Stytch
by Stytch
Manage Stytch projects, redirect URLs, email templates, SDK config and API secrets from your AI assistant. 21 tools, OAuth sign-in, and a Read label the directory's own tool list contradicts.
Verified connector
Listed by Anthropic as a partner connector in its Connectors Directory.
Connection checked by Agentman on .
Anthropic states this reflects the level of review a connector received, not a security audit.
Connect Stytch via MCP
https://mcp.stytch.dev/mcpWorks in any MCP-compatible client. In Agentman Studio it is one click — no config file to edit.
Stytch Tools & Capabilities (21)
Tool names from Anthropic's directory listing. This server requires sign-in, so we could not read tool descriptions or parameter schemas.
Frequently asked questions
Is the Stytch MCP connector read-only?
No. Anthropic's directory sets this connector's permissions field to Read, but eleven of the twenty-one tool names in that same listing begin with create, update, delete or set. The directory's own example prompts ask Claude to create a project and configure redirect URLs, so the listing contradicts itself within a single entry.
Does createSecret return the actual secret value to the AI assistant?
Yes. Stytch's OpenAPI specification for the create endpoint states the response contains the full secret value, which will not be exposed in future Get requests, and its response schema marks that secret string as required. A live Stytch project credential therefore lands in the tool result and in your chat transcript.
Can the Stytch MCP server change my live production project?
Yes, if you grant the broad scopes. Stytch's authorization server advertises manage:api_keys alongside a separate manage:api_keys:test, so a test-only key permission exists as a distinct scope. Every Stytch project ships with one Live and one Test environment, and the tools address environments by slug rather than defaulting to Test.
What OAuth permissions does the Stytch MCP server request?
Eight scopes. Its RFC 9728 descriptor lists openid, email and profile for identity, then admin:projects, manage:api_keys, manage:api_keys:test, manage:project_settings and manage:project_data for the workspace itself. Stytch documents that some MCP clients request everything in scopes_supported as their initial permission set, so review the consent screen.
Does deleting a Stytch secret through the connector break my app immediately?
Yes, if the application is still using it. Stytch's delete endpoint takes a secret ID and returns only a request ID and status code, with no confirmation step or restore path documented. Because reads return only the last four characters, an agent cannot reliably tell which secret an application currently depends on.
Can the connector weaken my password security settings?
Yes. setPasswordStrengthConfig requires three booleans, including check_breach_on_creation and check_breach_on_authentication, and accepts a validation_policy of ZXCVBN or LUDS with a configurable minimum length. Sending a partial configuration can therefore switch off breached-password detection for real end users as a side effect of an unrelated edit.
How many projects and secrets can the connector create?
Stytch caps programmatic creation at 50 projects per workspace, 50 secrets per project, 50 public tokens per project, 100 redirect URLs per project and 100 email templates per project. One event log streaming destination is allowed per project. These are absolute limits on objects that can be created programmatically, not plan tiers.
Which AI clients work with the Stytch MCP server?
Anthropic's directory lists Claude and the Claude API only, not Claude Code or Claude Desktop. Stytch's own documentation walks through Cursor and offers one-click installation for Cursor and VS Code from mcp.stytch.dev. The endpoint is standard streamable HTTP, so any MCP client that completes an OAuth flow can connect.
Sources
- Stytch MCP Server documentation — https://stytch.com/docs/resources/workspace-management/stytch-mcp-server (fetched 2026-08-18; the directory's published
/docs/workspace-management/stytch-mcpURL is a 308 redirect to this canonical path) · retrieved 2026-08-18 - Stytch Programmatic Workspace Actions API overview — https://stytch.com/docs/api-reference/pwa/api/v3/overview (fetched 2026-08-18; the
/docs/resources/workspace-management/pwa-apipath redirects here) · retrieved 2026-08-18 - Stytch PWA API limits — https://stytch.com/docs/api-reference/pwa/api/v3/limits (fetched 2026-08-18) · retrieved 2026-08-18
- Stytch Create Secret / Get All Secrets / Delete Secret reference — https://stytch.com/docs/api-reference/pwa/api/v3/secrets/create-secret (fetched 2026-08-18) · retrieved 2026-08-18
- Stytch Create Project reference — https://stytch.com/docs/api-reference/pwa/api/v3/projects/create-project (fetched 2026-08-18) · retrieved 2026-08-18
- Stytch Set Password Strength Configuration reference — https://stytch.com/docs/api-reference/pwa/api/v3/password-strength-config/set-password-strength-config (fetched 2026-08-18) · retrieved 2026-08-18
- Stytch Set Consumer SDK Configuration reference — https://stytch.com/docs/api-reference/pwa/api/v3/sdk/set-consumer-sdk-config (fetched 2026-08-18) · retrieved 2026-08-18
- Stytch API Keys and environments — https://stytch.com/docs/resources/workspace-management/api-keys (fetched 2026-08-18) · retrieved 2026-08-18
- Stytch Redirect URLs — https://stytch.com/docs/resources/workspace-management/redirect-urls (fetched 2026-08-18) · retrieved 2026-08-18
- Stytch Dashboard Roles and Permissions — https://stytch.com/docs/resources/workspace-management/dashboard-roles-and-permissions (fetched 2026-08-18) · retrieved 2026-08-18
- Stytch MCP authorization overview and OAuth scopes — https://stytch.com/docs/connected-apps/guides/mcp-auth-overview (fetched 2026-08-18) · retrieved 2026-08-18
- Stytch pricing — https://stytch.com/pricing (fetched 2026-08-18) · retrieved 2026-08-18
- Live OAuth descriptor probes against
https://mcp.stytch.dev— 2026-08-18 · retrieved 2026-08-18 - Anthropic connector directory — https://claude.ai/directory/b873d3db-0781-4a3d-9245-9c6213e6d785 (snapshot 2026-08-16) · retrieved 2026-08-16
Use in Agentman
Connect once and your agents call these tools on their own — on a schedule, in a workflow, with nobody at the keyboard.
Open in Agentman StudioServer Info
- Category
- Developer Tools
- Developer
- Stytch
- Tools
- 21
- Domain
- mcp.stytch.dev
Using Claude Desktop or another MCP client? Setup docs — the connection URL above works anywhere.