Onelogin MCP

Name: Onelogin MCP
Author: onelogin

by oneloginversion 1.2.1i★ –iRuns on your computer

Registry nameio.github.onelogin/onelogin-mcp

Install

Overview

Description from the maker (original English)

MCP server for OneLogin API - manage users, apps, roles, and authentication

PopNx MCP’s three pillars

These three are never merged into one score: opinions, measurements and popularity are different things.

User voiceiNo reviews yetReviews open together with accounts in a later step
Our basic checksi1 of 1 passedChecked from public information; code not scanned yet
UsageiNot measured yet★ –

What you can do with it

We have not written a plain-language summary for this one yet. Below are the facts we read from the registry.

Connection: Runs on your computer
Transport: stdio
Category: Other
You need to fill in: ONELOGIN_URL, ONELOGIN_CLIENT_ID, ONELOGIN_CLIENT_SECRET

Install

Pick the AI app you use, then copy the settings.

Before you install

Basic checks: 1 of 1 passed
Runs on your computer with your user’s permissions (files, network, apps).
You fill in yourself: ONELOGIN_URL, ONELOGIN_CLIENT_ID, ONELOGIN_CLIENT_SECRET

Values marked secret are keys to your account. Never share them or paste them into a chat.

You need

npmNode.js installed (for the npx command)

Which app do you use?

ClaudeClaude CodeCursorVS CodeChatGPT

Pick your app above. We remember it, so next time the button says “Install in …”.

Open Claude Desktop → Settings → Developer → Edit Config, and paste this into claude_desktop_config.json

{
  "mcpServers": {
    "onelogin": {
      "command": "npx",
      "args": [
        "-y",
        "@onelogin/onelogin-mcp"
      ],
      "env": {
        "ONELOGIN_URL": "your-value",
        "ONELOGIN_CLIENT_ID": "your-value",
        "ONELOGIN_CLIENT_SECRET": "your-value"
      }
    }
  }
}

Run this in your terminal

claude mcp add onelogin --env ONELOGIN_URL=your-value --env ONELOGIN_CLIENT_ID=your-value --env ONELOGIN_CLIENT_SECRET=your-value -- npx -y @onelogin/onelogin-mcp

Fill in the empty values before running it.

Open in Cursor

Or copy the settings yourself

Paste into .cursor/mcp.json in your project, or ~/.cursor/mcp.json

{
  "mcpServers": {
    "onelogin": {
      "command": "npx",
      "args": [
        "-y",
        "@onelogin/onelogin-mcp"
      ],
      "env": {
        "ONELOGIN_URL": "your-value",
        "ONELOGIN_CLIENT_ID": "your-value",
        "ONELOGIN_CLIENT_SECRET": "your-value"
      }
    }
  }
}

Your browser asks to open the app, then the app shows the settings and asks you to confirm. Key values are left empty for you to fill in.

Open in VS Code

Or copy the settings yourself

Paste into .vscode/mcp.json in your project

{
  "servers": {
    "onelogin": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "@onelogin/onelogin-mcp"
      ],
      "env": {
        "ONELOGIN_URL": "your-value",
        "ONELOGIN_CLIENT_ID": "your-value",
        "ONELOGIN_CLIENT_SECRET": "your-value"
      }
    }
  }
}

Your browser asks to open the app, then the app shows the settings and asks you to confirm. Key values are left empty for you to fill in.

This one runs on your computer, and ChatGPT can only connect to servers on the internet. Pick another app.

Your choice stays on this device in a cookie; no account needed.

Values you fill in

ONELOGIN_URL required env
Your OneLogin instance URL (e.g. https://mycompany.onelogin.com)
ONELOGIN_CLIENT_ID secret required env
OneLogin OAuth2 API client ID
ONELOGIN_CLIENT_SECRET secret required env
OneLogin OAuth2 API client secret

These settings are generated from the maker’s registry entry. If the README says otherwise, follow the README.

What it can do

Runs on your computer; the tool list appears in your AI app after you install it.

