@ory/mcp-server 0.1.0

package/dist/tools/relationships.js

@@ -0,0 +1,181 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerRelationshipTools = registerRelationshipTools;
+const zod_1 = require("zod");
+const executor_js_1 = require("../executor.js");
+const projectParam = zod_1.z.string().optional().describe("Ory project ID or slug");
+const workspaceParam = zod_1.z.string().optional().describe("Ory workspace ID or name");
+function registerRelationshipTools(server) {
+    server.registerTool("ory_list_relationships", {
+        title: "List Relationships",
+        description: "List relationship tuples matching the given filter criteria. All filter parameters are optional.",
+        inputSchema: {
+            namespace: zod_1.z.string().optional().describe("Filter by namespace"),
+            object: zod_1.z.string().optional().describe("Filter by object"),
+            relation: zod_1.z.string().optional().describe("Filter by relation"),
+            subject_id: zod_1.z.string().optional().describe("Filter by subject ID"),
+            subject_set: zod_1.z
+                .string()
+                .optional()
+                .describe('Filter by subject set (format: "namespace:object#relation")'),
+            page_size: zod_1.z
+                .number()
+                .int()
+                .positive()
+                .optional()
+                .describe("Maximum items per page (default 100)"),
+            page_token: zod_1.z
+                .string()
+                .optional()
+                .describe("Pagination token from previous response"),
+            project: projectParam,
+            workspace: workspaceParam,
+        },
+    }, async (params) => {
+        const args = ["list", "relationships", ...(0, executor_js_1.buildCommonArgs)(params)];
+        if (params.namespace)
+            args.push("--namespace", params.namespace);
+        if (params.object)
+            args.push("--object", params.object);
+        if (params.relation)
+            args.push("--relation", params.relation);
+        if (params.subject_id)
+            args.push("--subject-id", params.subject_id);
+        if (params.subject_set)
+            args.push("--subject-set", params.subject_set);
+        if (params.page_size)
+            args.push("--page-size", String(params.page_size));
+        if (params.page_token)
+            args.push("--page-token", params.page_token);
+        return (0, executor_js_1.execOryTool)(args);
+    });
+    server.registerTool("ory_create_relationship", {
+        title: "Create Relationship",
+        description: "Create a relationship tuple. Example: User:alice can view Doc:readme.",
+        inputSchema: {
+            namespace: zod_1.z.string().describe("Namespace (e.g. Doc)"),
+            object: zod_1.z.string().describe("Object within the namespace (e.g. readme)"),
+            relation: zod_1.z.string().describe("Relation (e.g. view, owner, editor)"),
+            subject_id: zod_1.z
+                .string()
+                .describe("Subject identifier (e.g. User:alice)"),
+            project: projectParam,
+            workspace: workspaceParam,
+        },
+    }, async (params) => {
+        const args = [
+            "create",
+            "relationships",
+            params.subject_id,
+            params.relation,
+            params.namespace,
+            params.object,
+            ...(0, executor_js_1.buildCommonArgs)(params),
+        ];
+        return (0, executor_js_1.execOryTool)(args);
+    });
+    server.registerTool("ory_delete_relationships", {
+        title: "Delete Relationships",
+        description: "Delete ALL relationships matching the given filter. At least one filter parameter should be provided.",
+        inputSchema: {
+            namespace: zod_1.z.string().optional().describe("Filter by namespace"),
+            object: zod_1.z.string().optional().describe("Filter by object"),
+            relation: zod_1.z.string().optional().describe("Filter by relation"),
+            subject_id: zod_1.z.string().optional().describe("Filter by subject ID"),
+            project: projectParam,
+            workspace: workspaceParam,
+        },
+    }, async (params) => {
+        const args = ["delete", "relationships", ...(0, executor_js_1.buildCommonArgs)(params)];
+        if (params.namespace)
+            args.push("--namespace", params.namespace);
+        if (params.object)
+            args.push("--object", params.object);
+        if (params.relation)
+            args.push("--relation", params.relation);
+        if (params.subject_id)
+            args.push("--subject-id", params.subject_id);
+        return (0, executor_js_1.execOryTool)(args);
+    });
+    server.registerTool("ory_create_relationships_from_file", {
+        title: "Create Relationships from File",
+        description: "Create one or more relationship tuples from a JSON file or inline JSON content.",
+        inputSchema: {
+            content: zod_1.z
+                .string()
+                .optional()
+                .describe("Relationship JSON (single tuple or array of tuples). Used if 'file' is not provided."),
+            file: zod_1.z
+                .string()
+                .optional()
+                .describe("Path to a JSON file or directory (takes precedence over content)."),
+            project: projectParam,
+            workspace: workspaceParam,
+        },
+    }, async (params) => (0, executor_js_1.withFileOrContent)(params, ".json", (filePath) => {
+        const args = [
+            "create",
+            "relationships",
+            "--file",
+            filePath,
+            ...(0, executor_js_1.buildCommonArgs)(params),
+        ];
+        return (0, executor_js_1.execOryTool)(args);
+    }));
+    server.registerTool("ory_parse_relationships", {
+        title: "Parse Relationships",
+        description: "Parse human-readable relationship tuples (Keto syntax) into the JSON format used by the Ory APIs.",
+        inputSchema: {
+            content: zod_1.z
+                .string()
+                .optional()
+                .describe("Tuple definitions in human-readable form. Used if 'file' is not provided."),
+            file: zod_1.z
+                .string()
+                .optional()
+                .describe("Path to a tuple file or directory (takes precedence over content)."),
+            project: projectParam,
+            workspace: workspaceParam,
+        },
+    }, async (params) => (0, executor_js_1.withFileOrContent)(params, ".txt", (filePath) => {
+        const args = [
+            "parse",
+            "relationships",
+            "--file",
+            filePath,
+            ...(0, executor_js_1.buildCommonArgs)(params),
+        ];
+        return (0, executor_js_1.execOryTool)(args);
+    }));
+    server.registerTool("ory_check_permission", {
+        title: "Check Permission",
+        description: 'Check whether a subject has a relation on an object (e.g. "Is User:alice allowed to view Doc:readme?").',
+        inputSchema: {
+            subject: zod_1.z.string().describe("Subject (e.g. User:alice)"),
+            relation: zod_1.z.string().describe("Relation to check (e.g. view)"),
+            namespace: zod_1.z.string().describe("Namespace (e.g. Doc)"),
+            object: zod_1.z.string().describe("Object (e.g. readme)"),
+            max_depth: zod_1.z
+                .number()
+                .int()
+                .positive()
+                .optional()
+                .describe("Maximum search tree depth"),
+            project: projectParam,
+            workspace: workspaceParam,
+        },
+    }, async (params) => {
+        const args = [
+            "is",
+            "allowed",
+            params.subject,
+            params.relation,
+            params.namespace,
+            params.object,
+            ...(0, executor_js_1.buildCommonArgs)(params),
+        ];
+        if (params.max_depth)
+            args.push("--max-depth", String(params.max_depth));
+        return (0, executor_js_1.execOryTool)(args);
+    });
+}

