ZITADEL integration
ZITADEL v2 resource API for the open-source identity infrastructure, on ZITADEL Cloud or a self-hosted instance. Administer an instance: users (create human and machine users, search, update, lock, unlock, deactivate, reactivate, delete, set and verify email and phone, set passwords and request resets, invite codes, metadata, machine secrets and keys, personal access tokens, identity-provider links, and the second factors TOTP, U2F, passkeys, OTP by SMS or email and recovery codes), organizations and their verified domains and metadata, projects with their roles and grants, applications with their keys and client secrets, authorizations (user grants), administrators and their roles, identity providers, instances with custom and trusted domains, web keys, login and security settings (branding, domain, lockout, password complexity and expiry, legal and support links, hosted login translations), feature flags at system, instance, organization and user level, and execution targets with their public keys for ZITADEL Actions. The credential is a bearer token for a service user, a personal access token or a token obtained by that service user, and the instance host is your ZITADEL domain, for example my-instance.zitadel.cloud.
Say what should happen.
The workflow builds itself.
What you can do with ZITADEL
Each of these is one operation on one endpoint, available both as a workflow step and as a tool an AI agent can call on its own. Nothing bundles several operations into one action, so what a run did stays readable afterwards.
Most endpoints run on the free plan. A few, mainly the ones that publish on your behalf, need a paid plan.
Search, 22 operations
list_administratorsList administratorsPOSTListAdministrators returns all administrators and its roles matching the request and necessary permissions.list_application_keysList application keysPOSTList Application Keys.list_applicationsList applicationsPOSTList Applications.list_authorizationsList authorizationsPOSTList Authorizations.list_executionsList executionsPOSTList Executions.list_instance_custom_domainsList instance custom domainsPOSTList Custom Domains.list_instancesList instancesPOSTList Instances.list_instance_trusted_domainsList instance trusted domainsPOSTList Trusted Domains.list_organization_domainsList organization domainsPOSTList Organization Domains.list_organization_metadataList organization metadataPOSTList Organization Metadata.list_organizationsList organizationsPOSTList Organizations.list_personal_access_tokensList personal access tokensPOSTSearch Personal Access Tokens.list_project_grantsList project grantsPOSTList Project Grants.list_project_rolesList project rolesPOSTList Project Roles.list_projectsList projectsPOSTList Projects.list_target_public_keysList target public keysPOSTList Public Keys.list_targetsList targetsPOSTList targets.list_user_authentication_factorsList user authentication factorsPOSTcreate search.list_user_idp_linksList user idp linksPOSTList links to an identity provider of an user.list_user_keysList user keysPOSTSearch Keys.list_user_metadataList user metadataPOSTList User Metadata.list_user_passkeysList user passkeysPOSTList passkeys of an user.
Deactivate, 7 operations
deactivate_applicationDeactivate applicationPOSTDeactivate Application.deactivate_authorizationDeactivate authorizationPOSTDeactivate Authorization.deactivate_organizationDeactivate organizationPOSTDeactivate Organization.deactivate_projectDeactivate projectPOSTDeactivate Project.deactivate_project_grantDeactivate project grantPOSTDeactivate Project Grant.deactivate_target_public_keyDeactivate target public keyPOSTDeactivate Public Key.deactivate_userDeactivate userPOSTDeactivate user.
Activate, 5 operations
activate_authorizationActivate authorizationPOSTActivate Authorization.activate_organizationActivate organizationPOSTActivate Organization.activate_projectActivate projectPOSTActivate Project.activate_project_grantActivate project grantPOSTActivate Project Grant.activate_target_public_keyActivate target public keyPOSTActivate Public Key.
User, 4 operations
delete_userDelete userDELETEDelete user.get_userGet userGETUser by ID.get_user_featuresGet user featuresGETGet User Features.list_usersList usersPOSTSearch Users.
Application, 3 operations
create_applicationCreate applicationPOSTCreate Application.delete_applicationDelete applicationDELETEDelete Application.get_applicationGet applicationGETGet Application.
Application key, 3 operations
create_application_keyCreate application keyPOSTCreate Application Key.delete_application_keyDelete application keyDELETEDelete Application Key.get_application_keyGet application keyGETGet Application Key.
