Clerk enables AI agents to manage application authentication, user accounts, organizations, sessions, and access permissions, including inspecting user profiles and configuring authentication workflows.
VS Code
Encrypted at rest, isolated from the model
Resolved from an AES-256-GCM vault at the moment of the call and attached to the request — the model never sees the secrets.
Try asking
Get Clerk SDK code snippets and patterns.
List all available Clerk SDK snippets and bundles. Filter by tag to find specific functionality.
Show the connected Clerk account, its active workspace, and the granted scopes (like `clerk whoami`).
Send feedback to the Clerk team about a problem you hit while working with Clerk for the user. Call this when a Clerk task fails, needed a workaround, a Clerk tool returned a confusing or wrong result, documentation was missing, or the user asks you to report a problem. Never include secrets, API keys, tokens, or personal data about end users. Reports are read by the Clerk team and used to improve Clerk.
List the applications in the connected workspace (like `clerk apps list`).
Get one Clerk application that the connected account can access.
Create a new application in the connected workspace (like `clerk apps create`).
Read instance configuration (like `clerk config pull`). Sensitive values are redacted. Pass keys to limit the top-level sections returned.
Read the JSON schema for instance configuration (like `clerk config schema`). Pass keys to limit the top-level sections returned.
Partially update instance configuration (like `clerk config patch`). Use dry_run first to validate without applying.
Replace the entire instance configuration (like `clerk config put`). config must include every top-level key, so start from get_instance_config. Use dry_run first.
List users of an instance (like `clerk users list`). Filters match the Backend API list-users query.
Create a user in an instance (like `clerk users create`). Named fields are merged over body, the raw Backend API create-user request.
List an application's domains, including the DNS records each one needs (dns_targets).
List OAuth providers enabled on the development instance, the credential fields each needs in production, and whether production already has them (the OAuth step of `clerk deploy`).
Create the production instance for an application on a domain you own, cloned from development (the first step of `clerk deploy`). Irreversible; requires confirm: true. Returns the DNS records to add and the next steps.
Read DNS, SSL, and email verification status for an application domain.
Ask Clerk to re-check DNS records for an application domain now, then read status with get_domain_status.
Check for additional tools whenever your task might benefit from specialized capabilities - even if existing tools could work as a fallback.
One endpoint, the same key, whichever client you use.
~/Library/Application Support/Claude/claude_desktop_config.json (Mac) · %APPDATA%\Claude\claude_desktop_config.json (Windows)
Replace API_KEY with your own key.
Already have an "mcpServers" section in your config? Just add the server entry inside it.
Discovery, routing, credentials, tool scoping and execution logs all happen at the gateway→connections stay ACTIVE with no work from you
Clerk MCP runs through a gateway that holds the credentials, scopes the access and records every call.
Managed auth, hosted MCP servers, and every Clerk MCP tool your agent needs.
Free to start.
