Integration

ZITADEL integration

ZITADEL v2 resource API for the open-source identity infrastructure, on ZITADEL Cloud or a self-hosted instance. Administer an instance: users (create human and machine users, search, update, lock, unlock, deactivate, reactivate, delete, set and verify email and phone, set passwords and request resets, invite codes, metadata, machine secrets and keys, personal access tokens, identity-provider links, and the second factors TOTP, U2F, passkeys, OTP by SMS or email and recovery codes), organizations and their verified domains and metadata, projects with their roles and grants, applications with their keys and client secrets, authorizations (user grants), administrators and their roles, identity providers, instances with custom and trusted domains, web keys, login and security settings (branding, domain, lockout, password complexity and expiry, legal and support links, hosted login translations), feature flags at system, instance, organization and user level, and execution targets with their public keys for ZITADEL Actions. The credential is a bearer token for a service user, a personal access token or a token obtained by that service user, and the instance host is your ZITADEL domain, for example my-instance.zitadel.cloud.

Ask it in chat

Say what should happen.
The workflow builds itself.

When this happens, do that in ZITADEL.Built from the 165 ZITADEL tools below, on the connection you add once.

What you can do with ZITADEL

Each of these is one operation on one endpoint, available both as a workflow step and as a tool an AI agent can call on its own. Nothing bundles several operations into one action, so what a run did stays readable afterwards.

Most endpoints run on the free plan. A few, mainly the ones that publish on your behalf, need a paid plan.

Search, 22 operations

  • list_administratorsList administratorsPOSTListAdministrators returns all administrators and its roles matching the request and necessary permissions.
  • list_application_keysList application keysPOSTList Application Keys.
  • list_applicationsList applicationsPOSTList Applications.
  • list_authorizationsList authorizationsPOSTList Authorizations.
  • list_executionsList executionsPOSTList Executions.
  • list_instance_custom_domainsList instance custom domainsPOSTList Custom Domains.
  • list_instancesList instancesPOSTList Instances.
  • list_instance_trusted_domainsList instance trusted domainsPOSTList Trusted Domains.
  • list_organization_domainsList organization domainsPOSTList Organization Domains.
  • list_organization_metadataList organization metadataPOSTList Organization Metadata.
  • list_organizationsList organizationsPOSTList Organizations.
  • list_personal_access_tokensList personal access tokensPOSTSearch Personal Access Tokens.
  • list_project_grantsList project grantsPOSTList Project Grants.
  • list_project_rolesList project rolesPOSTList Project Roles.
  • list_projectsList projectsPOSTList Projects.
  • list_target_public_keysList target public keysPOSTList Public Keys.
  • list_targetsList targetsPOSTList targets.
  • list_user_authentication_factorsList user authentication factorsPOSTcreate search.
  • list_user_idp_linksList user idp linksPOSTList links to an identity provider of an user.
  • list_user_keysList user keysPOSTSearch Keys.
  • list_user_metadataList user metadataPOSTList User Metadata.
  • list_user_passkeysList user passkeysPOSTList passkeys of an user.

Deactivate, 7 operations

  • deactivate_applicationDeactivate applicationPOSTDeactivate Application.
  • deactivate_authorizationDeactivate authorizationPOSTDeactivate Authorization.
  • deactivate_organizationDeactivate organizationPOSTDeactivate Organization.
  • deactivate_projectDeactivate projectPOSTDeactivate Project.
  • deactivate_project_grantDeactivate project grantPOSTDeactivate Project Grant.
  • deactivate_target_public_keyDeactivate target public keyPOSTDeactivate Public Key.
  • deactivate_userDeactivate userPOSTDeactivate user.

Activate, 5 operations

  • activate_authorizationActivate authorizationPOSTActivate Authorization.
  • activate_organizationActivate organizationPOSTActivate Organization.
  • activate_projectActivate projectPOSTActivate Project.
  • activate_project_grantActivate project grantPOSTActivate Project Grant.
  • activate_target_public_keyActivate target public keyPOSTActivate Public Key.

User, 4 operations

  • delete_userDelete userDELETEDelete user.
  • get_userGet userGETUser by ID.
  • get_user_featuresGet user featuresGETGet User Features.
  • list_usersList usersPOSTSearch Users.

Application, 3 operations

  • create_applicationCreate applicationPOSTCreate Application.
  • delete_applicationDelete applicationDELETEDelete Application.
  • get_applicationGet applicationGETGet Application.