Basic checksi

We check information anyone can see; we have not read the code. Checks that do not apply are left out of the count. · Checked Nov 7, 2026

✓ Pass
Maker matches the repo
The registry name was verified with the GitHub account onelogin, which owns the repo
… Not checked yet
Still maintained
We have not read this repo from GitHub yet
… Not checked yet
Has a licence
We have not read this repo from GitHub yet
– Not applicable
Endpoint responds
This one runs on your computer; there is no internet endpoint
– Not applicable
Sign-in with OAuth
Runs on your computer and uses local settings instead
… Not checked yet
No hidden instructions in tool descriptions
Runs on your computer; we can only read tool lists from internet endpoints

Compared with others in Otheri

More stars than 0% of the other 32572 servers in this category
Published to the registry more recently than 43% of the other 32572 servers in this category
Basic checks equal to or better than 100% of the other 32572 servers in this category

Compared with every active server in this category in the registry. Stars count only when the publisher owns the repo.

Common questions

Is Onelogin MCP safe?

It passed 1 of 1 applicable basic checks. We have not read the code. Before adding a key or token, see what access the server asks for and use a key with only the permissions you need.

What keys or codes does it need?

You need to fill in: ONELOGIN_URL, ONELOGIN_CLIENT_ID, ONELOGIN_CLIENT_SECRET

Does it run on my computer or in the cloud?

It runs on your computer. Your AI app starts it when needed, and data does not pass through the maker’s servers (unless it calls an online service itself).

Is it still maintained?

The GitHub repo last changed –, and the latest version (1.2.1) reached the registry 2 months ago.

Which apps can use it?

Apps that support MCP, such as Claude Desktop, Claude Code, Cursor and VS Code. You also need Node.js on your computer.

What can I use instead?

In the same category: Spec Driven Development, Remote Desktop Commander, AvaHR

Alternatives

Servers in the same category from other makers, sorted by stars.

Reading a card:★ GitHub starsiThree pillars: reviews · checks · usageiUpdated = latest version published to the registryi

Spec Driven Development

by formulahendry

MCP Server that facilitates spec-driven development workflows, not just Vibe Coding.

Runs on your computer★ 440MITUpdated 14 months ago

Install

Remote Desktop Commander

by desktop-commander

Remote Desktop Commander: use files, terminal and processes on your own computers from any AI app.

Runs in the cloud★ 211Updated yesterday

Install

AvaHR

by avahr.com

Read hiring data and create inactive assessment and questionnaire drafts for human review.

Runs in the cloudUpdated today

Install

README from the maker

Open the README

Copied from the maker’s repo as written. PopNx MCP has not reviewed or endorsed it. HTML, images and scripts are removed. Links lead off this site.

OneLogin MCP Server

A Model Context Protocol server providing comprehensive access to the OneLogin API. Enables Claude Desktop, OpenCode, and other MCP clients to manage users, apps, roles, authentication, and security settings.

Overview

This server provides tools covering a comprehensive set of supported OneLogin API endpoints:

Identity Management: Users, roles, groups
Applications: Apps, connectors, SAML, OAuth
Authentication: MFA, sessions, risk rules
Security: API authorization
Configuration: Brands, mappings
Operations: Events, reports, rate limits

All tools include comprehensive descriptions with warnings, best practices, and return data specifications.

Demo

https://github.com/user-attachments/assets/512abc44-6bb4-42e4-bb47-c0bc16f29beb

Installation

Prerequisites

OneLogin API credentials (OAuth2 client ID and secret)
An AI client such as OpenCode, Claude Desktop, Copilot CLI, or Claude Code

Setup

Option 1: Environment Variables (Recommended)

Configure credentials directly in Claude Desktop config - no separate setup required.

Edit the config file:

macOS: ~/Library/Application Support/Claude/claude_desktop_config.json
Windows: %APPDATA%\Claude\claude_desktop_config.json

Single environment:

"mcpServers": { "onelogin": { "command": "npx", "args": ["-y", "@onelogin/onelogin-mcp"], "env": { "ONELOGIN_URL": "https://mycompany.onelogin.com", "ONELOGIN_CLIENT_ID": "your_client_id", "ONELOGIN_CLIENT_SECRET": "your_client_secret" } } } }

Multiple environments (production/test separation):

"mcpServers": { "onelogin-prod": { "command": "npx", "args": ["-y", "@onelogin/onelogin-mcp"], "env": { "ONELOGIN_URL": "https://company.onelogin.com", "ONELOGIN_CLIENT_ID": "prod_client_id", "ONELOGIN_CLIENT_SECRET": "prod_secret" } }, "onelogin-test": { "command": "npx", "args": ["-y", "@onelogin/onelogin-mcp"], "env": { "ONELOGIN_URL": "https://company-test.onelogin.com", "ONELOGIN_CLIENT_ID": "test_client_id", "ONELOGIN_CLIENT_SECRET": "test_secret" } } } }

Optional environment variables:

ONELOGIN_USE_PREPROD: Set to "true" for preprod environments
ONELOGIN_LEGACY_KEY: Legacy API key (rarely needed)
ONELOGIN_SERVER: Server name for logging (defaults to "default")

Restart Claude Desktop completely after configuration.

