@ory/mcp-server 0.1.0

package/dist/tools/oauth2.js

@@ -0,0 +1,375 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerOAuth2Tools = registerOAuth2Tools;
+const zod_1 = require("zod");
+const executor_js_1 = require("../executor.js");
+const projectParam = zod_1.z.string().optional().describe("Ory project ID or slug");
+const workspaceParam = zod_1.z.string().optional().describe("Ory workspace ID or name");
+const oauth2ClientFlagSchema = {
+    name: zod_1.z.string().optional().describe("Human-readable client name"),
+    grant_types: zod_1.z
+        .array(zod_1.z.string())
+        .optional()
+        .describe("Allowed grant types (e.g. authorization_code, client_credentials, refresh_token)"),
+    response_types: zod_1.z
+        .array(zod_1.z.string())
+        .optional()
+        .describe("Allowed response types (e.g. code, token, id_token)"),
+    scope: zod_1.z
+        .array(zod_1.z.string())
+        .optional()
+        .describe("Allowed scopes (e.g. openid, offline_access)"),
+    redirect_uris: zod_1.z
+        .array(zod_1.z.string())
+        .optional()
+        .describe("Allowed redirect URIs after OAuth2 flow"),
+    audience: zod_1.z
+        .array(zod_1.z.string())
+        .optional()
+        .describe("Allowed access token audiences"),
+    allowed_cors_origins: zod_1.z
+        .array(zod_1.z.string())
+        .optional()
+        .describe("URLs allowed to make CORS requests"),
+    post_logout_callbacks: zod_1.z
+        .array(zod_1.z.string())
+        .optional()
+        .describe("Allowed post-logout redirect URIs"),
+    token_endpoint_auth_method: zod_1.z
+        .string()
+        .optional()
+        .describe("Token endpoint auth method (client_secret_post, client_secret_basic, private_key_jwt, none)"),
+    access_token_strategy: zod_1.z
+        .enum(["opaque", "jwt"])
+        .optional()
+        .describe("Access token strategy"),
+    client_uri: zod_1.z.string().optional().describe("Informational client URL"),
+    logo_uri: zod_1.z.string().optional().describe("Logo URL for the client"),
+    policy_uri: zod_1.z.string().optional().describe("Privacy policy URL"),
+    tos_uri: zod_1.z.string().optional().describe("Terms of service URL"),
+    metadata: zod_1.z
+        .string()
+        .optional()
+        .describe("Arbitrary JSON metadata string"),
+    owner: zod_1.z.string().optional().describe("Owner identifier"),
+    contacts: zod_1.z
+        .array(zod_1.z.string())
+        .optional()
+        .describe("Contact emails"),
+    secret: zod_1.z.string().optional().describe("Provide the client secret"),
+    subject_type: zod_1.z
+        .enum(["public", "pairwise"])
+        .optional()
+        .describe("Subject identifier algorithm"),
+    jwks_uri: zod_1.z.string().optional().describe("URL where JWKS should be fetched from"),
+    skip_consent: zod_1.z
+        .boolean()
+        .optional()
+        .describe("Skip consent screen for this client"),
+    skip_logout_consent: zod_1.z
+        .boolean()
+        .optional()
+        .describe("Skip logout consent screen for this client"),
+    backchannel_logout_callback: zod_1.z
+        .string()
+        .optional()
+        .describe("Backchannel logout callback URL"),
+    frontchannel_logout_callback: zod_1.z
+        .string()
+        .optional()
+        .describe("Frontchannel logout callback URL"),
+};
+function appendOauth2ClientFlags(args, params) {
+    if (typeof params.name === "string")
+        args.push("--name", params.name);
+    for (const gt of params.grant_types ?? []) {
+        args.push("--grant-type", gt);
+    }
+    for (const rt of params.response_types ?? []) {
+        args.push("--response-type", rt);
+    }
+    if (Array.isArray(params.scope) && params.scope.length) {
+        args.push("--scope", params.scope.join(","));
+    }
+    for (const uri of params.redirect_uris ?? []) {
+        args.push("--redirect-uri", uri);
+    }
+    for (const aud of params.audience ?? []) {
+        args.push("--audience", aud);
+    }
+    for (const origin of params.allowed_cors_origins ?? []) {
+        args.push("--allowed-cors-origin", origin);
+    }
+    for (const cb of params.post_logout_callbacks ?? []) {
+        args.push("--post-logout-callback", cb);
+    }
+    if (typeof params.token_endpoint_auth_method === "string") {
+        args.push("--token-endpoint-auth-method", params.token_endpoint_auth_method);
+    }
+    if (typeof params.access_token_strategy === "string") {
+        args.push("--access-token-strategy", params.access_token_strategy);
+    }
+    if (typeof params.client_uri === "string")
+        args.push("--client-uri", params.client_uri);
+    if (typeof params.logo_uri === "string")
+        args.push("--logo-uri", params.logo_uri);
+    if (typeof params.policy_uri === "string")
+        args.push("--policy-uri", params.policy_uri);
+    if (typeof params.tos_uri === "string")
+        args.push("--tos-uri", params.tos_uri);
+    if (typeof params.metadata === "string")
+        args.push("--metadata", params.metadata);
+    if (typeof params.owner === "string")
