Okta for AI agents

get_single_okta_user_by_id

Get a single Okta user by id. Returns the full user object including profile, status, and credential details. Required: id.

create_a_okta_user

Create a new user in Okta. Returns the created user object including its id, status, and profile.

update_a_okta_user_by_id

Replace an existing Okta user's profile and credentials in full via PUT. Returns the updated user object. Required: id.

delete_a_okta_user_by_id

Delete an Okta user by id. Returns an empty response on success. Required: id.

okta_users_deactivate

Deactivate an Okta user, transitioning them to the DEPROVISIONED lifecycle state. Returns an empty response on success. Required: user_id.

okta_users_suspend

Suspend an Okta user, preventing them from signing in while retaining their account. Returns an empty response on success. Required: user_id.

okta_users_bulk_update

Replace an existing identity source user. Replaces an existing user for the given identity source instance and external ID. Required: identity_source_id, external_id.

okta_users_bulk_delete

Delete an identity source user. Deletes a user in an identity source for the given identity source instance and external ID. Required: identity_source_id, external_id.

okta_users_list_subscriptions

List all subscriptions for a user. Lists all subscriptions available to a specified user. Required: id.

okta_users_partial_update

Update a user. Updates a user's profile or credentials with partial update semantics. Required: id.

get_single_okta_group_by_id

Get a single Okta group by id. Returns the full group object. Required: id.

update_a_okta_group_by_id

Update an existing Okta group by id using a full replacement (PUT). Returns the updated group object. Required: id.

list_all_okta_group_members

List all members of an Okta group. Returns user objects belonging to the specified group. Required: group_id.

create_a_okta_group_member

Add a user to an Okta group. Returns an empty 204 response on success. Required: group_id and user_id.

delete_a_okta_group_member_by_id

Remove a user from an Okta group. Returns an empty 204 response on success. Required: group_id (query) and user id (id).

list_all_okta_apps

List all applications in Okta. Returns a collection of application objects.

get_single_okta_app_by_id

Get a single Okta application by id. Returns the full application object. Required: id.

delete_a_okta_app_by_id

Delete an application. Deletes an inactive application. Required: id.

list_all_okta_system_logs

List system log events from an Okta organization. Returns an array of LogEvent objects representing audit trail entries recorded by Okta.

list_all_okta_roles

List all IAM roles defined in Okta. Returns a collection of role objects from the roles array.

get_single_okta_role_by_id

Get a single Okta IAM role by id. Returns the full role object. Required: id.

okta_roles_assign

Assign a role to an Okta user. Required: user_id.

okta_roles_list_subscriptions

List all subscriptions for a role. Lists all subscriptions available to a specified Role. Required: role_ref.

list_all_okta_user_roles

List all roles assigned to a specific Okta user. Returns the collection of role objects associated with the user. Required: user_id.

delete_a_okta_user_role_by_id

Unassign a user role. Unassigns a role assignment (identified by roleAssignmentId) from a user (identified by userId). Required: user_id, id.

list_all_okta_user_groups

List all Okta groups that a specific user belongs to. Returns the collection of group objects associated with the user. Required: user_id.

okta_app_authenticators_challenges_verify

Verify a push notification challenge response from an Okta app authenticator. Returns an empty response on success., challenge_id, method, and challengeResponse.

get_single_okta_authenticator_enrollment_by_id

Retrieve a single Okta authenticator enrollment by id. Returns: id, name, created, lastChallenged, canReset, canUnenroll. Required: authenticator_id (query) and enrollment id (id).

okta_myaccount_app_authenticators_bulk_update

Partially update an existing Okta app authenticator enrollment by enrollment_id., enrollment_id.

create_a_okta_myaccount_app_authenticator

Create an Okta app authenticator enrollment for the current user. Returns the enrollment object including id, authenticatorId, createdDate, device, methods, and user., authenticatorId.

create_a_okta_myaccount_email

Create a primary or secondary email address for the current Okta user's account. The new address is created with UNVERIFIED status. Returns: id, status, roles, profile.email.

get_single_okta_myaccount_email_by_id

Get a specific email address for the current Okta user by id. Returns: id, status, roles, profile.email. Required: id, base_url.

list_all_okta_myaccount_okta_applications

List all Okta apps assigned to the current user. Returns: id, name, displayName for each app.

list_all_okta_myaccount_organizations

Retrieve org details for the authenticated user's Okta organization. Returns: name, url, supportEmail.

okta_myaccount_passwords_bulk_delete

Delete the current Okta user's enrolled password. Returns an empty response on success.

okta_myaccount_passwords_bulk_update

Replace the current Okta user's password. Returns: id, status, created, lastUpdated. and a profile object containing the new password.

list_all_okta_myaccount_passwords

Retrieve the current Okta user's password status (not the password value itself). Returns: id, status, created, lastUpdated.

get_single_okta_myaccount_phone_by_id

Get the current Okta user's phone by id. Returns: id, status, profile.phoneNumber, and available operation links. Required: id.

list_all_okta_myaccount_phones

List all phones for the current Okta user. Returns an array of phone objects each including id, status, and profile.phoneNumber.

okta_myaccount_sessions_bulk_delete

Delete all Okta MyAccount sessions for the current user in a single call. Returns an empty 204 response on success.

delete_a_okta_myaccount_webauthn_by_id

Delete a specific Passkey (FIDO2 WebAuthn) enrollment in Okta by id. Returns an empty 204 response on success. Requires base_url and id.

get_single_okta_myaccount_webauthn_by_id

Get a single Passkey (FIDO2 WebAuthn) enrollment in Okta by id. Returns: id, status, name, credentialId, created, lastUpdated. Requires base_url and id.

