List and create Stytch projects; manage redirect URLs, public tokens, secrets, and email templates; read and update Consumer and B2B SDK configurations; and get or set password strength settings through the Stytch MCP server.
Adding Stytch provisions three things in your zone: an upstream resource pointing at https://mcp.stytch.dev/mcp (kept inside Keycard), a Keycard MCP Gateway URL - the downstream resource - that you install in Cursor, Claude Code, or any MCP client, and a provider for token exchange with Stytch’s OAuth issuer.
When your AI client makes a tool call, it sends a Keycard-issued access token to the gateway URL. Keycard’s STS exchanges that token for an upstream Stytch token, the gateway calls the upstream MCP, and the response is proxied back. Your zone’s identity provider, access policies, and audit log apply to every call - the upstream credential never leaves Keycard. Each call is recorded in the audit log with the user identity, the resource accessed, and the policy decision.
Tools the upstream server exposes through the Keycard MCP Gateway.
Stytch exposes 21 tools through the gateway:
- listProjects
- List all Stytch projects
- createProject
- Create a new Stytch project
- getAllRedirectURLs
- Retrieve all redirect URLs for a project
- createRedirectURL
- Create a redirect URL for a project
- updateRedirectURL
- Update valid types for a redirect URL on a project
- deleteRedirectURL
- Delete a redirect URL for a project
- getAllPublicTokens
- Retrieve all active public tokens for a project
- createPublicToken
- Create a public token for a project
- deletePublicToken
- Delete a specific public token for a project
- createEmailTemplate
- Create a custom email template (prebuilt or HTML with {{magic_link_url}} for magic links)
- getAllEmailTemplates
- Retrieve all email templates for a project
- updateEmailTemplate
- Update an email template (prebuilt or HTML with {{magic_link_url}} when using custom HTML)
- deleteEmailTemplate
- Delete a specific email template for a project
- createSecret
- Create a new secret for a project
- deleteSecret
- Delete a specific secret for a project
- getConsumerSDKConfig
- Retrieve the SDK configuration for a Consumer project
- updateConsumerSDKConfig
- Update Consumer SDK config; call getConsumerSDKConfig first and pass the full config to avoid overwriting
- getB2BSDKConfig
- Retrieve the SDK configuration for a B2B project
- updateB2BSDKConfig
- Update B2B SDK config; call getB2BSDKConfig first and pass the full config to avoid overwriting
- getPasswordStrengthConfig
- Retrieve password strength configuration for a project
- setPasswordStrengthConfig
- Set password strength configuration for a project
Install
Section titled “Install”Add Stytch to your zone and install the gateway URL into Cursor, Claude Code, or any MCP client.
-
Open the catalog
In your zone’s Keycard Console, go to Applications → Add Application → Explore MCP Servers.
-
Find and install Stytch
Search for
Stytchin the catalog and click Install. -
Connect your development tool
Once installed, Stytch appears on the Applications page with a Keycard MCP Gateway URL. Use the Install dropdown to add it to Cursor, Claude Code, or any MCP-compatible client.
Related
Section titled “Related”- Catalog overview - browse other MCP and API servers
- Access policies - control who can use Stytch
- Identity providers - control who can sign in