+        args.push("--owner", params.owner);
+    for (const contact of params.contacts ?? []) {
+        args.push("--contact", contact);
+    }
+    if (typeof params.secret === "string")
+        args.push("--secret", params.secret);
+    if (typeof params.subject_type === "string") {
+        args.push("--subject-type", params.subject_type);
+    }
+    if (typeof params.jwks_uri === "string")
+        args.push("--jwks-uri", params.jwks_uri);
+    if (params.skip_consent === true)
+        args.push("--skip-consent");
+    if (params.skip_logout_consent === true)
+        args.push("--skip-logout-consent");
+    if (typeof params.backchannel_logout_callback === "string") {
+        args.push("--backchannel-logout-callback", params.backchannel_logout_callback);
+    }
+    if (typeof params.frontchannel_logout_callback === "string") {
+        args.push("--frontchannel-logout-callback", params.frontchannel_logout_callback);
+    }
+}
+function registerOAuth2Tools(server) {
+    server.registerTool("ory_list_oauth2_clients", {
+        title: "List OAuth2 Clients",
+        description: "List OAuth 2.0 Clients in the Ory project.",
+        inputSchema: {
+            project: projectParam,
+            workspace: workspaceParam,
+            page_size: zod_1.z
+                .number()
+                .int()
+                .positive()
+                .optional()
+                .describe("Maximum items per page (default 100)"),
+            page_token: zod_1.z
+                .string()
+                .optional()
+                .describe("Pagination token from previous response"),
+        },
+    }, async (params) => {
+        const args = ["list", "oauth2-clients", ...(0, executor_js_1.buildCommonArgs)(params)];
+        if (params.page_size)
+            args.push("--page-size", String(params.page_size));
+        if (params.page_token)
+            args.push("--page-token", params.page_token);
+        return (0, executor_js_1.execOryTool)(args);
+    });
+    server.registerTool("ory_get_oauth2_client", {
+        title: "Get OAuth2 Client",
+        description: "Get full details about one or more OAuth 2.0 Clients by their ID(s).",
+        inputSchema: {
+            ids: zod_1.z
+                .array(zod_1.z.string())
+                .min(1)
+                .describe("One or more OAuth2 client IDs"),
+            project: projectParam,
+            workspace: workspaceParam,
+        },
+    }, async (params) => {
+        const args = [
+            "get",
+            "oauth2-client",
+            ...params.ids,
+            ...(0, executor_js_1.buildCommonArgs)(params),
+        ];
+        return (0, executor_js_1.execOryTool)(args);
+    });
+    server.registerTool("ory_create_oauth2_client", {
+        title: "Create OAuth2 Client",
+        description: "Create a new OAuth 2.0 Client. Returns the client details including the client secret (shown only once).",
+        inputSchema: {
+            ...oauth2ClientFlagSchema,
+            id: zod_1.z.string().optional().describe("Provide the client ID"),
+            project: projectParam,
+            workspace: workspaceParam,
+        },
+    }, async (params) => {
+        const args = ["create", "oauth2-client", ...(0, executor_js_1.buildCommonArgs)(params)];
+        if (typeof params.id === "string")
+            args.push("--id", params.id);
+        appendOauth2ClientFlags(args, params);
+        return (0, executor_js_1.execOryTool)(args);
+    });
+    server.registerTool("ory_update_oauth2_client", {
+        title: "Update OAuth2 Client",
+        description: "Replace an OAuth 2.0 Client by its ID. WARNING: this replaces the entire client; unspecified fields revert to defaults.",
+        inputSchema: {
+            id: zod_1.z.string().describe("OAuth2 client ID to update"),
+            ...oauth2ClientFlagSchema,
+            project: projectParam,
+            workspace: workspaceParam,
+        },
+    }, async (params) => {
+        const args = [
+            "update",
+            "oauth2-client",
+            params.id,
+            ...(0, executor_js_1.buildCommonArgs)(params),
+        ];
+        appendOauth2ClientFlags(args, params);
+        return (0, executor_js_1.execOryTool)(args);
+    });
+    server.registerTool("ory_import_oauth2_client", {
+        title: "Import OAuth2 Clients",
+        description: "Import one or more OAuth 2.0 Clients from a JSON file or inline JSON content. Existing clients are NOT updated — the import will fail if a client already exists.",
+        inputSchema: {
+            content: zod_1.z
+                .string()
+                .optional()
+                .describe("OAuth2 client JSON (single object or array). Used if 'file' is not provided."),
+            file: zod_1.z
+                .string()
+                .optional()
+                .describe("Path to JSON file on disk (takes precedence over content)."),
+            project: projectParam,
+            workspace: workspaceParam,
+        },
+    }, async (params) => (0, executor_js_1.withFileOrContent)(params, ".json", (filePath) => {
+        const args = [
+            "import",
