Kinde MCP by usefulapi

by usefulapi.io · remote · no sign-in to list tools · v1.16.3 · published by io.usefulapi

Users, organizations, roles, permissions, applications and feature flags.

Deletes · 6

Compare Registry entry

23 tools: 6 can delete or cancel things and 17 only read.

Scanned Oct 21, 2026

Deletes or cancels6Claude Code: deny: see these tools
Can't be undone0Claude Code: ask
Changes things0Claude Code: ask
Only reads17Claude Code: allow: see these tools

1 check matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http kinde https://kinde.usefulapi.io/mcp

Findings

Matches of fixed checks, with the text they matched.

1 info

Infokinde_get_business
The description mentions "credentials".
Matched text
description: "...nd timezone. A cheap way to confirm the credentials and audience are right. Kinde: GET /api..."
What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

23 tools

Deletes or cancels 6Removes, cancels or revokes something.Claude Code: deny

kinde_add_users_to_organizationAdd existing users to an organization, optionally with roles and permissions.No findings
Why it is in this group
- The name "kinde_add_users_to_organization" says "add": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Add existing users to an organization, optionally with roles and permissions. Reversible by removing them. Kinde: POST /api/v1/organizations/{org_code}/users.
Annotations the server declares
- title: Add users to an organization
- destructiveHint: true
kinde_create_organizationCreate a new organization (tenant) in the business.No findings
Why it is in this group
- The name "kinde_create_organization" says "create": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Create a new organization (tenant) in the business. Kinde: POST /api/v1/organization.
Annotations the server declares
- title: Create an organization
- destructiveHint: true
kinde_create_permissionCreate a permission that roles and users can hold.No findings
Why it is in this group
- The name "kinde_create_permission" says "create": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Create a permission that roles and users can hold. Kinde: POST /api/v1/permissions.
Annotations the server declares
- title: Create a permission
- destructiveHint: true
kinde_create_roleCreate a role that can then be granted to users.No findings
Why it is in this group
- The name "kinde_create_role" says "create": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Create a role that can then be granted to users. Kinde: POST /api/v1/roles.
Annotations the server declares
- title: Create a role
- destructiveHint: true
kinde_grant_user_permission_in_organizationGive one user a permission within one organization.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Give one user a permission within one organization. Reversible. Kinde: POST /api/v1/organizations/{org_code}/users/{user_id}/permissions.
Annotations the server declares
- title: Grant a user a permission in an organization
- destructiveHint: true
kinde_grant_user_role_in_organizationGive one user a role within one organization.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Give one user a role within one organization. Reversible with kinde_revoke_user_role_in_organization. Kinde: POST /api/v1/organizations/{org_code}/users/{user_id}/roles.
Annotations the server declares
- title: Grant a user a role in an organization
- destructiveHint: true

