okta.com
Okta is an identity and access management platform for workforce and customer identity. It provides authentication, user and application management, and related identity automation capabilities through tenant-specific Okta organizations.
Okta exposes tenant-scoped HTTP APIs for admin management and classic authentication, plus an Okta MCP server for AI agents; the management API accepts either scoped OAuth 2.0 bearer tokens or SSWS API tokens, and the MCP server uses an Okta API token via environment configuration.
- Okta MCP Serverdiscovered
- Okta Admin Management APIdiscovered
- Okta Authentication APIdiscovered
In your Okta org Admin Console, create an API token following Create an API token. Okta identifies this as an API key/API token and sends it in the Authorization header with the SSWS scheme.
Register an OAuth/OIDC app in your Okta org and obtain a scoped access token for Okta APIs using Implement OAuth for Okta or, for machine-to-machine access, Implement OAuth for Okta with a service app. Use scopes appropriate to the API methods you call.
conventions · 1/8 published
- integrations.json✗
/.well-known/integrations.json - llms.txt✓https://okta.com/llms.txt
- API catalog✗
/.well-known/api-catalog - OpenAPI document✗
/api/schema/, /openapi.json, /swagger.json, /api/openapi.json, or /v1/openapi.json - MCP server card✗
/.well-known/mcp/server-card.json - OAuth protected resource✗
/.well-known/oauth-protected-resource - Agent card✗
/.well-known/agent-card.json - Agent skills✗
/.well-known/agent-skills/index.json
Publish these signals → /publishing