create_a_okta_password_change_password

Update a password in Okta for the authenticated user. The caller must supply the current password to change it. Returns an empty 204 response on success., oldPassword, newPassword.

list_all_okta_password_complexity_requirements

Retrieve the password complexity requirements for the current okta user. Returns: description, complexity (minLength, minLowerCase, minUpperCase, minNumber, minSymbol, excludeUsername).

create_a_okta_phone_challenge

Send a phone challenge in Okta via SMS or CALL to begin phone number verification. Returns a `_links.verify.href` link to use with the verification code at the verify endpoint. Required: `id` (phone ID), `base_url`. The verification code expires in five minutes; set `retry` to `true` in the body to resend a failed challenge.

list_all_okta_aaguids

List all custom AAGUIDs. Lists all custom Authenticator Attestation Global Unique Identifiers (AAGUIDs) in the org Only custom AAGUIDs that an admin has created are returned. Required: authenticator_id.

get_single_okta_aaguid_by_id

Retrieve a custom AAGUID. Retrieves a custom AAGUID. Required: authenticator_id, id.

delete_a_okta_aaguid_by_id

Delete a custom AAGUID. Deletes a custom AAGUID You can only delete custom AAGUIDs that an admin has created. Required: authenticator_id, id.

create_a_okta_aerial_grant

Grant Okta Aerial access to your org. Grants an Okta Aerial account consent to manage your org.

create_a_okta_aerial_revoke

Revoke Okta Aerial access to your org. Revokes access of an Okta Aerial account to your Org.

list_all_okta_agent_pools

List all agent pools. Lists all agent pools with pagination support

list_all_okta_api_tokens

List all API token metadata. Lists all the metadata of the active API tokens

get_single_okta_api_token_by_id

Retrieve an API token's metadata. Retrieves the metadata for an active API token by apiTokenId. Required: id.

list_all_okta_assignees_users

List all users with role assignments. Lists all users with role assignments

list_all_okta_attack_protection_authenticator_settings

Retrieve the authenticator settings. Retrieves the Authenticator Settings for an org

list_all_okta_attack_protection_user_lockout_settings

Retrieve the user lockout settings. Retrieves the User Lockout Settings for an org

update_a_okta_attack_protection_user_lockout_setting_by_id

Replace the user lockout settings. Replaces the User Lockout Settings for an org

create_a_okta_authenticator_enrollments_phone

Create an auto-activated Phone authenticator enrollment. Creates a Phone authenticator enrollment that's automatically activated. Required: user_id.

get_single_okta_authenticator_by_id

Retrieve an authenticator. Retrieves an authenticator from your Okta organization by authenticatorId. Required: id.

create_a_okta_authenticator

Create an authenticator. Creates an authenticator

update_a_okta_authenticator_by_id

Replace an authenticator. Replaces the properties for an authenticator identified by authenticatorId. Required: id.

create_a_okta_authorization_server

Create an authorization server. Creates an authorization server

create_a_okta_background_image

Upload the background image. Uploads and replaces the background image for the theme. Required: brand_id, theme_id.

delete_a_okta_behavior_by_id

Delete a behavior detection rule. Deletes a Behavior Detection Rule by behaviorId. Required: id.

create_a_okta_binding

Create a role resource set binding. Creates a binding for the resource set, custom role, and members (users or groups) . Required: resource_set_id_or_label.

create_a_okta_bounces_remove_list

Remove bounced emails. Removes emails from an email service bounce list.

list_all_okta_brands

List all brands. Lists all the brands in your org

update_a_okta_brand_by_id

Replace a brand. Replaces a brand by brandId Passing an invalid brandId returns a 404 Not Found status code with the error code E0000007. Required: id.

create_a_okta_bulk_delete

Upload the data to be deleted in Okta. Uploads external IDs of entities that need to be deleted in Okta from the identity source for the given session. Required: identity_source_id, session_id.

create_a_okta_bulk_group_memberships_upsert

Upload the group memberships to be upserted in Okta. Uploads the group memberships that need to be inserted or updated in Okta from the identity source for the given session. Required: identity_source_id, session_id.

create_a_okta_bulk_groups_delete

Upload the group external IDs to be deleted in Okta. Uploads external IDs of groups that need to be deleted in Okta from the identity source for the given session. Required: identity_source_id, session_id.

create_a_okta_bulk_groups_upsert

Upload the group profiles without memberships to be upserted in Okta. Uploads the group profiles without memberships that need to be inserted or updated in Okta from the identity source for the given session. Required: identity_source_id, session_id.

list_all_okta_captchas

List all CAPTCHA instances. Lists all CAPTCHA instances with pagination support.

update_a_okta_captcha_by_id

Replace a CAPTCHA instance. Replaces the properties for a specified CAPTCHA instance. Required: id.

okta_captchas_replace

Update a CAPTCHA instance. Partially updates the properties of a specified CAPTCHA instance. Required: id.

list_all_okta_claims

List all custom token claims. Lists all custom token Claims defined for a specified custom authorization server. Required: auth_server_id.

update_a_okta_classification_by_id

Replace the user's classification. Replaces the user's classification. Required: user_id.

list_all_okta_clients

List all client resources for an authorization server. Lists all client resources for which the specified authorization server has tokens. Required: auth_server_id.

get_single_okta_connection_by_id

Retrieve the default provisioning connection. Retrieves the default provisioning connection for an app. Required: app_id.

create_a_okta_credentials_change_recovery_question

Update recovery question. Updates a user's recovery question and answer credential by validating the user's current password. Required: user_id.

