---
title: Stytch | Keycard
description: Configure authentication projects with Stytch
---

List and create Stytch projects; manage redirect URLs, public tokens, secrets, and email templates; read and update Consumer and B2B SDK configurations; and get or set password strength settings through the Stytch MCP server.

Adding Stytch provisions three things in your zone: an upstream resource pointing at `https://mcp.stytch.dev/mcp` (kept inside Keycard), a Keycard MCP Gateway URL - the downstream resource - that you install in Cursor, Claude Code, or any MCP client, and a provider for token exchange with Stytch’s OAuth issuer.

When your AI client makes a tool call, it sends a Keycard-issued access token to the gateway URL. Keycard’s STS exchanges that token for an upstream Stytch token, the gateway calls the upstream MCP, and the response is proxied back. Your zone’s [identity provider](/admin/identity-providers/index.md), [access policies](/admin/access-policies/index.md), and audit log apply to every call - the upstream credential never leaves Keycard. Each call is recorded in the audit log with the user identity, the resource accessed, and the policy decision.

## Tools

TOOLS

Tools the upstream server exposes through the Keycard MCP Gateway.

Stytch exposes 21 tools through the gateway:

- listProjects

  List all Stytch projects

- createProject

  Create a new Stytch project

- getAllRedirectURLs

  Retrieve all redirect URLs for a project

- createRedirectURL

  Create a redirect URL for a project

- updateRedirectURL

  Update valid types for a redirect URL on a project

- deleteRedirectURL

  Delete a redirect URL for a project

- getAllPublicTokens

  Retrieve all active public tokens for a project

- createPublicToken

  Create a public token for a project

- deletePublicToken

  Delete a specific public token for a project

- createEmailTemplate

  Create a custom email template (prebuilt or HTML with {{magic\_link\_url}} for magic links)

- getAllEmailTemplates

  Retrieve all email templates for a project

- updateEmailTemplate

  Update an email template (prebuilt or HTML with {{magic\_link\_url}} when using custom HTML)

- deleteEmailTemplate

  Delete a specific email template for a project

- createSecret

  Create a new secret for a project

- deleteSecret

  Delete a specific secret for a project

- getConsumerSDKConfig

  Retrieve the SDK configuration for a Consumer project

- updateConsumerSDKConfig

  Update Consumer SDK config; call getConsumerSDKConfig first and pass the full config to avoid overwriting

- getB2BSDKConfig

  Retrieve the SDK configuration for a B2B project

- updateB2BSDKConfig

  Update B2B SDK config; call getB2BSDKConfig first and pass the full config to avoid overwriting

- getPasswordStrengthConfig

  Retrieve password strength configuration for a project

- setPasswordStrengthConfig

  Set password strength configuration for a project

Show all 21 tools  Show fewer

## Install

INSTALL

Add Stytch to your zone and install the gateway URL into Cursor, Claude Code, or any MCP client.

1. **Open the catalog**

   In your zone’s [Keycard Console](https://console.keycard.ai), go to **Applications** → **Add Application** → **Explore MCP Servers**.

2. **Find and install Stytch**

   Search for `Stytch` in the catalog and click **Install**.

3. **Connect your development tool**

   Once installed, Stytch appears on the **Applications** page with a **Keycard MCP Gateway URL**. Use the **Install** dropdown to add it to Cursor, Claude Code, or any MCP-compatible client.

## Related

RELATED

- [Catalog overview](/admin/catalog/index.md) - browse other MCP and API servers
- [Access policies](/admin/access-policies/index.md) - control who can use Stytch
- [Identity providers](/admin/identity-providers/index.md) - control who can sign in

[PreviousStripe](/admin/catalog/mcp-servers/stripe/index.md)[NextSupabase](/admin/catalog/mcp-servers/supabase/index.md)