Application key, 3 operations

  • create_application_keyCreate application keyPOSTCreate Application Key.
  • delete_application_keyDelete application keyDELETEDelete Application Key.
  • get_application_keyGet application keyGETGet Application Key.

Domain, 3 operations

  • add_organization_domainAdd organization domainPOSTAdd Organization Domain.
  • get_domain_settingsGet domain settingsGETGet Domain Settings.
  • remove_organization_domainRemove organization domainDELETEDelete Organization Domain.

Instance, 3 operations

  • delete_instanceDelete instanceDELETEDelete Instance.
  • get_instanceGet instanceGETGet Instance.
  • get_instance_featuresGet instance featuresGETGet Instance Features.

Organization, 3 operations

  • create_organizationCreate organizationPOSTAdd Organization.
  • delete_organizationDelete organizationDELETEDelete Organization.
  • get_organization_featuresGet organization featuresGETGet Organization Features.

Project, 3 operations

  • create_projectCreate projectPOSTCreate Project.
  • delete_projectDelete projectDELETEDelete Project.
  • get_projectGet projectGETGet Project.

Target, 3 operations

  • create_targetCreate targetPOSTCreate Target.
  • delete_targetDelete targetDELETEDelete Target.
  • get_targetGet targetGETGet Target.

Administrator, 2 operations

  • add_administratorAdd administratorPOSTCreateAdministrator grants a administrator role to a user for a specific resource.
  • remove_administratorRemove administratorDELETEDeleteAdministrator revokes a administrator role from a user.

Authorization, 2 operations

  • create_authorizationCreate authorizationPOSTCreate Authorization.
  • delete_authorizationDelete authorizationDELETEDelete Authorization.

Custom domain, 2 operations

  • add_instance_custom_domainAdd instance custom domainPOSTAdd Custom Domain.
  • remove_instance_custom_domainRemove instance custom domainDELETERemove Custom Domain.

Grant, 2 operations

  • create_project_grantCreate project grantPOSTCreate Project Grant.
  • delete_project_grantDelete project grantDELETEDelete Project Grant.

Idp, 2 operations

  • get_idpGet idpGETGet identity provider (IdP) by ID.
  • list_active_identity_providersList active identity providersGETGet Active Identity Providers.

Key, 2 operations

  • add_user_keyAdd user keyPOSTAdd a Key.
  • remove_user_keyRemove user keyDELETERemove a Key.

Link, 2 operations

  • add_user_idp_linkAdd user idp linkPOSTAdd link to an identity provider to an user.
  • remove_user_idp_linkRemove user idp linkDELETERemove link of an identity provider to an user.

Metadata, 2 operations

  • delete_organization_metadataDelete organization metadataDELETEDelete Organization Metadata.
  • delete_user_metadataDelete user metadataDELETEDelete User Metadata.

Otp email, 2 operations

  • add_user_otp_emailAdd user otp emailPOSTAdd OTP Email for a user.
  • remove_user_otp_emailRemove user otp emailDELETERemove OTP Email from a user.

Otp sm, 2 operations

  • add_user_otp_smsAdd user otp smsPOSTAdd OTP SMS for a user.
  • remove_user_otp_smsRemove user otp smsDELETERemove OTP SMS from a user.

Passkey, 2 operations

  • register_user_passkeyRegister user passkeyPOSTStart the registration of passkey for a user.
  • remove_user_passkeyRemove user passkeyDELETERemove passkey from a user.

Pat, 2 operations

  • add_user_personal_access_tokenAdd user personal access tokenPOSTAdd a Personal Access Token.
  • remove_user_personal_access_tokenRemove user personal access tokenDELETERemove a Personal Access Token.

Publickey, 2 operations

  • add_target_public_keyAdd target public keyPOSTAdd Public Key.
  • remove_target_public_keyRemove target public keyDELETERemove Public Key.

Reactivate, 2 operations

  • reactivate_applicationReactivate applicationPOSTReactivate Application.
  • reactivate_userReactivate userPOSTReactivate user.

Role, 2 operations

  • add_project_roleAdd project rolePOSTAdd Project Role.
  • remove_project_roleRemove project roleDELETERemove Project Role.

Trusted domain, 2 operations

  • add_instance_trusted_domainAdd instance trusted domainPOSTAdd Trusted Domain.
  • remove_instance_trusted_domainRemove instance trusted domainDELETERemove Trusted Domain.

Web key, 2 operations

  • delete_web_keyDelete web keyDELETEDelete Web Key.
  • list_web_keysList web keysGETList Web Keys.