get_single_okta_customization_by_id

Retrieve an email customization. Retrieves an email customization by its unique identifier If Custom languages for Okta Email Templates is disabled, requests to retrieve an additional language customization by ID result in a 404 Not Found error response. Required: brand_id, template_name, id.

list_all_okta_customizeds

Retrieve the customized content of the specified well-known URI. Retrieves the customized content of a well-known URI for a specific brand and well-known URI path. Required: brand_id, path.

list_all_okta_cwo_connections

Retrieve all Cross App Access connections. Retrieves inbound and outbound Cross App Access connections associated with an app. Required: app_id.

create_a_okta_cwo_connection

Create a Cross App Access connection. Creates a Cross App Access connection. Required: app_id.

list_all_okta_default_content_previews

Retrieve a preview of the email template default content. Retrieves a preview of an Email Template's default content. Required: brand_id, template_name.

list_all_okta_dependencies

List all dependencies. Lists all feature dependencies for a specified feature. Required: feature_id.

create_a_okta_device_assurance

Create a device assurance policy. Creates a new device assurance policy

update_a_okta_device_assurance_by_id

Replace a device assurance policy. Replaces a device assurance policy by deviceAssuranceId. Required: id.

list_all_okta_device_integrations

List all device integrations. Lists all device integrations for your org.

get_single_okta_device_integration_by_id

Retrieve a device integration. Retrieves a device integration by deviceIntegrationId. Required: id.

list_all_okta_device_posture_checks

List all device posture checks. Lists all device posture checks

create_a_okta_device_posture_check

Create a device posture check. Creates a device posture check

update_a_okta_device_posture_check_by_id

Replace a device posture check. Replaces a device posture check by postureCheckId. Required: id.

delete_a_okta_device_posture_check_by_id

Delete a device posture check. Deletes a device posture check by postureCheckId. Required: id.

list_all_okta_devices

List all devices. Lists all devices with pagination support.

delete_a_okta_device_by_id

Delete a device. Deletes (permanently) a device by deviceId if it has a status of DEACTIVATED. Required: id.

list_all_okta_domains

List all domains associated with a brand. Lists all domains associated with a brand by brandId. Required: brand_id.

update_a_okta_domain_by_id

Replace a custom domain's brand. Replaces a custom domain's brand. Required: id.

okta_domains_verify

Verify a custom domain. Verifies the custom domain and validity of DNS records by domainId. Required: id.

list_all_okta_email_domains

List all email domains. Lists all the Email Domains in your org

update_a_okta_email_domain_by_id

Replace an email domain. Replaces associated username and sender display name by emailDomainId. Required: id.

delete_a_okta_email_domain_by_id

Delete an email domain. Deletes an Email Domain by emailDomainId. Required: id.

list_all_okta_email_servers

List all enrolled SMTP servers. Lists all the enrolled custom SMTP server configurations

update_a_okta_email_server_by_id

Update an SMTP server configuration. Updates the specified custom SMTP server configuration .0 authentication, the authType property is required in the request body. Required: id.

delete_a_okta_enrollment_by_id

Delete a WebAuthn preregistration factor. Deletes a specific WebAuthn preregistration factor for a user. Required: user_id, authenticator_enrollment_id.

update_a_okta_error_customized_by_id

Replace the customized error page. Replaces the customized error page. Required: brand_id.

delete_a_okta_error_preview_by_id

Delete the preview error page. Deletes the preview error page. Required: brand_id.

get_single_okta_event_hook_by_id

Retrieve an event hook. Retrieves an event hook. Required: id.

update_a_okta_event_hook_by_id

Replace an event hook. Replaces an event hook. Required: id.

list_all_okta_factors

List all enrolled factors. Lists all enrolled factors for the specified user that are included in the highest priority authenticator enrollment policy that applies to the user. Required: user_id.

delete_a_okta_factor_by_id

Unenroll a factor. Unenrolls an existing factor for the specified user. Required: user_id, id.

list_all_okta_factors_catalogs

List all supported factors. Lists all the supported factors that can be enrolled for the specified user that are included in the highest priority authenticator enrollment policy that applies to the user. Required: user_id.

list_all_okta_factors_questions

List all supported security questions. Lists all available security questions for the specified user. Required: user_id.

create_a_okta_favicon

Upload the favicon. Uploads and replaces the favicon for the theme. Required: brand_id, theme_id.

delete_a_okta_favicon_by_id

Delete the favicon. Deletes a theme favicon. Required: brand_id, theme_id.

create_a_okta_federated_claim

Create a federated claim. Creates a claim that will be included in tokens produced by federation protocols (for example: OIDC id_tokens or SAML Assertions). Required: app_id.

update_a_okta_federated_claim_by_id

Replace a federated claim. Replaces a claim that will be included in tokens produced by federation protocols (for example: OIDC id_tokens or SAML Assertions). Required: app_id, claim_id.

list_all_okta_first_party_app_settings

Retrieve the Okta application settings. Retrieves the settings for an Okta app (also known as an Okta first-party app). Required: app_name.

create_a_okta_governance_bundle

Create a governance bundle. Creates a governance bundle of entitlements for the Admin Console

create_a_okta_governance_opt_in

Opt in the Admin Console to entitlement management. Opts in the Admin Console to entitlement management

list_all_okta_governances

Retrieve all user role governance sources. Retrieves the governance sources of a role (identified by roleAssignmentId) that's assigned to a user (identified by userId). Required: user_id, role_assignment_id.

list_all_okta_grants

List all app grants. Lists all scope consent Grants for the app. Required: app_id.

list_all_okta_group_push_mappings

List all group push mappings. Lists all group push mappings with pagination support. Required: app_id.