Only reads 17Looks things up and changes nothing.Claude Code: allow

kinde_get_applicationFetch a single application by id, including its client id and login URLs.No findings
Why it is in this group
- The name "kinde_get_application" says "get": a word for reading.
Description, as the server wrote it
Fetch a single application by id, including its client id and login URLs. Kinde: GET /api/v1/applications/{application_id}.
Annotations the server declares
- title: Get one application
- readOnlyHint: true
kinde_get_businessFetch the Kinde business this token belongs to — its name, industry and timezone.1 finding
Why it is in this group
- The name "kinde_get_business" says "get": a word for reading.
Findings
- Info
  The description mentions "credentials".
  Matched text
  description: "...nd timezone. A cheap way to confirm the credentials and audience are right. Kinde: GET /api..."
  What this check looks for
Description, as the server wrote it
Fetch the Kinde business this token belongs to — its name, industry and timezone. A cheap way to confirm the credentials and audience are right. Kinde: GET /api/v1/business.
Annotations the server declares
- title: Get the business
- readOnlyHint: true
kinde_get_organizationFetch a single organization by its org code.No findings
Why it is in this group
- The name "kinde_get_organization" says "get": a word for reading.
Description, as the server wrote it
Fetch a single organization by its org code. Kinde: GET /api/v1/organization.
Annotations the server declares
- title: Get one organization
- readOnlyHint: true
kinde_get_userFetch a single user by id, optionally expanded with their organizations and identities.No findings
Why it is in this group
- The name "kinde_get_user" says "get": a word for reading.
Description, as the server wrote it
Fetch a single user by id, optionally expanded with their organizations and identities. Kinde: GET /api/v1/user.
Annotations the server declares
- title: Get one user
- readOnlyHint: true
kinde_get_user_permissions_in_organizationList the permissions one user holds in one organization.No findings
Why it is in this group
- The name "kinde_get_user_permissions_in_organization" says "get": a word for reading.
Description, as the server wrote it
List the permissions one user holds in one organization. Kinde: GET /api/v1/organizations/{org_code}/users/{user_id}/permissions.
Annotations the server declares
- title: Get a user's permissions in an organization
- readOnlyHint: true
kinde_get_user_roles_in_organizationList the roles one user holds in one organization — the direct answer to 'what can this person do here?'.No findings
Why it is in this group
- The name "kinde_get_user_roles_in_organization" says "get": a word for reading.
Description, as the server wrote it
List the roles one user holds in one organization — the direct answer to 'what can this person do here?'. Kinde: GET /api/v1/organizations/{org_code}/users/{user_id}/roles.
Annotations the server declares
- title: Get a user's roles in an organization
- readOnlyHint: true
kinde_list_apisList the APIs registered as token audiences.No findings
Why it is in this group
- The name "kinde_list_apis" says "list": a word for reading.
Description, as the server wrote it
List the APIs registered as token audiences. Kinde: GET /api/v1/apis.
Annotations the server declares
- title: List APIs
- readOnlyHint: true
kinde_list_applicationsList the applications registered in the business, with their types.No findings
Why it is in this group
- The name "kinde_list_applications" says "list": a word for reading.
Description, as the server wrote it
List the applications registered in the business, with their types. Kinde: GET /api/v1/applications.
Annotations the server declares
- title: List applications
- readOnlyHint: true
kinde_list_environment_feature_flagsList the feature flags set at the environment level, with their values.No findings
Why it is in this group
- The name "kinde_list_environment_feature_flags" says "list": a word for reading.
Description, as the server wrote it
List the feature flags set at the environment level, with their values. Kinde: GET /api/v1/environment/feature_flags.
Annotations the server declares
- title: List environment feature flags
- readOnlyHint: true
kinde_list_organization_feature_flagsList the feature-flag overrides set for one organization.No findings
Why it is in this group
- The name "kinde_list_organization_feature_flags" says "list": a word for reading.
Description, as the server wrote it
List the feature-flag overrides set for one organization. Kinde: GET /api/v1/organizations/{org_code}/feature_flags.
Annotations the server declares
- title: List an organization's feature flags
- readOnlyHint: true
kinde_list_organization_usersList the users belonging to one organization, optionally filtered by the permissions or roles they hold.No findings
Why it is in this group
- The name "kinde_list_organization_users" says "list": a word for reading.
Description, as the server wrote it
List the users belonging to one organization, optionally filtered by the permissions or roles they hold. Kinde: GET /api/v1/organizations/{org_code}/users.
Annotations the server declares
- title: List an organization's users
- readOnlyHint: true
kinde_list_organizationsList the organizations (tenants) in the business.No findings
Why it is in this group
- The name "kinde_list_organizations" says "list": a word for reading.
Description, as the server wrote it
List the organizations (tenants) in the business. Kinde: GET /api/v1/organizations.
Annotations the server declares
- title: List organizations
- readOnlyHint: true
kinde_list_permissionsList the permissions defined in the business.No findings
Why it is in this group
- The name "kinde_list_permissions" says "list": a word for reading.
Description, as the server wrote it
List the permissions defined in the business. Kinde: GET /api/v1/permissions.
Annotations the server declares
- title: List permissions
- readOnlyHint: true
kinde_list_role_permissionsList the permissions attached to one role.No findings
Why it is in this group
- The name "kinde_list_role_permissions" says "list": a word for reading.
Description, as the server wrote it
List the permissions attached to one role. Kinde: GET /api/v1/roles/{role_id}/permissions.
Annotations the server declares
- title: List a role's permissions
- readOnlyHint: true
kinde_list_rolesList the roles defined in the business.No findings
Why it is in this group
- The name "kinde_list_roles" says "list": a word for reading.
Description, as the server wrote it
List the roles defined in the business. Kinde: GET /api/v1/roles.
Annotations the server declares
- title: List roles
- readOnlyHint: true
kinde_list_subscribersList marketing subscribers.No findings
Why it is in this group
- The name "kinde_list_subscribers" says "list": a word for reading.
Description, as the server wrote it
List marketing subscribers. Kinde: GET /api/v1/subscribers.
Annotations the server declares
- title: List subscribers
- readOnlyHint: true
kinde_list_usersList users in the business, optionally narrowed by email or user id.No findings
Why it is in this group
- The name "kinde_list_users" says "list": a word for reading.
Description, as the server wrote it
List users in the business, optionally narrowed by email or user id. Kinde: GET /api/v1/users.
Annotations the server declares
- title: List users
- readOnlyHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.16.3. Values in angle brackets are yours to fill in.

claude mcp add --transport http kinde https://kinde.usefulapi.io/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__kinde__kinde_get_business",
      "mcp__kinde__kinde_list_users",
      "mcp__kinde__kinde_get_user",
      "mcp__kinde__kinde_list_organizations",
      "mcp__kinde__kinde_get_organization",
      "mcp__kinde__kinde_list_organization_users",
      "mcp__kinde__kinde_get_user_roles_in_organization",
      "mcp__kinde__kinde_get_user_permissions_in_organization",
      "mcp__kinde__kinde_list_roles",
      "mcp__kinde__kinde_list_role_permissions",
      "mcp__kinde__kinde_list_permissions",
      "mcp__kinde__kinde_list_applications",
      "mcp__kinde__kinde_get_application",
      "mcp__kinde__kinde_list_apis",
      "mcp__kinde__kinde_list_environment_feature_flags",
      "mcp__kinde__kinde_list_organization_feature_flags",
      "mcp__kinde__kinde_list_subscribers"
    ],
    "ask": [],
    "deny": [
      "mcp__kinde__kinde_create_organization",
      "mcp__kinde__kinde_add_users_to_organization",
      "mcp__kinde__kinde_grant_user_role_in_organization",
      "mcp__kinde__kinde_grant_user_permission_in_organization",
      "mcp__kinde__kinde_create_role",
      "mcp__kinde__kinde_create_permission"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as kinde. Review it before you use it.

Keep track

Get told when this server's tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/io.usefulapi/kinde/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Anlyon alternative

6 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Compare with other servers for the same product.

Source: MCP Registry · repository. Synced Oct 21, 2026, 19:23 UTC.

For agents: Markdown · JSON · report this listing