Authentication method, 1 operation

  • list_user_authentication_method_typesList user authentication method typesGETList all possible authentication methods of a user.

Branding, 1 operation

  • get_branding_settingsGet branding settingsGETGet Branding Settings.

Complexity, 1 operation

  • get_password_complexity_settingsGet password complexity settingsGETGet Password Complexity Settings.

Expiry, 1 operation

  • get_password_expiry_settingsGet password expiry settingsGETGet Password Expiry Settings.

Function, 1 operation

  • list_execution_functionsList execution functionsGETList Execution Functions.

Generate, 1 operation

  • generate_organization_domain_validationGenerate organization domain validationPOSTGenerate Organization Domain Validation.

Generate client secret, 1 operation

  • generate_application_client_secretGenerate application client secretPOSTRegenerate Client Secret.

Hosted login translation, 1 operation

  • get_hosted_login_translationGet hosted login translationGETGet Hosted Login Translation.

Human, 1 operation

  • add_human_userAdd human userPOSTCreate a new User (Human).

Invite code, 1 operation

  • create_user_invite_codeCreate user invite codePOSTCreate an invite code for a user.

Legal support, 1 operation

  • get_legal_and_support_settingsGet legal and support settingsGETGet Legal and Support Settings.

Lock, 1 operation

  • lock_userLock userPOSTLock user.

Lockout, 1 operation

  • get_lockout_settingsGet lockout settingsGETGet Lockout Settings.

Login, 1 operation

  • get_login_settingsGet login settingsGETGet Login Settings.

Method, 1 operation

  • list_execution_methodsList execution methodsGETList Execution Methods.

Mfa init skipped, 1 operation

  • mark_user_mfa_init_skippedMark user mfa init skippedPOSTMFA Init Skipped.

New, 1 operation

  • create_userCreate userPOSTCreate a User.

Phone, 1 operation

  • remove_user_phoneRemove user phoneDELETEDelete the user phone.

Recovery code, 1 operation

  • create_user_recovery_codesCreate user recovery codesPOSTGenerate single-use recovery codes for a user.

Registration link, 1 operation

  • create_user_passkey_registration_linkCreate user passkey registration linkPOSTCreate a passkey registration link for a user.

Secret, 1 operation

  • add_user_secretAdd user secretPOSTAdd a Users Secret.

Security, 1 operation

  • get_security_settingsGet security settingsGETGet Security Settings.

Service, 1 operation

  • list_execution_servicesList execution servicesGETList Execution Services.

Setting, 1 operation

  • get_general_settingsGet general settingsGETGet General Settings.

System, 1 operation

  • get_system_featuresGet system featuresGETGet System Features.

Totp, 1 operation

  • register_user_totpRegister user totpPOSTStart the registration of a TOTP generator for a user.

U2f, 1 operation

  • register_user_u2fRegister user u2fPOSTStart the registration of a u2f token for a user.

Showing the first 120 of 165 endpoints. The rest are in the product, searchable from the workflow builder and from chat.

Use ZITADEL from Claude Code, Cursor or Codex

Connect ZITADEL in LiveContext, create an API key in Settings, then add the LiveContext MCP server to your client. Its ZITADEL operations become tools the client can call, next to every other integration you connected.

Claude Code
claude mcp add --transport http livecontext https://livecontext.ai/mcp --header "X-API-Key: YOUR_API_KEY"
Codex (~/.codex/config.toml)
[mcp_servers.livecontext]
url = "https://livecontext.ai/mcp"

[mcp_servers.livecontext.http_headers]
"X-API-Key" = "YOUR_API_KEY"
Cursor, Claude Desktop and other JSON configs
{
  "mcpServers": {
    "livecontext": {
      "type": "http",
      "url": "https://livecontext.ai/mcp",
      "headers": {
        "X-API-Key": "YOUR_API_KEY"
      }
    }
  }
}

Set up the MCP server step by step

How to connect ZITADEL

  1. Create your workspace

    Sign up free. Nothing to install.

  2. Connect ZITADEL once

    Add your ZITADEL connection in Settings. Every tool from this integration reuses it, and secrets are encrypted at rest and visible only to you.

  3. Describe the job in chat

    The workflow builds itself in front of you and picks the endpoints it needs. Drag the steps yourself on the canvas whenever you would rather be explicit.

ZITADEL integration FAQ

What can you do with the ZITADEL integration?

LiveContext exposes 165 operations on ZITADEL, covering search, deactivate, activate and user.

Popular integrations

Browse the whole catalog