point it at the Kratos admin endpoint (port 4434 by default) for the admin routes, at the public endpoint (port 4433 by default) for the session and schema routes, or at an Ory Network project URL, which serves both. Authentication is an Ory API key sent as a bearer token in the Authorization header; a self-hosted admin endpoint is normally protected by the network or by a proxy instead.

Connect Ory Kratos How integrations work

Ask it in chat

Say what should happen.
The workflow builds itself.

When this happens, do that in Ory Kratos.Built from the 29 Ory Kratos tools below, on the connection you add once.

What you can do with Ory Kratos

Each of these is one operation on one endpoint, available both as a workflow step and as a tool an AI agent can call on its own. Nothing bundles several operations into one action, so what a run did stays readable afterwards.

Most endpoints run on the free plan. A few, mainly the ones that publish on your behalf, need a paid plan.

Session, 9 operations

delete_identity_sessionsDelete identity sessionsDELETEDelete & Invalidate an Identity's Sessions.
disable_my_other_sessionsDisable my other sessionsDELETEDisable my other sessions.
disable_my_sessionDisable my sessionDELETEDisable one of my sessions.
disable_sessionDisable sessionDELETEDeactivate a Session.
get_sessionGet sessionGETGet Session.
list_identity_sessionsList identity sessionsGETList an Identity's Sessions.
list_my_sessionsList my sessionsGETGet My Active Sessions.
list_sessionsList sessionsGETList All Sessions.
manage_sessionsManage sessionsPOSTManage sessions in bulk.

Identitie, 7 operations

batch_patch_identitiesBatch patch identitiesPATCHCreate multiple identities.
create_identityCreate identityPOSTCreate an Identity.
delete_identityDelete identityDELETEDelete an Identity.
get_identityGet identityGETGet an Identity.
list_identitiesList identitiesGETList Identities.
patch_identityPatch identityPATCHPatch an Identity.
update_identityUpdate identityPUTUpdate an Identity.

Message, 2 operations

get_courier_messageGet courier messageGETGet a Message.
list_courier_messagesList courier messagesGETList Messages.

Schema, 2 operations

get_identity_schemaGet identity schemaGETGet Identity JSON Schema.
list_identity_schemasList identity schemasGETGet all Identity Schemas.

Alive, 1 operation

is_aliveIs aliveGETCheck HTTP Server Status.

Code, 1 operation

create_recovery_code_for_identityCreate recovery code for identityPOSTCreate a Recovery Code.

Credential, 1 operation

delete_identity_credentialsDelete identity credentialsDELETEDelete a credential for a specific identity.

Extend, 1 operation

extend_sessionExtend sessionPATCHExtend a Session.

External, 1 operation

get_identity_by_external_idGet identity by external idGETGet an Identity by its External ID.

Link, 1 operation

create_recovery_link_for_identityCreate recovery link for identityPOSTCreate a Recovery Link.

Ready, 1 operation

is_readyIs readyGETCheck HTTP Server and Database Status.

Version, 1 operation

get_versionGet versionGETReturn Running Software Version.

Whoami, 1 operation

get_current_sessionGet current sessionGETCheck Who the Current HTTP Session Belongs To.

Use Ory Kratos from Claude Code, Cursor or Codex

Connect Ory Kratos in LiveContext, create an API key in Settings, then add the LiveContext MCP server to your client. Its Ory Kratos operations become tools the client can call, next to every other integration you connected.

Claude Code

claude mcp add --transport http livecontext https://livecontext.ai/mcp --header "X-API-Key: YOUR_API_KEY"

Codex (~/.codex/config.toml)

[mcp_servers.livecontext]
url = "https://livecontext.ai/mcp"

[mcp_servers.livecontext.http_headers]
"X-API-Key" = "YOUR_API_KEY"

Cursor, Claude Desktop and other JSON configs

{
  "mcpServers": {
    "livecontext": {
      "type": "http",
      "url": "https://livecontext.ai/mcp",
      "headers": {
        "X-API-Key": "YOUR_API_KEY"
      }
    }
  }
}

Set up the MCP server step by step

How to connect Ory Kratos

Create your workspace
Sign up free. Nothing to install.
Connect Ory Kratos once
Add your Ory Kratos connection in Settings. Every tool from this integration reuses it, and secrets are encrypted at rest and visible only to you.
Describe the job in chat
The workflow builds itself in front of you and picks the endpoints it needs. Drag the steps yourself on the canvas whenever you would rather be explicit.