Asgardeo MCP Server

The Asgardeo MCP Server allows you to manage your Asgardeo organization or WSO2 Identity Server deployment seamlessly using LLM tools, enabling natural language interactions for various configuration tasks.

> [!IMPORTANT]

> Experimental Feature Notice

> This software includes experimental functionality and is not intended for use in production environments.

> Features, APIs, and functionality may change as the implementation evolves without prior notice.

Key Use Cases

With tools like Claude Desktop, you can:

• List Applications: Retrieve a list of all applications in your organization.
• Create Applications: Set up single-page, web, mobile or m2m applications and integrate it with the Asgardeo authentication SDK.
• Retrieve Application Details: Fetch detailed information about specific applications.
• Configure Login Flows: Customize the login flow of an application using natural language prompts and the available tools, enabling seamless user authentication experiences.

Demonstrations

• Listing Applications in Claude

• Fetching Application Details in Claude

How to Use

On Asgardeo / WSO2 Identity Server

1. Create an M2M Application: Set up an M2M application in your organization.

2. Authorize Management APIs: Grant the following scopes to the application:

3. Copy Credentials: Save the client ID and client secret of the M2M application.

On Your Machine

4. Clone the Repository:

git clone https://github.com/asgardeo/asgardeo-mcp-server.git

5. Install Dependencies:

go mod tidy

6. Build the Executable:

go build -o asgardeo-mcp

This will create the `asgardeo-mcp` binary in the current directory (e.g., `/Users//asgardeo-mcp-server/asgardeo-mcp`). Note down this absolute path as you will need it in the next step.

7. Configure Your MCP Client:

VS Code (GitHub Copilot)

• Install the GitHub Copilot extension.
• Open the Command Palette (`Ctrl+Shift+P` / `Cmd+Shift+P`) and select `MCP: Open User Configuration`.
• Add the following server configuration to the `mcp.json` file:

{
    "servers": {
        "asgardeo-mcp-server": {
            "type": "stdio",
            "command": "",
            "args": [],
            "env": {
                "BASE_URL" : "https://api.asgardeo.io/t/",
                "CLIENT_ID" : "",
                "CLIENT_SECRET" : ""
              }
            }
    }
  }

• Save the file and start the MCP server from `mcp.json`.

Claude Desktop

• Open Claude Desktop and navigate to `Settings > Developer`.
• Edit the `claude_desktop_config.json` file:

"asgardeo-mcp": {
   "command": "",
   "args": [],
   "env": {
    "BASE_URL": "https://api.asgardeo.io/t/",
    "CLIENT_ID": "",
    "CLIENT_SECRET": ""
   }
  }

• Restart Claude Desktop.

Cursor

• Open Cursor and navigate to `Settings > MCP`.
• Edit the `mcp.json` file:

"asgardeo-mcp": {
   "command": "",
   "args": [],
   "env": {
    "BASE_URL": "https://api.asgardeo.io/t/",
    "CLIENT_ID": "",
    "CLIENT_SECRET": ""
   }
  }

> [!NOTE]

> - If you are using the WSO2 Identity Server, you need to set an additional environment variable named `PRODUCT_MODE` to `wso2is`.

> - Also, replace the `BASE_URL` with your WSO2 Identity Server base URL (e.g., `https:///t/`).

> - Additionally, if you are using WSO2 Identity Server for local development or in internal networks, you may need to set the certificate authority (CA) for the server to avoid SSL errors. You can do this by setting the `CERT_PATH` environment variable to the path of your CA certificate file.

Available Tools

The Asgardeo MCP Server provides the following tools for interacting with your organization:

Application Management

API Resource Management

User Management

Claim Management

> [!NOTE]

> If you are using the WSO2 Identity Server and planning to use `update_login_flow` tool, make sure to follow the steps in Subscribe to AI features.

Example Prompts

Application Management

• Create a SPA:

Create a new Single Page Application named "My Demo App" with redirect URL "https://example.com/callback".

• Update Application:

Update my application with ID "abc123" to have a new name "Updated App".

• Update Application Login Flow:

Update the login flow of my application with ID "abc123" to Username and Password as the first step and Email OTP as the second step.

• Update Application Claim Configuration:

Update the claim configuration of my application with ID "abc123" to include "username", and "last_name".

API Resource Management

• Create and Authorize API:

Create a new API resource named "Customer API" and authorize my application to access it with "read:customers" scopes.

User Management

• Create a User:

Create a test user with the username and email address 'test@example.com'.

Claim Management

• Get Claim list:

List all claims in my Asgardeo organization.

Troubleshooting

Authentication & Permissions

• Invalid Credentials: Verify your client ID, client secret, and organization name in the base URL
• 403 Forbidden: Check if your M2M application has all required scopes authorized

Setup & Connection

• Build Issues: Ensure Go 1.18+ is installed, run `go mod tidy` before building
• MCP Connection: Verify executable path is absolute and correct, check permissions (`chmod +x asgardeo-mcp`)

Getting Help

If issues persist after troubleshooting:

• Check GitHub issues
• Create a new detailed issue including error messages and environment info
• Join the WSO2 community forums for support

Contributing

Contributions are welcome! Submit issues or pull requests via the GitHub repository.