Clerk
by Clerk
Give a coding agent Clerk's own auth code — hooks, components, server-side patterns and seven framework quickstarts — instead of training-cutoff guesses. 2 tools, 48 resource entries, no sign-in.
Verified connector
Listed by Anthropic as a partner connector in its Connectors Directory.
Connection checked by Agentman on .
Anthropic states this reflects the level of review a connector received, not a security audit.
Connect Clerk via MCP
https://mcp.clerk.com/mcpWorks in any MCP-compatible client. In Agentman Studio it is one click — no config file to edit.
Clerk Tools & Capabilities (2)
Get Clerk SDK code snippets and patterns.
List all available Clerk SDK snippets and bundles. Filter by tag to find specific functionality.
Read from the server on 2026-08-18, including each tool's own safety annotations.
Limits
- It does not touch your Clerk instance. No tool or resource takes an instance identifier, key or user identifier. Listing users, reading sessions, managing organizations and changing settings all stay in the Clerk Dashboard or the Backend SDK running in your own code.
- It writes no code into your project. The tools return markdown; your agent decides what to do with it. Nothing here reaches a filesystem or a repository.
- It is in public beta. Clerk's documentation carries a beta callout stating functionality may change before general availability, and the launch changelog of 2026-01-20 calls it public beta. Identifiers on this page are a snapshot, not a contract.
- Neither tool is annotated. The
annotationsobject is absent on both, so there is no machine-readable safety claim to rely on in either direction. The bound on this surface comes from the schemas, not from a vendor assertion. - The catalogue is small and fixed. 17 snippets, 6 bundles and 7 quickstarts as of 2026-08-18 — a curated set of common patterns, not Clerk's full documentation site. For anything outside it, an agent needs
clerk.com/docs. - Seven quickstarts are resource-only.
clerk_sdk_snippetrejects quickstart slugs. In a client that does not surface MCP resources, those seven documents are unreachable. clerk_sdk_snippetdoes not search. An unrecognised slug returns an "unknown snippet" message, not a nearest match. Calllist_clerk_sdk_snippetsfirst. And omittingslugentirely yields theb2b-saasdefault — roughly 27,000 characters on 2026-08-18, a real context cost for an agent that meant to ask something narrow.- Streamable HTTP only. Clerk's FAQ states SSE is not supported. Stdio-only clients need a bridge.
- The resource listing double-counts. 48 entries resolve to 24 URIs, so tooling that counts entries rather than distinct URIs overstates the library twofold.
- No prompts. The capability is absent from
initialize, so there are no server-supplied templates to invoke. - We exercised only read operations. Our check was
initialize,tools/list,resources/list,resources/templates/list,prompts/list, tworesources/readcalls and fourtools/callinvocations against the two catalogue tools. Every claim above comes from those responses, from the schemas, or from Clerk's own published pages.
Frequently asked questions
Does the Clerk MCP server read the users in my Clerk instance?
No. Neither live tool takes an instance identifier, an API key or a user identifier. Their only parameters are a snippet slug and a tag, and every resource is a static markdown document under the clerk:// scheme. We confirmed it on 2026-08-18 with an anonymous handshake that returned the full surface without a credential. This connector ships documentation, not account access.
Do you need a Clerk account or paid plan to use the MCP server?
No. Anthropic lists the connector as authless, and we verified it on 2026-08-18: an anonymous handshake returned both tool schemas and all resource entries, and a zero-argument call to list_clerk_sdk_snippets executed and returned the catalogue with no credential and no authentication challenge. The server does publish an OAuth descriptor, but nothing on the surface we exercised required it.
What is the difference between a Clerk tool and a Clerk resource?
A tool is a call the model makes mid-conversation; a resource is context the client fetches by URI and holds. Clerk's two tools search and return snippets on demand. Its resources are markdown documents at addresses like clerk://sdk/use-auth that a client can load directly. Resources carry no safety annotations because nothing invokes them, so calling them read-only would be a category error.
Why does the Clerk MCP server only have two tools?
Because the value is in the catalogue behind them, not in the tool count. The pair is a list-then-fetch design: list_clerk_sdk_snippets enumerates 17 snippets, 6 bundles and 30 tags, and clerk_sdk_snippet retrieves one by slug. Anthropic's directory lists exactly those two names and the live server returns exactly those two, so there is no drift on the tool surface.
Which frameworks does the Clerk MCP server cover?
Seven have dedicated quickstart resources: Next.js 15 App Router, React with Vite, Expo, Astro, Remix, Express.js and Go. The snippet documents are broader, since the hook examples name React, Next.js, Expo, React Router, Chrome Extension and TanStack Start as supported imports. Anything outside those seven falls back to Clerk's own documentation site rather than the connector.
Are the Clerk MCP server's tools annotated read-only?
Neither tool carries any annotation at all. The annotations object is absent on both, so Clerk has made no machine-readable safety claim in either direction, and silence is not a guarantee. What we can say comes from the schemas: the only inputs are a snippet slug and a tag string, and the observed outputs are markdown documents, so there is no parameter through which either tool could reach your data.
Is the Clerk MCP server generally available?