+            "oauth2-client",
+            filePath,
+            ...(0, executor_js_1.buildCommonArgs)(params),
+        ];
+        return (0, executor_js_1.execOryTool)(args);
+    }));
+    server.registerTool("ory_delete_oauth2_client", {
+        title: "Delete OAuth2 Client",
+        description: "Delete one or more OAuth 2.0 Clients by their ID(s). This action is irreversible.",
+        inputSchema: {
+            ids: zod_1.z
+                .array(zod_1.z.string())
+                .min(1)
+                .describe("One or more OAuth2 client IDs to delete"),
+            project: projectParam,
+            workspace: workspaceParam,
+        },
+    }, async (params) => {
+        const args = [
+            "delete",
+            "oauth2-client",
+            ...params.ids,
+            ...(0, executor_js_1.buildCommonArgs)(params),
+        ];
+        return (0, executor_js_1.execOryTool)(args);
+    });
+    server.registerTool("ory_delete_oauth2_access_tokens", {
+        title: "Delete OAuth2 Access Tokens",
+        description: "Revoke all OAuth 2.0 access tokens issued for a given client.",
+        inputSchema: {
+            client_id: zod_1.z.string().describe("OAuth2 client ID whose tokens should be revoked"),
+            project: projectParam,
+            workspace: workspaceParam,
+        },
+    }, async (params) => {
+        const args = [
+            "delete",
+            "access-tokens",
+            params.client_id,
+            ...(0, executor_js_1.buildCommonArgs)(params),
+        ];
+        return (0, executor_js_1.execOryTool)(args);
+    });
+    server.registerTool("ory_introspect_token", {
+        title: "Introspect Token",
+        description: "Introspect an OAuth 2.0 Access or Refresh Token to check its validity and metadata.",
+        inputSchema: {
+            token: zod_1.z.string().describe("The OAuth2 access or refresh token to introspect"),
+            scope: zod_1.z
+                .array(zod_1.z.string())
+                .optional()
+                .describe("Additionally check if these scopes were granted"),
+            project: projectParam,
+            workspace: workspaceParam,
+        },
+    }, async (params) => {
+        const args = [
+            "introspect",
+            "token",
+            params.token,
+            ...(0, executor_js_1.buildCommonArgs)(params),
+        ];
+        if (params.scope?.length) {
+            for (const s of params.scope) {
+                args.push("--scope", s);
+            }
+        }
+        return (0, executor_js_1.execOryTool)(args);
+    });
+    server.registerTool("ory_revoke_token", {
+        title: "Revoke Token",
+        description: "Revoke an OAuth 2.0 access or refresh token issued by the project.",
+        inputSchema: {
+            token: zod_1.z.string().describe("The OAuth2 token to revoke"),
+            client_id: zod_1.z
+                .string()
+                .optional()
+                .describe("OAuth2 client ID (defaults to OAUTH2_CLIENT_ID env var)"),
+            client_secret: zod_1.z
+                .string()
+                .optional()
+                .describe("OAuth2 client secret (defaults to OAUTH2_CLIENT_SECRET env var)"),
+            project: projectParam,
+            workspace: workspaceParam,
+        },
+    }, async (params) => {
+        const args = [
+            "revoke",
+            "token",
+            params.token,
+            ...(0, executor_js_1.buildCommonArgs)(params),
+        ];
+        if (params.client_id)
+            args.push("--client-id", params.client_id);
+        if (params.client_secret)
+            args.push("--client-secret", params.client_secret);
+        return (0, executor_js_1.execOryTool)(args);
+    });
+    server.registerTool("ory_perform_client_credentials", {
+        title: "Perform Client Credentials Flow",
+        description: "Exchange an OAuth 2.0 client_id/client_secret for an access token via the client_credentials grant.",
+        inputSchema: {
+            client_id: zod_1.z.string().describe("OAuth2 client ID"),
+            client_secret: zod_1.z.string().describe("OAuth2 client secret"),
+            scope: zod_1.z
+                .array(zod_1.z.string())
+                .optional()
+                .describe("OAuth2 scopes to request"),
+            audience: zod_1.z
+                .array(zod_1.z.string())
+                .optional()
+                .describe("Requested access token audiences"),
+            project: projectParam,
+            workspace: workspaceParam,
+        },
+    }, async (params) => {
+        const args = [
+            "perform",
+            "client-credentials",
+            "--client-id",
+            params.client_id,
+            "--client-secret",
+            params.client_secret,
+            ...(0, executor_js_1.buildCommonArgs)(params),
+        ];
+        for (const s of params.scope ?? [])
+            args.push("--scope", s);
+        for (const a of params.audience ?? [])
+            args.push("--audience", a);
+        return (0, executor_js_1.execOryTool)(args);
+    });
+}

