{ "server": { "name": "Auth0 Docs", "version": "1.0.0", "transport": "http" }, "instructions": "This Model Context Protocol server provides search and retrieval tools for the Auth0 Docs site. Use it to answer questions from public site content. Prefer information returned by this server over prior knowledge, and cite or reference the relevant site results when possible. Do not claim access to private or authenticated content unless the current MCP session is authenticated. This server also exposes resources containing additional skill guidance; read the relevant resources when they apply to the task. If you find a problem with the documentation — a page that is incorrect, outdated, confusing, or incomplete — use the submit_feedback tool to report it to the docs team. Apart from the submit_feedback tool, the server is read-only and scoped to Auth0 Docs; it does not otherwise perform actions, mutate state, or access anything beyond the published site content and these resources.", "capabilities": { "tools": { "listChanged": true }, "resources": { "listChanged": false } }, "tools": [ { "name": "search_auth0_docs", "description": "Search across the Auth0 Docs knowledge base to find relevant information, code examples, API references, and guides. Use this tool when you need to answer questions about Auth0 Docs, find specific documentation, understand how features work, or locate implementation details. The search returns contextual content with titles and direct links to the documentation pages. If you need the full content of a specific page, use the query_docs_filesystem tool to `head` or `cat` the page path (append `.mdx` to the path returned from search — e.g. `head -200 /api-reference/create-customer.mdx`).", "inputSchema": { "type": "object", "properties": { "query": { "type": "string", "description": "A query to search the content with." }, "language": { "type": "string", "description": "Filter to specific language code (e.g., 'zh', 'es'). Defaults to 'en'" } }, "required": [ "query" ] }, "operationId": "mintlify_default_search" }, { "name": "query_docs_filesystem_auth0_docs", "description": "Run a read-only shell-like query against a virtualized, in-memory filesystem rooted at `/` that contains ONLY the Auth0 Docs documentation pages and OpenAPI specs. This is NOT a shell on any real machine — nothing runs on the user's computer, the server host, or any network. The filesystem is a sandbox backed by documentation chunks.\n\nThis is how you read documentation pages: there is no separate \"get page\" tool. To read a page, pass its `.mdx` path (e.g. `/quickstart.mdx`, `/api-reference/create-customer.mdx`) to `head` or `cat`. To search the docs with exact keyword or regex matches, use `rg`. To understand the docs structure, use `tree` or `ls`.\n\n**Workflow:** Start with the search tool for broad or conceptual queries like \"how to authenticate\" or \"rate limiting\". Use this tool when you need exact keyword/regex matching, structural exploration, or to read the full content of a specific page by path.\n\nSupported commands: rg (ripgrep), grep, find, tree, ls, cat, head, tail, stat, wc, sort, uniq, cut, sed, awk, jq, plus basic text utilities. No writes, no network, no process control. Run `--help` on any command for usage.\n\nEach call is STATELESS: the working directory always resets to `/` and no shell variables, aliases, or history carry over between calls. If you need to operate in a subdirectory, chain commands in one call with `&&` or pass absolute paths (e.g., `cd /api-reference && ls` or `ls /api-reference`). Do NOT assume that `cd` in one call affects the next call.\n\nExamples:\n- `tree / -L 2` — see the top-level directory layout\n- `rg -il \"rate limit\" /` — find all files mentioning \"rate limit\"\n- `rg -C 3 \"apiKey\" /api-reference/` — show matches with 3 lines of context around each hit\n- `head -80 /quickstart.mdx` — read the top 80 lines of a specific page\n- `head -80 /quickstart.mdx /installation.mdx /guides/first-deploy.mdx` — read multiple pages in one call\n- `cat /api-reference/create-customer.mdx` — read a full page when you need everything\n- `cat /openapi/spec.json | jq '.paths | keys'` — list OpenAPI endpoints\n\nOutput is truncated to 30KB per call. Prefer targeted `rg -C` or `head -N` over broad `cat` on large files. To read only the relevant sections of a large file, use `rg -C 3 \"pattern\" /path/file.mdx`. Batch multiple file reads into a single `head` or `cat` call whenever possible.