create_a_okta_group_push_mapping

Create a group push mapping. Creates or links a group push mapping. Required: app_id.

create_a_okta_groups_modify

Update an external directory group membership. Updates an Active Directory or LDAP group membership directly in the Active Directory or LDAP server. Required: app_instance_id.

get_single_okta_groups_rule_by_id

Retrieve a group rule. Retrieves a specific group rule by ID from your org. Required: id.

delete_a_okta_groups_rule_by_id

Delete a group rule. Deletes a specific group rule by groupRuleId. Required: id.

get_single_okta_hook_key_by_id

Retrieve a key by ID. Retrieves the public portion of the Key object using the id parameter . Required: id.

update_a_okta_hook_key_by_id

Replace a key. Replaces a key by id This request replaces existing properties after passing validation. Required: id.

delete_a_okta_hook_key_by_id

Delete a key. Deletes a key by id. Required: id.

get_single_okta_hook_keys_public_by_id

Retrieve a public key. Retrieves a public key by keyId . Required: id.

delete_a_okta_iam_role_by_id

Delete a custom role. Deletes a custom role by roleIdOrLabel. Required: id.

delete_a_okta_idp_by_id

Delete an IdP. Deletes an identity provider (IdP) integration by idpId * All existing IdP users are unlinked with the highest order profile source taking precedence for each IdP user. Required: id.

list_all_okta_inline_hooks

List all inline hooks. Lists all inline hooks or all inline hooks of a specific type.

get_single_okta_inline_hook_by_id

Retrieve an inline hook. Retrieves an inline hook by inlineHookId. Required: id.

okta_inline_hooks_replace

Update an inline hook. Updates an inline hook by inlineHookId. Required: id.

list_all_okta_integrations_api_services

List all API service integration instances. Lists all API Service Integration instances with a pagination option

create_a_okta_integrations_api_service

Create an API service integration instance. Creates and authorizes an API Service Integration instance

list_all_okta_interclient_allowed_apps

List all allowed apps for a target app. Lists all apps allowed by this app to request interclient SSO using the interclient token. Required: app_id.

create_a_okta_interclient_allowed_app

Create an allowed app mapping for a target app. Creates a mapping between the target app and an allowed app for interclient SSO using the interclient token. Required: app_id.

delete_a_okta_interclient_allowed_app_by_id

Delete an interclient trust mapping. Deletes the mapping between the target app and an allowed app. Required: app_id, allowed_app_id.

list_all_okta_interclient_target_apps

List all target apps for an allowed app. Lists all the target apps that allow this app to request interclient SSO using an interclient token. Required: app_id.

list_all_okta_keys_actives

List the active signing key credential for IdP. Lists the active signing key credential for an identity provider (IdP). Required: idp_id.

okta_lifecycle_activates_activate_app_default_connection

Activate the default provisioning connection. Activates the default provisioning connection for an app. Required: app_id.

okta_lifecycle_activates_activate_authenticator

Activate an authenticator. Activates an authenticator by authenticatorId. Required: authenticator_id.

okta_lifecycle_activates_activate_authenticator_method

Activate an authenticator method. Activates a method for an authenticator identified by authenticatorId and methodType. Required: authenticator_id, id.

lifecycle_activates_activate_authorization_server_policy_rule

Activate a policy rule. Activates an authorization server policy rule. Required: auth_server_id, policy_id, rule_id.

okta_lifecycle_deactivates_deactivate_app_default_connection

Deactivate the default provisioning connection. Deactivates the default provisioning connection for an app. Required: app_id.

okta_lifecycle_deactivates_deactivate_authenticator_method

Deactivate an authenticator method. Deactivates a method for an authenticator identified by authenticatorId and methodType. Required: authenticator_id, id.

create_a_okta_lifecycle_expire_password

Expire the password. Expires the password. Required: id.

create_a_okta_lifecycle_reset_factor

Reset the factors. Resets all factors for the specified user. Required: id.

create_a_okta_lifecycle_unlock

Unlock a user. Unlocks a user with a LOCKED_OUT status or unlocks a user with an ACTIVE status that's blocked from unknown devices. Required: id.

okta_lifecycle_unsuspends_unsuspend_user

Unsuspend a user. Unsuspends a user and returns them to the ACTIVE state. Required: id.

create_a_okta_lifecycle_verify

Verify an event hook. Verifies that the event hook matches the provided eventHookId. Required: event_hook_id.

list_all_okta_linked_objects

List the primary or all of the associated linked object values. Lists either the self link for the primary user or all associated users in the relationship specified by relationshipName. Required: user_id_or_login, relationship_name.

delete_a_okta_linked_object_by_id

Delete a linked object value. Deletes any existing relationship between the associated and primary user. Required: user_id_or_login, relationship_name.

delete_a_okta_log_stream_by_id

Delete a log stream. Deletes a log stream object from your org by ID. Required: id.

create_a_okta_logo

Upload an application logo. Uploads a logo for the app instance. Required: app_id.

delete_a_okta_logo_by_id

Delete the logo. Deletes a Theme logo. Required: brand_id, theme_id.

get_single_okta_mapping_by_id

Retrieve a profile mapping. Retrieves a single profile mapping referenced by its ID. Required: id.

create_a_okta_mark_error

Assign the fulfillment error status to a WebAuthn preregistration factor. Assigns the fulfillment error status to a WebAuthn preregistration factor for a user. Required: user_id, authenticator_enrollment_id.

delete_a_okta_membership_by_id

Delete the memberships for the specified identity source group. Deletes group memberships for the specified identity source group using member external IDs. Required: identity_source_id, group_or_external_id, member_external_id.

get_single_okta_meta_uischema_by_id

Retrieve a UI schema. Retrieves a UI Schema by id. Required: id.

