Users, organizations, roles, permissions, applications and feature flags. Hosted by usefulapi — connect from Claude, Cursor, or any MCP client.
Team and Enterprise: an Owner adds the connector for the organization first.
Run this command, then run /mcp in Claude Code to log in:
Add to Cursor or add this to ~/.cursor/mcp.json:
{
"mcpServers": {
"kinde": {
"url": "https://kinde.usefulapi.io/mcp"
}
}
}Add to VS Code or add this to .vscode/mcp.json:
{
"servers": {
"kinde": {
"type": "http",
"url": "https://kinde.usefulapi.io/mcp"
}
}
}Other MCP clients (Windsurf, Cline, Zed and more): add the URL as a remote MCP server (Streamable HTTP). The client then opens the login page in your browser. Do not add an Authorization header: see Before you connect.
The login page asks for your Kinde client secret, Kinde client id and Kinde domain (subdomain).
Use an M2M application with the Management API enabled and its scopes granted. The domain is your Kinde subdomain.
Add only the URL. Do not add an Authorization header or an API key to the client config. The server signs you in with OAuth: the login page asks for your Kinde client secret, Kinde client id and Kinde domain (subdomain). If the config has such a header, remove it: some clients then send that header instead of the login token, and every call fails with 401.
Turn on the Kinde connector, then ask in plain words. The AI picks the tools.
| Tool | Type | What it does |
|---|---|---|
kinde_get_business | read | Get the business Fetch the Kinde business this token belongs to — its name, industry and timezone. A cheap way to confirm the credentials and audience are right. Kinde: GET /api/v1/business. |
kinde_list_users | read | List users List users in the business, optionally narrowed by email or user id. Kinde: GET /api/v1/users. |
kinde_get_user | read | Get one user Fetch a single user by id, optionally expanded with their organizations and identities. Kinde: GET /api/v1/user. |
kinde_list_organizations | read | List organizations List the organizations (tenants) in the business. Kinde: GET /api/v1/organizations. |
kinde_get_organization | read | Get one organization Fetch a single organization by its org code. Kinde: GET /api/v1/organization. |
kinde_list_organization_users | read | List an organization's users List the users belonging to one organization, optionally filtered by the permissions or roles they hold. Kinde: GET /api/v1/organizations/{org_code}/users. |
kinde_get_user_roles_in_organization | read | Get a user's roles in an organization List the roles one user holds in one organization — the direct answer to 'what can this person do here?'. Kinde: GET /api/v1/organizations/{org_code}/users/{user_id}/roles. |
kinde_get_user_permissions_in_organization | read | Get a user's permissions in an organization List the permissions one user holds in one organization. Kinde: GET /api/v1/organizations/{org_code}/users/{user_id}/permissions. |
kinde_list_roles | read | List roles List the roles defined in the business. Kinde: GET /api/v1/roles. |
kinde_list_role_permissions | read | List a role's permissions List the permissions attached to one role. Kinde: GET /api/v1/roles/{role_id}/permissions. |
kinde_list_permissions | read | List permissions List the permissions defined in the business. Kinde: GET /api/v1/permissions. |
kinde_list_applications | read | List applications List the applications registered in the business, with their types. Kinde: GET /api/v1/applications. |
kinde_get_application | read | Get one application Fetch a single application by id, including its client id and login URLs. Kinde: GET /api/v1/applications/{application_id}. |
kinde_list_apis | read | List APIs List the APIs registered as token audiences. Kinde: GET /api/v1/apis. |
kinde_list_environment_feature_flags | read | List environment feature flags List the feature flags set at the environment level, with their values. Kinde: GET /api/v1/environment/feature_flags. |
kinde_list_organization_feature_flags | read | List an organization's feature flags List the feature-flag overrides set for one organization. Kinde: GET /api/v1/organizations/{org_code}/feature_flags. |
kinde_list_subscribers | read | List subscribers List marketing subscribers. Kinde: GET /api/v1/subscribers. |
kinde_create_organization | write | Create an organization Create a new organization (tenant) in the business. Kinde: POST /api/v1/organization. |
kinde_add_users_to_organization | write | Add users to an organization Add existing users to an organization, optionally with roles and permissions. Reversible by removing them. Kinde: POST /api/v1/organizations/{org_code}/users. |