Domain, 3 operations
add_organization_domainAdd organization domainPOSTAdd Organization Domain.get_domain_settingsGet domain settingsGETGet Domain Settings.remove_organization_domainRemove organization domainDELETEDelete Organization Domain.
Instance, 3 operations
delete_instanceDelete instanceDELETEDelete Instance.get_instanceGet instanceGETGet Instance.get_instance_featuresGet instance featuresGETGet Instance Features.
Organization, 3 operations
create_organizationCreate organizationPOSTAdd Organization.delete_organizationDelete organizationDELETEDelete Organization.get_organization_featuresGet organization featuresGETGet Organization Features.
Project, 3 operations
create_projectCreate projectPOSTCreate Project.delete_projectDelete projectDELETEDelete Project.get_projectGet projectGETGet Project.
Target, 3 operations
create_targetCreate targetPOSTCreate Target.delete_targetDelete targetDELETEDelete Target.get_targetGet targetGETGet Target.
Administrator, 2 operations
add_administratorAdd administratorPOSTCreateAdministrator grants a administrator role to a user for a specific resource.remove_administratorRemove administratorDELETEDeleteAdministrator revokes a administrator role from a user.
Authorization, 2 operations
create_authorizationCreate authorizationPOSTCreate Authorization.delete_authorizationDelete authorizationDELETEDelete Authorization.
Custom domain, 2 operations
add_instance_custom_domainAdd instance custom domainPOSTAdd Custom Domain.remove_instance_custom_domainRemove instance custom domainDELETERemove Custom Domain.
Grant, 2 operations
create_project_grantCreate project grantPOSTCreate Project Grant.delete_project_grantDelete project grantDELETEDelete Project Grant.
Idp, 2 operations
get_idpGet idpGETGet identity provider (IdP) by ID.list_active_identity_providersList active identity providersGETGet Active Identity Providers.
Key, 2 operations
add_user_keyAdd user keyPOSTAdd a Key.remove_user_keyRemove user keyDELETERemove a Key.
Link, 2 operations
add_user_idp_linkAdd user idp linkPOSTAdd link to an identity provider to an user.remove_user_idp_linkRemove user idp linkDELETERemove link of an identity provider to an user.
Metadata, 2 operations
delete_organization_metadataDelete organization metadataDELETEDelete Organization Metadata.delete_user_metadataDelete user metadataDELETEDelete User Metadata.
Otp email, 2 operations
add_user_otp_emailAdd user otp emailPOSTAdd OTP Email for a user.remove_user_otp_emailRemove user otp emailDELETERemove OTP Email from a user.
Otp sm, 2 operations
add_user_otp_smsAdd user otp smsPOSTAdd OTP SMS for a user.remove_user_otp_smsRemove user otp smsDELETERemove OTP SMS from a user.
Passkey, 2 operations
register_user_passkeyRegister user passkeyPOSTStart the registration of passkey for a user.remove_user_passkeyRemove user passkeyDELETERemove passkey from a user.
Pat, 2 operations
add_user_personal_access_tokenAdd user personal access tokenPOSTAdd a Personal Access Token.remove_user_personal_access_tokenRemove user personal access tokenDELETERemove a Personal Access Token.
Publickey, 2 operations
add_target_public_keyAdd target public keyPOSTAdd Public Key.remove_target_public_keyRemove target public keyDELETERemove Public Key.
Reactivate, 2 operations
reactivate_applicationReactivate applicationPOSTReactivate Application.reactivate_userReactivate userPOSTReactivate user.
Role, 2 operations
add_project_roleAdd project rolePOSTAdd Project Role.remove_project_roleRemove project roleDELETERemove Project Role.
Trusted domain, 2 operations
add_instance_trusted_domainAdd instance trusted domainPOSTAdd Trusted Domain.remove_instance_trusted_domainRemove instance trusted domainDELETERemove Trusted Domain.
Web key, 2 operations
delete_web_keyDelete web keyDELETEDelete Web Key.list_web_keysList web keysGETList Web Keys.