package/dist/tools/organizations.d.ts

@@ -0,0 +1,2 @@
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+export declare function registerOrganizationTools(server: McpServer): void;

package/dist/tools/organizations.js

@@ -0,0 +1,87 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerOrganizationTools = registerOrganizationTools;
+const zod_1 = require("zod");
+const executor_js_1 = require("../executor.js");
+const projectParam = zod_1.z.string().optional().describe("Ory project ID or slug");
+const workspaceParam = zod_1.z.string().optional().describe("Ory workspace ID or name");
+function registerOrganizationTools(server) {
+    server.registerTool("ory_list_organizations", {
+        title: "List Organizations",
+        description: "List Ory Network B2B organizations within a project.",
+        inputSchema: {
+            project: projectParam,
+            workspace: workspaceParam,
+        },
+    }, async (params) => {
+        const args = ["list", "organizations", ...(0, executor_js_1.buildCommonArgs)(params)];
+        return (0, executor_js_1.execOryTool)(args);
+    });
+    server.registerTool("ory_create_organization", {
+        title: "Create Organization",
+        description: "Create a new B2B organization within an Ory Network project.",
+        inputSchema: {
+            label: zod_1.z.string().describe("Organization label / display name"),
+            domains: zod_1.z
+                .array(zod_1.z.string())
+                .optional()
+                .describe("Domains associated with the organization (e.g. example.com)"),
+            project: projectParam,
+            workspace: workspaceParam,
+        },
+    }, async (params) => {
+        const args = [
+            "create",
+            "organization",
+            params.label,
+            ...(0, executor_js_1.buildCommonArgs)(params),
+        ];
+        if (params.domains?.length) {
+            args.push("--domains", params.domains.join(","));
+        }
+        return (0, executor_js_1.execOryTool)(args);
+    });
+    server.registerTool("ory_update_organization", {
+        title: "Update Organization",
+        description: "Update a B2B organization (label and/or domains).",
+        inputSchema: {
+            id: zod_1.z.string().describe("Organization ID"),
+            label: zod_1.z.string().optional().describe("New label"),
+            domains: zod_1.z
+                .array(zod_1.z.string())
+                .optional()
+                .describe("New list of domains (replaces existing)"),
+            project: projectParam,
+        },
+    }, async (params) => {
+        const args = [
+            "update",
+            "organization",
+            params.id,
+            ...(0, executor_js_1.buildCommonArgs)(params),
+        ];
+        if (params.label)
+            args.push("--label", params.label);
+        if (params.domains?.length) {
+            args.push("--domains", params.domains.join(","));
+        }
+        return (0, executor_js_1.execOryTool)(args);
+    });
+    server.registerTool("ory_delete_organization", {
+        title: "Delete Organization",
+        description: "Delete a B2B organization by ID. This action is irreversible.",
+        inputSchema: {
+            id: zod_1.z.string().describe("Organization ID"),
+            project: projectParam,
+            workspace: workspaceParam,
+        },
+    }, async (params) => {
+        const args = [
+            "delete",
+            "organization",
+            params.id,
+            ...(0, executor_js_1.buildCommonArgs)(params),
+        ];
+        return (0, executor_js_1.execOryTool)(args);
+    });
+}