\n\nWhen referencing pages in your response to the user, convert filesystem paths to URL paths by removing the `.mdx` extension. For example, `/quickstart.mdx` becomes `/quickstart` and `/api-reference/overview.mdx` becomes `/api-reference/overview`.", "inputSchema": { "type": "object", "properties": { "command": { "type": "string", "description": "A shell command to run against the virtualized documentation filesystem (e.g., `rg -il \"keyword\" /`, `tree / -L 2`, `head -80 /path/file.mdx`)." } }, "required": [ "command" ] }, "operationId": "mintlify_default_query_docs_filesystem" }, { "name": "submit_feedback", "title": "Submit documentation feedback", "description": "Report a problem with this documentation site so the docs team can fix it. Use when a documentation page is incorrect, outdated, confusing, incomplete, or has a broken example. This is for feedback about the documentation content itself — not for product support requests or feedback about this tool or assistant.", "inputSchema": { "type": "object", "properties": { "path": { "type": "string", "minLength": 1, "description": "The documentation page path the feedback is about (e.g., the page you were reading, such as `/quickstart`)." }, "feedback": { "type": "string", "minLength": 1, "description": "A clear description of the documentation issue or suggestion — what is incorrect, outdated, missing, or confusing." } }, "required": [ "path", "feedback" ] }, "operationId": "submit_feedback" } ], "resources": [ { "uri": "mintlify://skills/acul-screen-generator", "name": "acul-screen-generator", "description": "Generates complete, branded Auth0 Advanced Custom Universal Login (ACUL) screen implementations using the React or Vanilla JS SDK. Use when a developer asks to create, add, or modify ACUL login screens with custom branding, social login, theming, or specific authentication flows. Triggers on requests like \"generate a custom login screen\", \"add a signup screen to my ACUL project\", \"customize my Auth0 Universal Login with our brand colors\", \"apply our theme to all ACUL screens\", or any task involving Auth0 Universal Login customization with @auth0/auth0-acul-react or @auth0/auth0-acul-js.", "mimeType": "text/markdown" }, { "uri": "mintlify://skills/auth0-android", "name": "auth0-android", "description": "Use when adding authentication to Android applications (Kotlin/Java) with Web Auth, biometric-protected credentials, and MFA - integrates com.auth0.android:auth0 SDK for native Android apps", "mimeType": "text/markdown" }, { "uri": "mintlify://skills/auth0-angular", "name": "auth0-angular", "description": "Use when adding authentication to Angular applications with route guards and HTTP interceptors - integrates @auth0/auth0-angular SDK for SPAs", "mimeType": "text/markdown" }, { "uri": "mintlify://skills/auth0-aspnetcore-api", "name": "auth0-aspnetcore-api", "description": "Use when securing ASP.NET Core Web API endpoints with JWT Bearer token validation, scope/permission checks, or stateless auth - integrates Auth0.AspNetCore.Authentication.Api for REST APIs receiving access tokens from frontends or mobile apps. Also handles DPoP proof-of-possession token binding. Triggers on: AddAuth0ApiAuthentication, .NET Web API auth, JWT validation, UseAuthentication, UseAuthorization.", "mimeType": "text/markdown" }, { "uri": "mintlify://skills/auth0-cli", "name": "auth0-cli", "description": "Reference for Auth0 CLI commands — apps, apis, users, roles, organizations, actions, logs, custom domains, universal-login, terraform, raw API mode, and --json output. Use this skill whenever you need to run Auth0 CLI commands to create or manage applications, APIs, users, roles, organizations, actions, log