OpenCode Configuration

For OpenCode users, add to ~/.config/opencode/mcp.json:

Single environment:

Multiple environments:

Restart OpenCode after configuration.

Option 2: Setup Script (servers.json)

Alternative method using a configuration file:

Install the package:

npm install -g @onelogin/onelogin-mcp

Configure OneLogin credentials:

npx onelogin-mcp-setup

Enter your OneLogin server details when prompted:

Server name (e.g., "Production", "Test")
OneLogin subdomain URL (e.g., https://mycompany.onelogin.com)
OAuth2 client ID and secret

Configuration is stored in ~/.config/onelogin-mcp/servers.json.

Add to Claude Desktop config:

Edit the config file:

macOS: ~/Library/Application Support/Claude/claude_desktop_config.json
Windows: %APPDATA%\Claude\claude_desktop_config.json

Single environment:

"mcpServers": { "onelogin": { "command": "npx", "args": ["-y", "@onelogin/onelogin-mcp"] } } }

Multiple environments (reference servers by name):

"mcpServers": { "onelogin-prod": { "command": "npx", "args": ["-y", "@onelogin/onelogin-mcp"], "env": { "ONELOGIN_SERVER": "Production" } }, "onelogin-test": { "command": "npx", "args": ["-y", "@onelogin/onelogin-mcp"], "env": { "ONELOGIN_SERVER": "Test" } } } }

Restart Claude Desktop completely.

Usage

Use natural language to interact with OneLogin:

List all users with email ending in @example.com

Get details for user ID 12345 Create a user john.doe@example.com with firstname John, lastname Doe Assign roles [123, 456] to user 789 Generate MFA token for user 101112 List all SAML apps

Claude will select the appropriate tool, call the OneLogin API, and present results.

API Coverage

This server provides 156 tools organized into 7 major categories:

Identity & Access (59 tools)

Users (14)
Roles (13)
Privileges (11)
Groups (6)
Mappings (15)

Applications (17 tools)

Apps (15)
Connectors (2)

Authentication (21 tools)

MFA (10)
Sessions (5)
SAML (2)
OAuth Tokens (2)
Invite Links (2)

Security (40 tools)

Policies (7)
Risk Rules (6)
Smart Hooks (11)
API Authorization (16)

Customization (6 tools)

Brands (6)

Monitoring (9 tools)

Events (2)
Reports (5)
Rate Limits (2)

Account Management (4 tools)

Accounts (4)

Configuration

Credential Management

The server supports two configuration methods:

Environment Variables (recommended): Set ONELOGIN_URL, ONELOGIN_CLIENT_ID, and ONELOGIN_CLIENT_SECRET in your MCP client config (see Installation above)
Configuration File: Use npx onelogin-mcp-setup to store credentials in ~/.config/onelogin-mcp/servers.json

Environment variables take precedence over the configuration file. See the Installation section above for complete configuration examples.

Optional Environment Variables

ONELOGIN_USE_PREPROD: Set to "true" for preprod environments
ONELOGIN_LEGACY_KEY: Legacy API key (rarely needed)
ONELOGIN_SERVER: Server name for logging (defaults to "default") or to select a named server from servers.json

Response Format

All tools return structured responses:

"success": true, "request_id": "68F194DE-0A0D05A2-55F8-0A0F6C42-01BB-62EAE-0008", "status": 200, "data": { // Tool-specific data } }

The request_id matches the x-request-id HTTP header for tracing in Datadog and OneLogin logs.