update_a_okta_meta_uischema_by_id

Replace a UI schema. Replaces a UI Schema by id. Required: id.

list_all_okta_methods

List all methods of an authenticator. Lists all methods of an authenticator identified by authenticatorId. Required: authenticator_id.

update_a_okta_method_by_id

Replace an authenticator method. Replaces a method of methodType for an authenticator identified by authenticatorId. Required: authenticator_id, method_type.

create_a_okta_oauth_2_callback

Verify the provisioning connection. Verifies the OAuth 2.0-based connection as part of the OAuth 2.0 consent flow. Required: app_name, app_id.

create_a_okta_okta_communication_opt_out

Opt out of Okta user communication emails. Opts out all users of this org from Okta communication emails

update_a_okta_okta_personal_settings_edit_feature_by_id

Replace the Okta Personal admin settings. Replaces Okta Personal admin settings in a Workforce org

list_all_okta_okta_support_cases

List all Okta Support cases. Lists all Okta Support cases that the requesting principal has permission to view

delete_a_okta_org_captcha_by_id

Delete the org-wide CAPTCHA settings. Deletes the CAPTCHA settings object for your organization

update_a_okta_org_contact_by_id

Replace the contact type user. Replaces the user associated with the specified contact type. Required: contact_type.

create_a_okta_owner

Assign a group owner. Assigns a group owner. Required: group_id.

delete_a_okta_permission_by_id

Delete a custom role permission. Deletes a permission (identified by permissionType) from a custom role. Required: role_id_or_label, permission_type.

get_single_okta_policy_by_id

Retrieve a policy. Retrieves a policy. Required: id.

create_a_okta_policy

Create a policy. Creates a policy. Required: auth_server_id.

update_a_okta_policy_by_id

Replace a policy. Replaces the properties of a policy identified by policyId. Required: id.

delete_a_okta_policy_by_id

Delete a policy. Deletes a policy. Required: id.

okta_policies_bulk_update

Assign an app sign-in policy. Assigns an app to an app sign-in policy, identified by policyId. Required: app_id, policy_id.

okta_policies_clone

Clone an existing policy. Clones an existing policy. Required: policy_id.

create_a_okta_policies_simulate

Create a policy simulation. Creates a policy or policy rule simulation.

list_all_okta_principal_rate_limits

List all principal rate limits. Lists all Principal Rate Limit entities considering the provided parameters

get_single_okta_principal_rate_limit_by_id

Retrieve a principal rate limit. Retrieves a principal rate limit entity by principalRateLimitId. Required: id.

update_a_okta_principal_rate_limit_by_id

Replace a principal rate limit. Replaces a principal rate limit entity by principalRateLimitId. Required: id.

list_all_okta_privacy_okta_supports

Retrieve the Okta Support settings. Retrieves Okta Support Settings for your org

get_single_okta_privileged_access_okta_service_account_by_id

Retrieve an Okta managed user account. Retrieves an Okta managed user account specified by ID. Required: id.

create_a_okta_privileged_access_service_account

Create an app service account. Creates a new app service account for managing an app account

delete_a_okta_privileged_access_service_account_by_id

Delete an app service account. Deletes an app service account specified by ID. Required: id.

list_all_okta_push_providers

List all push providers. Lists all push providers

update_a_okta_push_provider_by_id

Replace a push provider. Replaces a push provider by pushProviderId. Required: id.

create_a_okta_query

Submit a query for AD Group. Submits a query search on the on-premises agent to asynchronously fetch specific Active Directory (AD) attributes for a group. Required: app_instance_id, group_id.

list_all_okta_rate_limit_settings_admin_notifications

Retrieve the rate limit admin notification settings. Retrieves the currently configured Rate Limit Admin Notification Settings

list_all_okta_rate_limit_settings_per_clients

Retrieve the per-client rate limit settings. Retrieves the currently configured Per-Client Rate Limit Settings

create_a_okta_realm_assignment

Create a realm assignment. Creates a new realm assignment

update_a_okta_realm_assignment_by_id

Replace a realm assignment. Replaces a realm assignment. Required: id.

list_all_okta_realm_assignments_operations

List all realm assignment operations. Lists all realm assignment operations.

list_all_okta_realms

List all realms. Lists all realms.

get_single_okta_realm_by_id

Retrieve a realm. Retrieves a realm. Required: id.

create_a_okta_resource

Add a resource set resource with conditions. Adds a resource with conditions for a resource set. Required: resource_set_id_or_label.

update_a_okta_resource_by_id

Replace the resource set resource conditions. Replaces the conditions of a resource identified by resourceId in a resource set. Required: resource_set_id_or_label, id.

okta_resources_bulk_update

Add more resources to a resource set. Adds more resources to a resource set. Required: resource_set_id_or_label.

create_a_okta_resourceservercredentials_key

Add a JSON Web Key. Adds a new JSON Web Key to the custom authorization servers JSON web keys. Required: auth_server_id.

delete_a_okta_resourceservercredentials_key_by_id

Delete a Custom Authorization Server Public JSON Web Key. Deletes a custom authorization server public JSON web key by key id. Required: auth_server_id, key_id.

update_a_okta_risk_by_id

Upsert the user's risk. Upserts (creates or updates) the user risk object for a user ID. Required: user_id.

delete_a_okta_rule_by_id

Delete a policy rule. Deletes a Policy Rule defined in the specified Custom Authorization Server and Policy. Required: auth_server_id, policy_id, id.

create_a_okta_schemas_group

Update the group profile schema. Updates the group profile schema.

get_single_okta_schemas_user_by_id

Retrieve a user schema. Retrieves the schema for a user type. Required: id.