Authentication method, 1 operation
list_user_authentication_method_typesList user authentication method typesGETList all possible authentication methods of a user.
Branding, 1 operation
get_branding_settingsGet branding settingsGETGet Branding Settings.
Complexity, 1 operation
get_password_complexity_settingsGet password complexity settingsGETGet Password Complexity Settings.
Expiry, 1 operation
get_password_expiry_settingsGet password expiry settingsGETGet Password Expiry Settings.
Function, 1 operation
list_execution_functionsList execution functionsGETList Execution Functions.
Generate, 1 operation
generate_organization_domain_validationGenerate organization domain validationPOSTGenerate Organization Domain Validation.
Generate client secret, 1 operation
generate_application_client_secretGenerate application client secretPOSTRegenerate Client Secret.
Hosted login translation, 1 operation
get_hosted_login_translationGet hosted login translationGETGet Hosted Login Translation.
Human, 1 operation
add_human_userAdd human userPOSTCreate a new User (Human).
Invite code, 1 operation
create_user_invite_codeCreate user invite codePOSTCreate an invite code for a user.
Legal support, 1 operation
get_legal_and_support_settingsGet legal and support settingsGETGet Legal and Support Settings.
Lock, 1 operation
lock_userLock userPOSTLock user.
Lockout, 1 operation
get_lockout_settingsGet lockout settingsGETGet Lockout Settings.
Login, 1 operation
get_login_settingsGet login settingsGETGet Login Settings.
Method, 1 operation
list_execution_methodsList execution methodsGETList Execution Methods.
Mfa init skipped, 1 operation
mark_user_mfa_init_skippedMark user mfa init skippedPOSTMFA Init Skipped.
New, 1 operation
create_userCreate userPOSTCreate a User.
Phone, 1 operation
remove_user_phoneRemove user phoneDELETEDelete the user phone.
Recovery code, 1 operation
create_user_recovery_codesCreate user recovery codesPOSTGenerate single-use recovery codes for a user.
Registration link, 1 operation
create_user_passkey_registration_linkCreate user passkey registration linkPOSTCreate a passkey registration link for a user.
Secret, 1 operation
add_user_secretAdd user secretPOSTAdd a Users Secret.
Security, 1 operation
get_security_settingsGet security settingsGETGet Security Settings.
Service, 1 operation
list_execution_servicesList execution servicesGETList Execution Services.
Setting, 1 operation
get_general_settingsGet general settingsGETGet General Settings.
System, 1 operation
get_system_featuresGet system featuresGETGet System Features.
Totp, 1 operation
register_user_totpRegister user totpPOSTStart the registration of a TOTP generator for a user.
U2f, 1 operation
register_user_u2fRegister user u2fPOSTStart the registration of a u2f token for a user.
Showing the first 120 of 165 endpoints. The rest are in the product, searchable from the workflow builder and from chat.
Use ZITADEL from Claude Code, Cursor or Codex
Connect ZITADEL in LiveContext, create an API key in Settings, then add the LiveContext MCP server to your client. Its ZITADEL operations become tools the client can call, next to every other integration you connected.
claude mcp add --transport http livecontext https://livecontext.ai/mcp --header "X-API-Key: YOUR_API_KEY"[mcp_servers.livecontext]
url = "https://livecontext.ai/mcp"
[mcp_servers.livecontext.http_headers]
"X-API-Key" = "YOUR_API_KEY"{
"mcpServers": {
"livecontext": {
"type": "http",
"url": "https://livecontext.ai/mcp",
"headers": {
"X-API-Key": "YOUR_API_KEY"
}
}
}
}How to connect ZITADEL
- Create your workspace
Sign up free. Nothing to install.
- Connect ZITADEL once
Add your ZITADEL connection in Settings. Every tool from this integration reuses it, and secrets are encrypted at rest and visible only to you.
- Describe the job in chat
The workflow builds itself in front of you and picks the endpoints it needs. Drag the steps yourself on the canvas whenever you would rather be explicit.
ZITADEL integration FAQ
What can you do with the ZITADEL integration?
LiveContext exposes 165 operations on ZITADEL, covering search, deactivate, activate and user.