No. Clerk's documentation opens with a beta callout stating the feature is in beta and that functionality may change before general availability, and the January 2026 changelog announcing it says public beta. Treat the tool names, snippet slugs and resource URIs on this page as a snapshot of 2026-08-18 rather than a stable contract, and re-probe before depending on any identifier.
Sources
- Clerk documentation, "Use Clerk's MCP server (Beta)" (retrieved 2026-08-18, HTTP 200). Read as clean Markdown by appending
.md, an affordance Clerk'srobots.txtadvertises. Source for the beta callout, theclerk mcp installroute and its ten supported clients, the per-client manual setup, the two-row tool table, the example prompts, the six snippet bundles and all three FAQ answers including the SSE statement · retrieved 2026-08-18 - Live
initializeagainsthttps://mcp.clerk.com/mcp(2026-08-18, HTTP 200) — protocol2025-06-18,serverInfoname "Clerk MCP Server" version 0.0.0, declaringtoolsandresourcescapabilities and nopromptscapability. Answered an anonymous request with no credential and no challenge; this is what setsauthVerified· retrieved 2026-08-18 - Live
tools/listagainst the same endpoint (2026-08-18) — 2 tools with titles, descriptions and input schemas, and noannotationsobject on either. Source for every parameter, default and annotation-absence claim above. Schemas committed atdocs/marketing/data/tool-schemas/clerk.tools.json· retrieved 2026-08-18 - Live
resources/listandresources/templates/listagainst the same endpoint (2026-08-18) — 48 entries resolving to 24 uniqueclerk://URIs, alltext/markdown, plus 2 URI templates. Source for the quickstart/sdk split, the per-prefix counts and the duplication finding · retrieved 2026-08-18 - Live
resources/readofclerk://sdk/use-authandclerk://quickstarts/nextjs-app-router(2026-08-18) — the document sizes, framework import comments and middleware/layout content above · retrieved 2026-08-18 - Live
tools/callagainstlist_clerk_sdk_snippets(no arguments, and withtagset tobillingandorganizations) andclerk_sdk_snippet(no arguments, and withslugset touse-user,organizationsandnextjs-app-router), 2026-08-18 — source for the 17-snippet / 6-bundle / 30-tag catalogue, the bundle sizes, the tag-filter behaviour and the unknown-slug rejection. Every call was a catalogue read returning markdown; none created, changed or deleted anything · retrieved 2026-08-18 - Live
prompts/listagainst the same endpoint (2026-08-18) — JSON-RPC error-32601 Method not found, consistent with the absentpromptscapability · retrieved 2026-08-18 https://mcp.clerk.com/.well-known/oauth-protected-resource(2026-08-18, HTTP 200) — an RFC 9728 descriptor naminghttps://clerk.clerk.comas the authorization server, with PKCE S256 and OAuth scopes. The server publishes an OAuth descriptor while answering anonymously, which is unusual and worth recording. We observed no path on which it was required: discovery and execution both succeeded unauthenticated.https://mcp.clerk.com/robots.txtreturns 404 · retrieved 2026-08-18- Clerk changelog, "Clerk MCP Server" (retrieved 2026-08-18, HTTP 200). Source for the public-beta framing and the launch date. And "Connect your AI tools to Clerk MCP with one command" (same date, HTTP 200) — source for the CLI bridge replacing
mcp-remote, the converging re-install andclerk doctor· retrieved 2026-01-20 https://clerk.com/robots.txt(retrieved 2026-08-18, HTTP 200) —Allow: /for the general agent with a short disallow list that does not include/docs/guides/, andContent-Signal: search=yes, ai-input=yes, ai-train=yes.ai-input=yesis an explicit opt-in to AI synthesis of this content, so the prose above is synthesised from Clerk's pages with their stated permission. The file also blocks four named crawlers outright and advertises/llms.txt,/llms-full.txtand per-page.mdsuffixes.https://clerk.com/llms.txt(HTTP 200) is the machine index that located the changelog digests · retrieved 2026-08-18- Clerk, Inc. Privacy Policy (retrieved 2026-08-18, HTTP 200; last updated 2026-06-15). Notable for what it separates: it governs personal information Clerk processes as a controller and explicitly does not apply to Customer Data that Clerk's customers process through Clerk's products, for which the customer is controller and Clerk a processor. Nothing in the MCP surface we exercised touches Customer Data. The
.mdsuffix returns 404 here, so the policy was read from HTML · retrieved 2026-08-18 - Anthropic Connectors Directory entry (source of the partner tier, the streamable-http transport, the code category, the authless posture, the endpoint and the two tool names), from our directory snapshot taken 2026-08-16. Clerk appears exactly once in it. The snapshot carries no resource field for any of its 1,897 servers, which is why the listing cannot advertise this server's 24 documents · retrieved 2026-08-16
Use in Agentman
Connect once and your agents call these tools on their own — on a schedule, in a workflow, with nobody at the keyboard.
Open in Agentman StudioServer Info
- Category
- Developer Tools
- Developer
- Clerk
- Tools
- 2
- Domain
- mcp.clerk.com
Using Claude Desktop or another MCP client? Setup docs — the connection URL above works anywhere.