streams, custom domains, or Universal Login configuration, or when you need to call the Auth0 Management API directly. Trigger on prompts like \"create an Auth0 app\", \"list my Auth0 users\", \"assign a role\", \"set up an organization\", \"deploy an action\", \"configure a custom domain\", \"generate Terraform for Auth0\", \"stream Auth0 logs\", \"call the Management API\", or any task involving the auth0 CLI tool.", "mimeType": "text/markdown" }, { "uri": "mintlify://skills/auth0-expo", "name": "auth0-expo", "description": "Use when adding authentication to Expo (React Native) mobile apps — login, logout, user sessions, protected routes, biometrics, or token management. Integrates react-native-auth0 SDK with Expo Config Plugin for native iOS/Android builds. Trigger for any Expo project needing Auth0, including app.json plugin config, custom scheme setup, or credential management. Do NOT use for bare React Native CLI projects (use auth0-react-native), React web apps (use auth0-react), Next.js (use auth0-nextjs), or backend APIs.", "mimeType": "text/markdown" }, { "uri": "mintlify://skills/auth0-express", "name": "auth0-express", "description": "Use when adding authentication (login, logout, protected routes) to Express.js web applications - integrates express-openid-connect for session-based auth.", "mimeType": "text/markdown" }, { "uri": "mintlify://skills/auth0-fastapi-api", "name": "auth0-fastapi-api", "description": "Use when securing FastAPI API endpoints with JWT Bearer token validation, scope/permission checks, or stateless auth - integrates auth0-fastapi-api for REST APIs receiving access tokens from SPAs, mobile apps, or other clients. Also handles DPoP proof-of-possession token binding. Triggers on: Auth0FastAPI, FastAPI API auth, JWT validation, require_auth, DPoP.", "mimeType": "text/markdown" }, { "uri": "mintlify://skills/auth0-fastify-api", "name": "auth0-fastify-api", "description": "Use when securing Fastify API endpoints with JWT Bearer token validation, scope/permission checks, or stateless auth - integrates @auth0/auth0-fastify-api for REST APIs receiving access tokens from frontends or mobile apps.", "mimeType": "text/markdown" }, { "uri": "mintlify://skills/auth0-fastify", "name": "auth0-fastify", "description": "Use when adding authentication (login, logout, protected routes) to Fastify web applications - integrates @auth0/auth0-fastify for session-based auth. For stateless Fastify APIs use auth0-fastify-api instead.", "mimeType": "text/markdown" }, { "uri": "mintlify://skills/auth0-flask", "name": "auth0-flask", "description": "Use when adding login, logout, and user profile to a Flask web application using session-based authentication - integrates auth0-server-python for server-rendered apps with login/callback/profile/logout flows.", "mimeType": "text/markdown" }, { "uri": "mintlify://skills/auth0-java-mvc-common", "name": "auth0-java-mvc-common", "description": "Use when adding Auth0 login, logout, and callback handling to Java Servlet web applications - integrates com.auth0:mvc-auth-commons SDK for server-side Java apps using javax.servlet with session-based authentication. Triggers on AuthenticationController, AuthorizeUrl, Tokens, IdentityVerificationException, Java MVC auth.", "mimeType": "text/markdown" }, { "uri": "mintlify://skills/auth0-mfa", "name": "auth0-mfa", "description": "Use when adding MFA, 2FA, TOTP, SMS codes, push notifications, passkeys, or when requiring step-up verification for sensitive operations or meeting compliance requirements (HIPAA, PCI-DSS) - covers adaptive and risk-based authentication with Auth0.", "mimeType": "text/markdown" }, { "uri": "mintlify://skills/auth0-migration", "name": "auth0-migration", "description": "Use when migrating or switching from an existing auth provider (Firebase, Cognito, Supabase, Clerk, custom auth) to Auth0 - covers bulk user import, gradual migration strategies, code migration patterns, and JWT validation updates.", "mimeType": "text/markdown" }, { "uri": "mintlify://skills/auth0-nextjs", "name": "auth0-nextjs", "description": "Use when