kinde_grant_user_role_in_organization | write | Grant a user a role in an organization Give one user a role within one organization. Reversible with kinde_revoke_user_role_in_organization. Kinde: POST /api/v1/organizations/{org_code}/users/{user_id}/roles. |
kinde_grant_user_permission_in_organization | write | Grant a user a permission in an organization Give one user a permission within one organization. Reversible. Kinde: POST /api/v1/organizations/{org_code}/users/{user_id}/permissions. |
kinde_create_role | write | Create a role Create a role that can then be granted to users. Kinde: POST /api/v1/roles. |
kinde_create_permission | write | Create a permission Create a permission that roles and users can hold. Kinde: POST /api/v1/permissions. |
kinde_usage_status | Usage status (free-tier meter) Report the caller's current free-tier usage this month: calls used, monthly limit, remaining, and whether the cap is reached. Read-only; does not count against the meter. | |
kinde_request_feature | Request a missing feature Tell usefulapi that the user needs something the Kinde tools cannot do yet (a missing tool, field or filter). Call it only when the user asks for something none of the tools can do, and tell the user that you send the request. Do not call it for errors or for normal requests. Do not include personal data, credentials or customer records. Stored with the product name and the client type (for example Claude or Cursor), without the user's account. At most 5 requests per day. Does not count against the meter. | |
kinde_upgrade | Upgrade to Pro (unlimited) Subscribe to the Pro plan for UNLIMITED Kinde tool calls (the free tier caps monthly usage). Choose monthly ($9/month) or yearly ($90/year — 2 months free) billing. Returns a Stripe Checkout link to open in your browser; after payment your account upgrades automatically. Does not count against the meter. | |
kinde_cancel_subscription | Cancel the Pro subscription Cancel the caller's Kinde Pro subscription at the end of the paid period (no refund for the current period; unlimited calls continue until then, then the free tier applies). Requires confirm: true. Run kinde_upgrade later to undo the cancel before the period ends. Does not count against the meter. |
| Plan | Price | Limit |
|---|---|---|
| Free | $0 | 100 tool calls / month |
| Pro | $9/mo · $90/yr | Unlimited |
Pro covers this Kinde server only. Subscribe with kinde_upgrade (it returns a Stripe Checkout link). Cancel any time with kinde_cancel_subscription: Pro continues to the end of the paid period, with no refund for the current period, and running kinde_upgrade before then undoes the cancel. Or write to [email protected].
No. usefulapi is an independent service. It is not affiliated with or endorsed by Kinde. The server calls the Kinde API with your own Kinde access, so it sees only the data that your account can see.
The login page asks for your Kinde client secret, Kinde client id and Kinde domain (subdomain). See Before you connect for where to find them.
No. Add only the URL. Do not add an Authorization header or an API key to the client config. The server signs you in with OAuth: the login page asks for your Kinde client secret, Kinde client id and Kinde domain (subdomain). If the config has such a header, remove it: some clients then send that header instead of the login token, and every call fails with 401.
The login stores them encrypted in the authorization grant of your connection. The server uses them to call the Kinde API for you and to derive a private account id for usage metering. usefulapi does not show them on any page or in any reply. To stop all access, remove the connector and change or delete these credentials in Kinde.
Yes, if you approve it. 6 of the 23 Kinde tools can create or change data. The other 17 are marked read-only. Most MCP clients ask you to approve a tool call before it runs.
The Free plan gives 100 tool calls / month. Pro costs $9/mo or $90/yr, with unlimited tool calls, for this Kinde server only. Run kinde_usage_status to see how many calls you used.
Ask the AI to run kinde_upgrade: it returns a Stripe Checkout link. To cancel, run kinde_cancel_subscription. Pro continues to the end of the paid period.
Tell the AI what you wanted to do. It can send the request with kinde_request_feature. We store the text with the server name, the type of AI client and the tool you tried, not with your account, and read every request when we plan new tools. You can send up to 5 requests per day.
Any client that supports remote MCP servers (Streamable HTTP) with OAuth login: Claude (web and desktop), Claude Code, Cursor, VS Code, Windsurf and others.
This is a Model Context Protocol endpoint — meant to be connected from an AI client, not opened in a browser. An invalid_token response at the URL is the auth gate working as designed; clients authenticate automatically.