list_all_okta_scopes

List all custom token scopes. Lists all custom token scopes. Required: auth_server_id.

update_a_okta_scope_by_id

Replace a custom token scope. Replaces a custom token scope. Required: auth_server_id, id.

list_all_okta_security_events_providers

List all security events providers. Lists all security events provider instances

delete_a_okta_security_events_provider_by_id

Delete a security events provider. Deletes a security events provider instance specified by id. Required: id.

create_a_okta_session

Create an identity source session. Creates an identity source session for the given identity source instance. Required: identity_source_id.

list_all_okta_settings

Retrieve the email template settings. Retrieves an email template's settings. Required: brand_id, template_name.

update_a_okta_sign_in_customized_by_id

Replace the customized sign-in page. Replaces the customized sign-in page. Required: brand_id.

list_all_okta_sign_in_previews

Retrieve the preview sign-in page preview. Retrieves the preview sign-in page. Required: brand_id.

update_a_okta_sign_in_preview_by_id

Replace the preview sign-in page. Replaces the preview sign-in page. Required: brand_id.

delete_a_okta_sign_in_preview_by_id

Delete the preview sign-in page. Deletes the preview sign-in page. Required: brand_id.

list_all_okta_sign_out_customizeds

Retrieve the sign-out page settings. Retrieves the sign-out page settings. Required: brand_id.

list_all_okta_ssf_streams

Retrieve the SSF stream configuration(s). Retrieves either a list of all known SSF stream configurations or the individual configuration if specified by ID.

okta_ssf_streams_partial_update

Update an SSF stream. Updates properties for an existing SSF stream configuration.

create_a_okta_start_import

Start the import from the identity source. Starts the import from the identity source described by the uploaded bulk operations. Required: identity_source_id, session_id.

list_all_okta_stream_status

Retrieve the SSF stream status. Retrieves the status of an SSF stream.

list_all_okta_targets

Retrieve a role target by assignment type. Retrieves all role targets for an APP_ADMIN, USER_ADMIN, HELP_DESK_ADMIN, or GROUP_MEMBERSHIP_ADMIN role assignment to an admin user by user or group assignment type. Required: user_id, role_id_or_encoded_role_id.

list_all_okta_telephony_providers

List all custom telephony providers. Lists all custom telephony providers that are configured in your org

get_single_okta_telephony_provider_by_id

Retrieve a custom telephony provider. Retrieves the details of a custom telephony provider by its ID. Required: id.

create_a_okta_telephony_provider

Create a custom telephony provider. Creates a custom telephony provider with the provided credentials

update_a_okta_telephony_provider_by_id

Update a custom telephony provider credential. Updates the credentials of an existing custom telephony provider. Required: id.

list_all_okta_templates_emails

List all email templates. Lists all supported email templates. Required: brand_id.

update_a_okta_templates_sm_by_id

Replace an SMS template. Replaces the SMS Template . Required: id.

okta_templates_sms_replace

Update an SMS template. Updates only some of the SMS Template properties: * All properties within the custom SMS Template that have values are updated. Required: id.

update_a_okta_theme_by_id

Replace a theme. Replaces a theme for a brand. Required: brand_id, id.

create_a_okta_threats_configuration

Update the ThreatInsight configuration. Updates the ThreatInsight configuration for the org

list_all_okta_trusted_origins

List all trusted origins. Lists all trusted origins

create_a_okta_trusted_origin

Create a trusted origin. Creates a trusted origin

create_a_okta_types_user

Create a user type. Creates a new user type.

create_a_okta_unsubscribe

Unsubscribe a role from a specific notification type. Unsubscribes a Role from a specified notification type. Required: role_ref, notification_type.

create_a_okta_update

Create an agent pool update. Creates an agent pool update. Required: pool_id.

delete_a_okta_update_by_id

Delete an agent pool update. Deletes agent pool update. Required: pool_id, id.

okta_updates_pause

Pause an agent pool update. Pauses a running or queued agent pool update. Required: pool_id, id.

okta_updates_resume

Resume an agent pool update. Resumes a running or queued agent pool update. Required: pool_id, id.

okta_updates_stop

Stop an agent pool update. Stops an agent pool update. Required: pool_id, id.

okta_updates_replace

Update an agent pool update by ID. Updates an agent pool update instance and returns the latest agent pool update. Required: pool_id, id.

list_all_okta_updates_settings

Retrieve an agent pool update's settings. Retrieves the current state of the agent pool update instance settings. Required: pool_id.

create_a_okta_updates_setting

Update an agent pool update settings. Updates an agent pool update instance settings. Required: pool_id.

list_all_okta_user_authenticator_enrollments

List all authenticator enrollments. Lists all authenticator enrollments of the specified user. Required: user_id.

delete_a_okta_user_authenticator_enrollment_by_id

Delete an authenticator enrollment. Deletes an existing enrollment for the specified user. Required: user_id, id.

list_all_okta_values

List all values for a governance bundle entitlement. Lists all entitlement values that are specific to a governance bundle entitlement. Required: bundle_id, entitlement_id.

create_a_okta_webauthn_registration_enroll

Enroll a preregistered WebAuthn factor. Enrolls a preregistered WebAuthn factor.

create_a_okta_webauthn_registration_initiate_fulfillment_request

Generate a fulfillment request. Generates a fulfillment request by sending a WebAuthn preregistration event to start the flow.

create_a_okta_webauthn_registration_send_pin

Send a PIN to user. Sends the decoded PIN for the specified WebAuthn preregistration enrollment.