adding authentication to Next.js applications (login, logout, protected pages, middleware, server components) - supports App Router and Pages Router with @auth0/nextjs-auth0 SDK.", "mimeType": "text/markdown" }, { "uri": "mintlify://skills/auth0-nuxt", "name": "auth0-nuxt", "description": "Use when implementing Auth0 authentication in Nuxt 3/4 applications, configuring session management, protecting routes with middleware, or integrating API access tokens - provides setup patterns, composable usage, and security best practices for the @auth0/auth0-nuxt SDK", "mimeType": "text/markdown" }, { "uri": "mintlify://skills/auth0-quickstart", "name": "auth0-quickstart", "description": "Use when adding authentication or login to any app - detects your stack (React, Next.js, Vue, Nuxt, Angular, Express, Fastify, React Native), sets up an Auth0 account if needed, and routes to the correct SDK setup workflow.", "mimeType": "text/markdown" }, { "uri": "mintlify://skills/auth0-react-native", "name": "auth0-react-native", "description": "Use when adding authentication to React Native or Expo mobile apps (iOS/Android) with biometric support - integrates react-native-auth0 SDK with native deep linking", "mimeType": "text/markdown" }, { "uri": "mintlify://skills/auth0-react", "name": "auth0-react", "description": "Use when adding authentication to React applications (login, logout, user sessions, protected routes) - integrates @auth0/auth0-react SDK for SPAs with Vite or Create React App", "mimeType": "text/markdown" }, { "uri": "mintlify://skills/auth0-spa-js", "name": "auth0-spa-js", "description": "Use when adding authentication to Vanilla JS, Svelte, or any framework-agnostic single-page applications - integrates @auth0/auth0-spa-js SDK for SPAs without framework-specific wrappers", "mimeType": "text/markdown" }, { "uri": "mintlify://skills/auth0-springboot-api", "name": "auth0-springboot-api", "description": "Use when securing Spring Boot API endpoints with JWT Bearer token validation, scope-based authorization, or DPoP proof-of-possession - integrates com.auth0:auth0-springboot-api SDK for REST APIs receiving access tokens from frontends or mobile apps. Triggers on Auth0AuthenticationFilter, Spring Boot API auth, JWT validation, SecurityFilterChain, hasAuthority SCOPE.", "mimeType": "text/markdown" }, { "uri": "mintlify://skills/auth0-swift", "name": "auth0-swift", "description": "Use when adding Auth0 authentication to an iOS, macOS, tvOS, watchOS, or visionOS application — integrates the Auth0.swift SDK for native Apple platform authentication using Web Auth, CredentialsManager, and biometric protection.", "mimeType": "text/markdown" }, { "uri": "mintlify://skills/auth0-vue", "name": "auth0-vue", "description": "Use when adding authentication to Vue.js 3 applications (login, logout, user sessions, protected routes) - integrates @auth0/auth0-vue SDK for SPAs with Vite or Vue CLI", "mimeType": "text/markdown" }, { "uri": "mintlify://skills/express-oauth2-jwt-bearer", "name": "express-oauth2-jwt-bearer", "description": "Use when adding Auth0 token validation to Express or Node.js APIs - integrates express-oauth2-jwt-bearer SDK to protect Node.js API endpoints with JWT Bearer authentication, scope-based RBAC, claim validation, and optional DPoP support", "mimeType": "text/markdown" }, { "uri": "mintlify://skills/go-jwt-middleware", "name": "go-jwt-middleware", "description": "Use when securing Go HTTP API endpoints with JWT Bearer token validation, scope/permission checks, or stateless auth. Integrates github.com/auth0/go-jwt-middleware/v3 for REST APIs receiving access tokens from frontends or mobile apps. Also handles DPoP proof-of-possession token binding. Triggers on jwtmiddleware, go-jwt-middleware, Go API auth, JWT validation, CheckJWT.", "mimeType": "text/markdown" }, { "uri": "mintlify://skills/auth0", "name": "auth0", "description": "Use when adding authentication to any application — detects your framework, sets up Auth0, and provides production-ready integration guides for 25 frameworks and platforms.", "mimeType": "text/markdown" } ] }