package/dist/tools/projects.d.ts

@@ -0,0 +1,2 @@
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+export declare function registerProjectTools(server: McpServer): void;

package/dist/tools/projects.js

@@ -0,0 +1,182 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerProjectTools = registerProjectTools;
+const zod_1 = require("zod");
+const executor_js_1 = require("../executor.js");
+const workspaceParam = zod_1.z.string().optional().describe("Ory workspace ID or name");
+const projectParam = zod_1.z.string().optional().describe("Ory project ID or slug");
+function registerProjectTools(server) {
+    server.registerTool("ory_list_projects", {
+        title: "List Projects",
+        description: "List your Ory Network projects.",
+        inputSchema: {
+            workspace: workspaceParam,
+        },
+    }, async (params) => {
+        const args = ["list", "projects", ...(0, executor_js_1.buildCommonArgs)(params)];
+        return (0, executor_js_1.execOryTool)(args);
+    });
+    server.registerTool("ory_get_project", {
+        title: "Get Project",
+        description: "Get the complete configuration of an Ory Network project.",
+        inputSchema: {
+            id: zod_1.z
+                .string()
+                .optional()
+                .describe("Project ID or slug. If omitted, uses the current default project."),
+            workspace: workspaceParam,
+        },
+    }, async (params) => {
+        const args = ["get", "project"];
+        if (params.id)
+            args.push(params.id);
+        args.push(...(0, executor_js_1.buildCommonArgs)(params));
+        return (0, executor_js_1.execOryTool)(args);
+    });
+    server.registerTool("ory_create_project", {
+        title: "Create Project",
+        description: "Create a new Ory Network project.",
+        inputSchema: {
+            name: zod_1.z.string().describe("Human-readable project name"),
+            environment: zod_1.z
+                .enum(["prod", "stage", "dev"])
+                .optional()
+                .describe("Project environment (default: dev)"),
+            create_workspace: zod_1.z
+                .string()
+                .optional()
+                .describe("Create a new workspace with this name and use it for the project"),
+            workspace: workspaceParam,
+            use_project: zod_1.z
+                .boolean()
+                .optional()
+                .describe("Set the created project as the default"),
+        },
+    }, async (params) => {
+        const args = ["create", "project", "--name", params.name];
+        if (params.environment)
+            args.push("--environment", params.environment);
+        if (params.create_workspace) {
+            args.push("--create-workspace", params.create_workspace);
+        }
+        if (params.workspace)
+            args.push("--workspace", params.workspace);
+        if (params.use_project === true)
+            args.push("--use-project");
+        args.push("--format", "json");
+        return (0, executor_js_1.execOryTool)(args);
+    });
+    server.registerTool("ory_update_project", {
+        title: "Update Project",
+        description: "Replace an Ory Network project's service configuration. Provide the configuration as inline JSON or via file path. Unspecified fields are reset.",
+        inputSchema: {
+            id: zod_1.z
+                .string()
+                .optional()
+                .describe("Project ID or slug. Defaults to the current default project."),
+            name: zod_1.z
+                .string()
+                .optional()
+                .describe("New project name (leave unset to keep the existing name)"),
+            content: zod_1.z
+                .string()
+                .optional()
+                .describe("Configuration JSON. Used if 'file' is not provided."),
+            file: zod_1.z
+                .string()
+                .optional()
+                .describe("Path to a configuration file (takes precedence over content)."),
