Connectors / SSO
SSO MCP connectors for Claude, ChatGPT, Cursor and Microsoft Copilot
Elaichi connects your team’s AI to 10+ SSO apps. Each person’s AI can do only what they’re allowed to, and every action it takes in your apps is logged.
- Free 14-day trial
- No credit card
- Free plan for one person
-
Auth0
466 tools
Connected
-
Okta
318 tools
Connected
-
Google
121 tools
Connect
-
World
31 tools
Connect
-
Torii
27 tools
Connect
-
Google Workspace
21 tools
Connect
SSO connectors in the catalog
Connect one, share it with your team, and each person’s AI can do only what they’re allowed to. Nobody has to hand a login around.
10 connectors
-
Auth0 App credentials 466 tools
-
Google Hosted sign-in 121 tools
-
Google Workspace
Hosted sign-in
21
tools
-
JumpCloud API key 2 tools
-
Microsoft 365 Hosted sign-in 86 tools
-
Okta Bring your own OAuth app 318 tools
-
Stytch Hosted sign-in
-
Torii API key 27 tools
-
WorkOS Hosted sign-in
-
World API key 31 tools
No SSO connector by that name
It may sit under another category in the full catalog. Any documented API can become a connector.
What teams do with SSO connectors
Ask in plain English. Your AI does the work in the SSO apps your team already uses.
IT
-
Set up a new hire in Auth0
Create the user, attach the right role, and add them to their organization in one request instead of clicking through three screens.
-
Set up a new hire on day one
Create the Okta user, add them to the right groups, and confirm which applications they can now reach, all from one request.
-
Keep the user directory tidy
Look up a person by name, confirm their account details, and remove accounts that should no longer exist in Microsoft 365.
Security
-
Review what changed in Torii and who did it
Read the Torii audit log to see which users, applications, and contracts were edited, and check role assignments when an access review comes around.
-
Review admin roles and third-party tokens
List every role and who holds it, flag super admin assignments that should not exist, and see which outside apps have tokens granted by your users.
-
Review who still has an active account
Pull the full list of JumpCloud system users before an access review and spot accounts that should have been closed.
Support
-
Find the right help doc without digging
Ask for the Google Doc that covers a refund or setup question and get the current version from Drive, instead of scrolling through shared folders.
-
Find out why a verification failed
When a user says they could not prove they are human, pull up their verification and the precheck result to see what went wrong before you reply.
-
Confirm what a customer's sign-in email says
Pull up the exact Stytch email template a customer received so you can answer their question with the real text in front of you.
Operations
-
Read survey results without opening the spreadsheet
Ask what people said in a Google Form, such as an office move survey or a vendor intake, and get the responses grouped and summarized.
-
Set up channels for a new project
Create the project channels, name them to match your convention, and start the kickoff chat with the right people, all in one request.
-
Help someone recover their account
Start, execute or cancel a recovery for a user who lost their device, and add or remove authenticators once they are back in.
Things to ask
Ask from ChatGPT, Claude, Cursor or Microsoft Copilot. Each person’s AI can do only what they’re allowed to.
-
List Auth0 users who gained the admin role this week.
-
Summarize the responses to last week's onboarding form.
-
List all Google Workspace groups with no members.
-
List every JumpCloud system user in the Finance department
-
Post a recap of today's customer call to the Northwind channel
-
Which Okta users were deactivated in the last week?
-
Show me the email templates in our production Stytch project
-
List Torii applications with no active users this quarter.
For IT and engineering
What an agent can call in SSO
10+ SSO connectors bring 1,072 tools you can call the moment you connect, and 5 of the connectors sign in with nothing to register.
Of those 1,072 tools, 10% delete something. Switch off the delete tools for a role or one person, and their AI can’t use them.
- Read 46%
- 490 tools · list, get, search
- Write 28%
- 299 tools · create, update, send
- Delete 10%
- 107 tools · delete, remove, archive
- Other 16%
- 176 tools · vendor-specific verbs
One endpoint
https://api.elaichi.ai/mcp
Every connector on this page answers here.
Every SSO connector, by depth
Tool counts are what each connector exposes; the split is what those tools do. Hosted means you sign in with nothing to register. Your own app means an admin adds your OAuth app for the connector once, then you connect. API key and App credentials mean an admin pastes them once, with nothing to register.
| Connector | Tools | Read · write · delete | Sign-in |
|---|---|---|---|
| Auth0 | 466 | App credentials | |
| Okta | 318 | Your own app | |
| 121 | Hosted | ||
| Microsoft 365 | 86 | Hosted | |
| World | 31 | API key | |
| Torii | 27 | API key | |
| Google Workspace | 21 | Hosted | |
| JumpCloud | 2 | API key | |
| Stytch | Hosted | ||
| WorkOS | Hosted |
Teams that connect SSO usually connect these too
Questions, answered
How many SSO connectors does Elaichi have?
10+ SSO connectors are in the catalog. Each one arrives as a set of MCP tools an agent can call through Elaichi’s one MCP endpoint.
Can Claude, ChatGPT, Cursor and Microsoft Copilot all use SSO connectors?
Yes. Elaichi exposes one organization-wide endpoint, https://api.elaichi.ai/mcp, and Claude, ChatGPT, Cursor, Microsoft Copilot or any MCP client connects to that same address with OAuth, while the Elaichi Agent reaches the same tools inside the app. Connecting a SSO account once makes it reachable from every one of them.
Do SSO connectors work with Gemini, Codex, Claude Code or other MCP clients?
Yes. SSO connectors are reached over the same MCP endpoint every client uses, so anything that speaks MCP can call them — Gemini, Codex, Claude Code, Windsurf, Cline, Zed and OpenCode among them — alongside Claude, ChatGPT, Cursor, Microsoft Copilot and the Elaichi Agent. There is no per-client setup beyond pointing the client at https://api.elaichi.ai/mcp.
Do SSO connectors need me to bring my own OAuth app?
Most do not. 5 of the SSO connectors use Elaichi's hosted sign-in, with nothing to register. 4 connect with an API key or app credentials that an admin pastes once, with no app to register. 1 asks you to bring your own OAuth app: you register it once with the vendor and connect. Each connector's page says which it is before you start.
Can I stop an agent from writing to SSO tools?
Yes. Tool restrictions apply at role and individual level, and a restricted tool can't be used by the people it is restricted for. Read-only access to a SSO connector is a matter of allowing the reads and leaving the writes out.
Put SSO connectors in front of your team
14 days of Black, no credit card. Connect one and pick what each team can call.
When the trial ends, nothing is deleted. You move to the free Personal plan, and connections, roles and the audit log stay where they are.
Add one link to your AI app
The same link for everyone on your team.
https://api.elaichi.ai/mcp
ChatGPT
Claude
Cursor
Microsoft Copilot