Troubleshooting

Server not appearing in Claude Desktop

Verify JSON config syntax
Ensure absolute path to index.js
Restart Claude Desktop completely (quit and reopen)

"spawn bun ENOENT" error

Claude cannot find the Bun runtime. Solutions:

# Verify Bun is installed

which bun

If not found, install Bun

curl -fsSL https://bun.sh/install | bash

Or use full path in config

{ "command": "/Users/yourname/.bun/bin/bun", "args": ["run", "/path/to/index.js"] }

Authentication errors

If using environment variables: Verify ONELOGIN_URL, ONELOGIN_CLIENT_ID, and ONELOGIN_CLIENT_SECRET in Claude Desktop config
If using servers.json: Verify credentials in ~/.config/onelogin-mcp/servers.json
Ensure OAuth2 client has API permissions in OneLogin admin panel
Check client_id and client_secret are for API v2

Wrong environment

Using environment variables: Each MCP server entry has its own credentials - verify you're talking to the correct server instance in Claude.

Using servers.json: Check the ONELOGIN_SERVER environment variable in Claude Desktop config matches a server name in servers.json.

Project Structure

onelogin-mcp/

├── index.js # MCP server entry point ├── setup.js # Interactive credential setup ├── lib/ │ ├── config.js # Credential management │ ├── onelogin-api.js # OAuth2 client with token caching │ └── tools/ │ ├── registry.js # Tool registry and dispatcher │ ├── users.js # User management (14 tools) │ ├── roles.js # Role management (13 tools) │ ├── privileges.js # Privilege management (11 tools) │ ├── apps.js # App management (15 tools) │ ├── mfa.js # MFA management (10 tools) │ ├── mappings.js # User mappings (15 tools) │ ├── smart-hooks.js # Smart Hooks (11 tools) │ ├── policies.js # Security policies (7 tools) │ ├── risk-rules.js # Risk rules (6 tools) │ ├── api-authorization.js # OAuth scopes (16 tools) │ ├── sessions.js # Session tokens (5 tools) │ ├── brands.js # Branding (6 tools) │ ├── connectors.js # App catalog (2 tools) │ ├── reports.js # Analytics (5 tools) │ ├── rate-limits.js # API throttling (2 tools) │ ├── saml.js # SAML assertions (2 tools) │ ├── invite-links.js # Password resets (2 tools) │ ├── oauth-tokens.js # OAuth tokens (2 tools) │ ├── events.js # Audit logs (2 tools) │ ├── groups.js # User groups (6 tools) │ └── accounts.js # Child accounts (4 tools) ├── package.json ├── CONTRIBUTING.md ├── PROGRESS.md └── README.md

Development

See CONTRIBUTING.md for guidelines on adding new tools.

Key conventions:

Tool descriptions include warnings, best practices, and return data structure
All modules export tools array and handlers object
Registry auto-discovers tools from module imports

Releasing

To publish a new version to npm:

Merge your changes to the main branch

Create a GitHub Release:

Go to Releases → "Draft a new release"
Create a new tag with the version (e.g., v1.1.0)
Set the release title (e.g., "v1.1.0 - MFA API fixes")
Add release notes describing the changes
Click "Publish release"

Automatic Publishing: The GitHub Action will:

Extract the version from the release tag (strips v prefix)
Update package.json with the new version
Publish to npm under @onelogin/onelogin-mcp

Version Format: Use semantic versioning (MAJOR.MINOR.PATCH)

MAJOR: Breaking API changes
MINOR: New features, backward compatible
PATCH: Bug fixes, backward compatible

Manual Publishing (if needed):

Go to Actions → "Publish Package" → "Run workflow"
Optionally specify a version override

Support

License

MIT

Onelogin MCP

Overview

PopNx MCP’s three pillars

What you can do with it

Install

Before you install

Values you fill in

What it can do

Basic checksi

Maker matches the repo

Still maintained

Has a licence

Endpoint responds

Sign-in with OAuth

No hidden instructions in tool descriptions

Compared with others in Otheri

Common questions

Alternatives

Spec Driven Development

Remote Desktop Commander

AvaHR

README from the maker

OneLogin MCP Server

Overview

Demo

Installation

Prerequisites

Setup

Option 1: Environment Variables (Recommended)

OpenCode Configuration

Option 2: Setup Script (servers.json)

Usage

API Coverage

Configuration

Credential Management

Optional Environment Variables

Response Format

Troubleshooting

Server not appearing in Claude Desktop

"spawn bun ENOENT" error

If not found, install Bun

Or use full path in config

Authentication errors

Wrong environment

Project Structure

Development

Releasing

Support

License