Clerk MCP Server

A Model Context Protocol (MCP) server for Clerk

Query and manage your Clerk organizations, members, users, roles, and metadata directly from AI assistants like Claude, Cursor, VS Code Copilot, Windsurf, and more.

---

Getting Your Clerk API Key

You need a Clerk Secret Key to use this server.

1. Go to dashboard.clerk.com and sign in (or create an account)
2. Select your application (or create one)
3. Navigate to Configure → API Keys
4. Copy the Secret Key — it starts with sk_test_ (development) or sk_live_ (production)

Never commit your secret key to git. Use environment variables or pass it via headers.

---

Two Operating Modes

The server supports two modes, auto-detected at startup:

Hosted Mode (Private)

The server owns the Clerk secret key. Set CLERK_SECRET_KEY in your .env file and all requests use that single key. No headers needed from clients.

Best for: Personal use, internal teams, self-hosted deployments.

Public Mode (Per-Request Key)

No secret key on the server. Each client passes their own key via the X-Clerk-Secret-Key HTTP header on every request. The server creates a fresh Clerk client per request.

Best for: Shared deployments, multi-tenant setups, or when you don't want the key stored on the server.

	Hosted Mode	Public Mode
Key stored on server	Yes (in .env)	No
Key sent per request	No	Yes (via header)
Setup complexity	Simpler	Slightly more config
Multi-user support	Single Clerk account	Multiple Clerk accounts

---

Quick Start

1. Clone & install

git clone https://github.com/BalajiSriraman/Clerk-MCP.git
cd Clerk-MCP
npm install

2. Configure & run

Hosted mode — set the key once on the server:

cp .env.example .env
# Edit .env and paste your secret key:
# CLERK_SECRET_KEY=sk_test_xxxxxxxxxxxxxxxxxxxxxxxxxxxxx
npm run dev

Public mode — no .env needed, clients provide the key:

npm run dev

Your MCP endpoint is now live at https://clerk-mcp.vercel.app/mcp.

3. Verify

curl https://clerk-mcp.vercel.app/api/health

• Hosted mode: {"status":"ok","mode":"hosted","clerkConnected":true}
• Public mode: {"status":"ok","mode":"public","clerkConnected":null}

---

Connect to AI Assistants

Claude Code (CLI)

Hosted mode:

claude mcp add --transport http clerk https://clerk-mcp.vercel.app/mcp

Public mode:

claude mcp add --transport http \
  --header "X-Clerk-Secret-Key: sk_test_xxxxxxxxxxxxxxxxxxxxxxxxxxxxx" \
  clerk https://clerk-mcp.vercel.app/mcp

Claude Desktop

Add to ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows):

Hosted mode:

{
  "mcpServers": {
    "clerk": {
      "command": "npx",
      "args": ["mcp-remote", "https://clerk-mcp.vercel.app/mcp"]
    }
  }
}

Public mode:

{
  "mcpServers": {
    "clerk": {
      "command": "npx",
      "args": [
        "mcp-remote",
        "https://clerk-mcp.vercel.app/mcp",
        "--header",
        "X-Clerk-Secret-Key: sk_test_xxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
      ]
    }
  }
}

Cursor

Go to Settings → MCP → Add Server:

Hosted mode:

{
  "mcpServers": {
    "clerk": {
      "url": "https://clerk-mcp.vercel.app/mcp"
    }
  }
}

Public mode:

{
  "mcpServers": {
    "clerk": {
      "url": "https://clerk-mcp.vercel.app/mcp",
      "headers": {
        "X-Clerk-Secret-Key": "sk_test_xxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
      }
    }
  }
}

VS Code (GitHub Copilot)

Add to your workspace .vscode/mcp.json:

Hosted mode:

{
  "mcp": {
    "servers": {
      "clerk": {
        "url": "https://clerk-mcp.vercel.app/mcp"
      }
    }
  }
}

Public mode:

{
  "mcp": {
    "servers": {
      "clerk": {
        "url": "https://clerk-mcp.vercel.app/mcp",
        "headers": {
          "X-Clerk-Secret-Key": "sk_test_xxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
        }
      }
    }
  }
}