package/dist/tools/workspaces.d.ts

@@ -0,0 +1,2 @@
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+export declare function registerWorkspaceTools(server: McpServer): void;

package/dist/tools/workspaces.js

@@ -0,0 +1,41 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerWorkspaceTools = registerWorkspaceTools;
+const zod_1 = require("zod");
+const executor_js_1 = require("../executor.js");
+function registerWorkspaceTools(server) {
+    server.registerTool("ory_list_workspaces", {
+        title: "List Workspaces",
+        description: "List Ory Network workspaces accessible to the current account.",
+        inputSchema: {},
+    }, async () => {
+        const args = ["list", "workspaces", ...(0, executor_js_1.buildCommonArgs)({})];
+        return (0, executor_js_1.execOryTool)(args);
+    });
+    server.registerTool("ory_get_workspace", {
+        title: "Get Workspace",
+        description: "Get details about an Ory Network workspace by ID.",
+        inputSchema: {
+            id: zod_1.z.string().describe("Workspace ID"),
+        },
+    }, async (params) => {
+        const args = ["get", "workspace", params.id, ...(0, executor_js_1.buildCommonArgs)({})];
+        return (0, executor_js_1.execOryTool)(args);
+    });
+    server.registerTool("ory_create_workspace", {
+        title: "Create Workspace",
+        description: "Create a new Ory Network workspace.",
+        inputSchema: {
+            name: zod_1.z.string().describe("Workspace name"),
+        },
+    }, async (params) => {
+        const args = [
+            "create",
+            "workspace",
+            "--name",
+            params.name,
+            ...(0, executor_js_1.buildCommonArgs)({}),
+        ];
+        return (0, executor_js_1.execOryTool)(args);
+    });
+}

package/package.json

@@ -0,0 +1,70 @@
+{
+  "name": "@ory/mcp-server",
+  "version": "0.1.0",
+  "description": "MCP server exposing the Ory CLI and Ory Network REST API as tools for AI agents to manage identities, OAuth2 clients, permissions, projects, and configuration",
+  "license": "Apache-2.0",
+  "homepage": "https://ory.com",
+  "keywords": [
+    "ory",
+    "mcp",
+    "mcp-server",
+    "model-context-protocol",
+    "cli",
+    "identity",
+    "identity-management",
+    "iam",
+    "authentication",
+    "authorization",
+    "access-control",
+    "permissions",
+    "rbac",
+    "zanzibar",
+    "oauth",
+    "oauth2",
+    "openid-connect",
+    "oidc",
+    "session",
+    "sso",
+    "agent",
+    "ai-agent",
+    "agent-security",
+    "guardrails",
+    "llm",
+    "kratos",
+    "keto",
+    "hydra"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    }
+  },
+  "bin": {
+    "ory-mcp-server": "dist/index.js"
+  },
+  "files": [
+    "dist",
+    "!dist/**/*.tsbuildinfo"
+  ],
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.29.0",
+    "zod": "^4.4.3"
+  },
+  "engines": {
+    "node": ">=24"
+  },
+  "scripts": {
+    "build": "tsc",
+    "clean": "rm -rf dist *.tsbuildinfo",
+    "pretest": "pnpm run build",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "typecheck": "tsc --noEmit"
+  }
+}