list_all_okta_well_known_assetlinks_jsons

Retrieve the customized assetlinks.json URI content. Retrieves the content of the assetlinks.json well-known URI

list_all_okta_well_known_okta_organizations

Retrieve the Org metadata. Retrieves the org metadata, which includes the org ID, configured custom domains, and authentication pipeline

list_all_okta_well_known_ssf_configurations

Retrieve the SSF transmitter metadata. Retrieves SSF transmitter configuration metadata.

get_single_okta_yubikey_token_token_by_id

Retrieve a YubiKey OTP token. Retrieves the specified YubiKey OTP token by id. Required: id.

update_a_okta_zone_by_id

Replace a network zone. Replaces a Network Zone by zoneId. Required: id.

list_all_okta_group_role_catalog_app_targets

List all group role app targets. Lists all app targets for an APP_ADMIN role assignment to a group. Required: group_id, role_assignment_id.

okta_group_role_catalog_app_targets_delete_instance

Unassign a group role app instance target. Unassigns an app instance target from an APP_ADMIN role assignment to a group . Required: group_id, role_assignment_id, app_name, app_id.

update_a_okta_user_role_catalog_app_target_by_id

Assign all apps as target to admin role. Assigns all apps as target to an APP_ADMIN role. Required: user_id, role_assignment_id.

okta_user_role_catalog_app_targets_update_instance

Assign an admin role app instance target. Assigns an app instance target to an APP_ADMIN role assignment to an admin user. Required: user_id, role_assignment_id, app_name, app_id.

delete_a_okta_user_role_catalog_app_target_by_id

Unassign an admin role app target. Unassigns an OIN app target from an APP_ADMIN role assignment to an admin user. Required: user_id, role_assignment_id, app_name.

list_all_okta_oauth_client_role_catalog_app_targets

List all client role app targets. Lists all OIN app targets for an APP_ADMIN role that's assigned to a client (by clientId). Required: client_id, role_assignment_id.

okta_oauth_client_role_catalog_app_targets_update_instance

Assign a client role app instance target. Assigns an app instance target to an APP_ADMIN role assignment to a client. Required: client_id, role_assignment_id, app_name, app_id.

list_all_okta_app_certificate_csrs

List all certificate signing requests. Lists all certificate signing requests for an app. Required: app_id.

delete_a_okta_app_certificate_csr_by_id

Revoke a certificate signing request. Revokes a certificate signing request and deletes the key pair from the app. Required: app_id, id.

list_all_okta_idp_certificate_csrs

List all certificate signing requests. Lists all certificate signing requests (CSRs) for an identity provider (IdP). Required: idp_id.

get_single_okta_app_jwk_by_id

Retrieve an OAuth 2.0 client JSON Web Key. Retrieves an OAuth 2.0 client JSON Web Key by keyId. Required: app_id, id.

create_a_okta_app_jwk

Add a JSON Web Key. Adds a new JSON Web Key to the clients JSON Web Keys. Required: app_id.

delete_a_okta_app_jwk_by_id

Delete an OAuth 2.0 client JSON Web Key. Deletes an OAuth 2.0 Client JSON Web Key by keyId. Required: app_id, id.

list_all_okta_app_credentials_keys

List all key credentials. Lists all key credentials for an app. Required: app_id.

get_single_okta_app_credentials_key_by_id

Retrieve a key credential. Retrieves a specific application key credential by kid. Required: app_id, id.

okta_app_credentials_keys_clone

Clone a key credential. Clones an X.509 certificate for an application key credential from a source app to a target app. Required: app_id, id.

get_single_okta_authorization_server_credentials_key_by_id

Retrieve an authorization server key. Retrieves an Authorization Server Key specified by the keyId. Required: auth_server_id, id.

list_all_okta_org_idp_credentials_keys

List all IdP key credentials. Lists all identity provider (IdP) key credentials

get_single_okta_org_idp_credentials_key_by_id

Retrieve an IdP key credential. Retrieves a specific identity provider (IdP) key credential by kid. Required: id.

create_a_okta_org_idp_credentials_key

Create an IdP key credential. Creates a new X.509 certificate credential in the identity provider (IdP) key store .

list_all_okta_idp_credentials_keys

List all signing key credentials for IdP. Lists all signing key credentials for an identity provider (IdP). Required: idp_id.

get_single_okta_idp_credentials_key_by_id

Retrieve a signing key credential for IdP. Retrieves a specific identity provider (IdP) key credential by kid. Required: idp_id, id.

okta_idp_credentials_keys_clone

Clone a signing key credential for IdP. Clones an X.509 certificate for an identity provider (IdP) signing key credential from a source IdP to target IdP . Required: idp_id, id.

create_a_okta_app_credentials_secret

Create an OAuth 2.0 client secret. Creates an OAuth 2.0 client secret object with a new active client secret. Required: app_id.

delete_a_okta_app_credentials_secret_by_id

Delete an OAuth 2.0 client secret. Deletes an OAuth 2.0 client secret by secretId. Required: app_id, id.

list_all_okta_api_service_credentials_secrets

List all API service integration instance secrets. Lists all client secrets for an API Service Integration instance by apiServiceId. Required: api_service_id.

create_a_okta_api_service_credentials_secret

Create an API service integration instance secret. Creates an API Service Integration instance Secret object with a new active client secret. Required: api_service_id.

get_single_okta_disaster_recovery_status_by_id

Retrieve the disaster recovery status for a domain. Retrieves the failover or failback status for the domain specified in the request path. Required: domain.

get_single_okta_org_feature_by_id

Retrieve a feature. Retrieves a feature by ID. Required: id.

create_a_okta_org_feature

Update a feature lifecycle. Updates a feature's lifecycle status. Required: lifecycle, id.