Windsurf

Add to MCP settings:

Hosted mode:

{
  "context_servers": {
    "clerk": {
      "source": "custom",
      "command": "npx",
      "args": ["mcp-remote", "https://clerk-mcp.vercel.app/mcp"],
      "env": {}
    }
  }
}

Public mode:

{
  "context_servers": {
    "clerk": {
      "source": "custom",
      "command": "npx",
      "args": [
        "mcp-remote",
        "https://clerk-mcp.vercel.app/mcp",
        "--header",
        "X-Clerk-Secret-Key: sk_test_xxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
      ],
      "env": {}
    }
  }
}

---

Docker

Build the image

docker build -t clerk-mcp .

Run in hosted mode

docker run -d -p 3000:3000 -e CLERK_SECRET_KEY=sk_test_xxxxxxxxxxxxxxxxxxxxxxxxxxxxx clerk-mcp

Run in public mode

docker run -d -p 3000:3000 clerk-mcp

Docker Compose

Both modes are defined in docker-compose.yml:

# Hosted mode on port 3000 — set CLERK_SECRET_KEY in .env first
docker compose up clerk-mcp-hosted

# Public mode on port 3001 — no key needed on the server
docker compose up clerk-mcp-public

---

Available Tools

Organizations

Tool	Description
clerk_list_organizations	List orgs with filtering by name/slug, pagination, and member counts
clerk_get_organization	Get org details by ID or slug (includes metadata, timestamps)
clerk_create_organization	Create a new organization with name, slug, and metadata
clerk_update_organization_metadata	Update org public/private metadata
clerk_delete_organization	Delete an organization permanently (irreversible)

Members

Tool	Description
clerk_list_organization_members	List org members with roles, user data, and metadata
clerk_update_member_role	Change a member's role (e.g. org:admin, org:member)
clerk_update_member_metadata	Update membership public/private metadata
clerk_remove_member	Remove a member from an organization

Invitations

Tool	Description
clerk_list_organization_invitations	List invitations by status (pending/accepted/revoked)
clerk_create_invitation	Invite a user to an org by email

Users

Tool	Description
clerk_list_users	List all instance users with search by name/email/phone
clerk_get_user	Get full user profile: emails, phones, external accounts, metadata
clerk_update_user_metadata	Update user public/private/unsafe metadata

---

Example Prompts

Once connected, try asking your AI assistant:

List all organizations in my Clerk instance.
How many members does the "engineering" organization have?
Create a new organization called "Design Team" with slug "design-team".
Show me all pending invitations for organization org_2abc123.
Find all users with email addresses containing "@example.com".
Update the public metadata for user user_2xyz789 to set plan: "pro".

---

Deploying to Production

Build and deploy as any Nuxt/Node.js app:

npm run build
node .output/server/index.mjs

Or use Docker:

docker build -t clerk-mcp .
docker run -p 3000:3000 -e CLERK_SECRET_KEY=sk_live_xxx clerk-mcp

If you self-host, use your own deployment URL instead of https://clerk-mcp.vercel.app in the client configs above.

Compatible with: Vercel, Netlify, Cloudflare Workers (with nitro preset), Railway, Fly.io, or any Node.js host.

---

Adding New Tools

Create a new file in server/mcp/tools/ — it's automatically discovered by the MCP toolkit:

// server/mcp/tools/clerk-my-new-tool.ts
import { z } from "zod";

export default defineMcpTool({
  name: "clerk_my_new_tool",
  description: "Description of what this tool does",
  inputSchema: {
    param: z.string().describe("Parameter description"),
  },
  annotations: {
    readOnlyHint: true,
    destructiveHint: false,
    openWorldHint: true,
  },
  async handler({ param }) {
    const clerk = useClerkClient();
    const result = await clerkCall(() => clerk.someApi.someMethod({ param }));
    return jsonResult(result);
  },
});

Tech Stack

• Nuxt 4 — Full-stack Vue framework
• @nuxtjs/mcp-toolkit — MCP server module for Nuxt
• @clerk/backend — Clerk Backend SDK
• Zod — Schema validation

License

MIT