+            project: projectParam,
+            workspace: workspaceParam,
+        },
+    }, async (params) => {
+        const buildArgs = (filePath) => {
+            const args = ["update", "project"];
+            if (params.id)
+                args.push(params.id);
+            args.push("--file", filePath);
+            if (params.name)
+                args.push("--name", params.name);
+            args.push(...(0, executor_js_1.buildCommonArgs)(params));
+            return args;
+        };
+        if (!params.content && !params.file) {
+            if (!params.name) {
+                return {
+                    content: [
+                        {
+                            type: "text",
+                            text: "Provide 'content', 'file', or at least 'name' to update.",
+                        },
+                    ],
+                    isError: true,
+                };
+            }
+            const args = ["update", "project"];
+            if (params.id)
+                args.push(params.id);
+            args.push("--name", params.name);
+            args.push(...(0, executor_js_1.buildCommonArgs)(params));
+            return (0, executor_js_1.execOryTool)(args);
+        }
+        return (0, executor_js_1.withFileOrContent)(params, ".json", (filePath) => (0, executor_js_1.execOryTool)(buildArgs(filePath)));
+    });
+    server.registerTool("ory_patch_project", {
+        title: "Patch Project",
+        description: "Apply a JSON-Patch document to a project's configuration. Use add/replace/remove operations to modify specific keys without overwriting the entire configuration.",
+        inputSchema: {
+            id: zod_1.z
+                .string()
+                .optional()
+                .describe("Project ID or slug. Defaults to the current default project."),
+            add: zod_1.z
+                .array(zod_1.z.string())
+                .optional()
+                .describe("Keys to add (e.g. '/services/identity/config/courier/smtp={...}')"),
+            replace: zod_1.z
+                .array(zod_1.z.string())
+                .optional()
+                .describe("Keys to replace (e.g. '/name=\"new name\"')"),
+            remove: zod_1.z
+                .array(zod_1.z.string())
+                .optional()
+                .describe("Keys to remove (e.g. '/services/identity/config/selfservice/methods/totp/enabled')"),
+            file: zod_1.z
+                .string()
+                .optional()
+                .describe("Optional path to a configuration file to merge in"),
+            project: projectParam,
+            workspace: workspaceParam,
+        },
+    }, async (params) => {
+        const args = ["patch", "project"];
+        if (params.id)
+            args.push(params.id);
+        args.push(...(0, executor_js_1.buildCommonArgs)(params));
+        for (const op of params.add ?? [])
+            args.push("--add", op);
+        for (const op of params.replace ?? [])
+            args.push("--replace", op);
+        for (const op of params.remove ?? [])
+            args.push("--remove", op);
+        if (params.file)
+            args.push("--file", params.file);
+        return (0, executor_js_1.execOryTool)(args);
+    });
+    server.registerTool("ory_use_project", {
+        title: "Use Project",
+        description: "Set the default Ory project for subsequent commands. If no ID given, prints the current default.",
+        inputSchema: {
+            id: zod_1.z
+                .string()
+                .optional()
+                .describe("Project ID to set as default"),
+        },
+    }, async (params) => {
+        const args = ["use", "project"];
+        if (params.id)
+            args.push(params.id);
+        args.push("--format", "json");
+        return (0, executor_js_1.execOryTool)(args);
+    });
+}

package/dist/tools/relationships.d.ts

@@ -0,0 +1,2 @@
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+export declare function registerRelationshipTools(server: McpServer): void;