get_single_okta_app_federated_claim_by_id

Retrieve a federated claim. Retrieves a federated claim by claimId. Required: app_id, claim_id.

okta_user_grants_bulk_delete

Revoke all user grants. Revokes all grants for a specified user. Required: user_id.

create_a_okta_identity_source_group

Create an identity source group. Creates a group in an identity source for the given identity source instance. Required: identity_source_id.

create_a_okta_brand_theme_logo

Upload the logo. Uploads and replaces the logo for the theme. Required: brand_id, theme_id.

create_a_okta_policy_mapping

Map a resource to a policy. Maps a resource to a policy identified by policyId . Required: policy_id.

update_a_okta_authorization_server_policy_by_id

Replace a policy. Replaces a policy. Required: auth_server_id, id.

list_all_okta_org_policies

List all policies. Lists all policies with the specified type

list_all_okta_user_role_governance_resources

Retrieve the user role governance source resources. Retrieves the resources of a governance source (identified by grantId) for a role (identified by roleAssignmentId) that's assigned to a user (identified by userId). Required: user_id, role_assignment_id, grant_id.

get_single_okta_oauth_client_role_by_id

Retrieve a client role. Retrieves a role assignment (identified by roleAssignmentId) for a client app (identified by clientId). Required: client_id, id.

create_a_okta_oauth_client_role

Assign a client role. Assigns a standard role to a client app. Required: client_id.

get_single_okta_policy_rule_by_id

Retrieve a policy rule. Retrieves a policy rule. Required: policy_id, id.

create_a_okta_policy_rule

Create a policy rule. Creates a policy rule . Required: policy_id.

delete_a_okta_policy_rule_by_id

Delete a policy rule. Deletes a policy rule identified by policyId and ruleId. Required: policy_id, id.

get_single_okta_log_stream_schema_by_id

Retrieve the log stream schema for the schema type. Retrieves the schema for a log stream type. Required: log_stream_type.

delete_a_okta_okta_session_by_id

Revoke a session. Revokes the specified session. Required: id.

okta_user_notification_subscriptions_subscribe

Subscribe a user to a specific notification type. Subscribes the current user to a specified notification type. Required: user_id, notification_type.

okta_user_notification_subscriptions_unsubscribe

Unsubscribe a user from a specific notification type. Unsubscribes the current user from a specified notification type. Required: user_id, notification_type.

list_all_okta_group_role_group_targets

List all group role group targets. Lists all group targets for a USER_ADMIN, HELP_DESK_ADMIN, or GROUP_MEMBERSHIP_ADMIN role assignment to a group. Required: group_id, role_assignment_id.

delete_a_okta_group_role_group_target_by_id

Unassign a group role group target. Unassigns a group target from a USER_ADMIN, HELP_DESK_ADMIN, or GROUP_MEMBERSHIP_ADMIN role assignment to a group. Required: group_id, role_assignment_id, target_group_id.

list_all_okta_user_role_group_targets

List all admin role group targets. Lists all group targets for a USER_ADMIN, HELP_DESK_ADMIN, or GROUP_MEMBERSHIP_ADMIN role assignment to an admin user. Required: user_id, role_assignment_id.

delete_a_okta_user_role_group_target_by_id

Unassign an admin role group target. Unassigns a group target from a USER_ADMIN, HELP_DESK_ADMIN, or GROUP_MEMBERSHIP_ADMIN role assignment to an admin user. Required: user_id, role_assignment_id, group_id.

list_all_okta_oauth_client_role_group_targets

List all client role group targets. Lists all group targets for a USER_ADMIN, HELP_DESK_ADMIN, or GROUP_MEMBERSHIP_ADMIN role assignment to a client. Required: client_id, role_assignment_id.

update_a_okta_oauth_client_role_group_target_by_id

Assign a client role group target. Assigns a group target to a USER_ADMIN, HELP_DESK_ADMIN, or GROUP_MEMBERSHIP_ADMIN role assignment to a client app. Required: client_id, role_assignment_id, group_id.

okta_telephony_provider_tests_test

Send a test message from a custom telephony provider. Sends a test message (SMS or call) using the specified custom telephony provider to verify that the provider is configured correctly. Required: custom_telephony_provider_id.

list_all_okta_authorization_server_client_tokens

List all refresh tokens for a client. Lists all refresh tokens issued by an authorization server for a specific Client. Required: auth_server_id, client_id.

okta_authorization_server_client_tokens_bulk_delete

Revoke all refresh tokens for a client. Revokes all refresh tokens for a Client. Required: auth_server_id, client_id.

get_single_okta_user_client_token_by_id

Retrieve a refresh token for a client. Retrieves a refresh token issued for the specified user and client. Required: user_id, client_id, id.

delete_a_okta_user_client_token_by_id

Revoke a token for a client. Revokes the specified refresh and access tokens. Required: user_id, client_id, id.

get_single_okta_user_linked_object_schema_by_id

Retrieve a linked object definition. Retrieves a Linked Object definition. Required: linked_object_name.

list_all_okta_idp_users

List all users for IdP. Lists all the users linked to an identity provider (IdP). Required: idp_id.

create_a_okta_idp_user

Link a user to IdP. Links an Okta user to an existing SAML or social identity provider (IdP). Required: idp_id, id.

delete_a_okta_idp_user_by_id

Unlink a user from IdP. Unlinks the Okta user and the identity provider (IdP) user. Required: idp_id, id.

get_single_okta_brand_well_known_uris_by_id

Retrieve the well-known URI of a specific brand. Retrieves the well-known URI of a specific brand and well-known URI path. Required: brand_id, id.

Okta

Okta tools for your AI agents