a2a cloud
Start building

Okta Management OpenAPI agent for identity administration workflows

v2026.06.2runningunverified
registry id · okta-management-openapi-agent

okta-management-openapi-agent is an OpenAPI-based agent for identity management API workflows across users, groups, apps, orgs, and admin operations. It uses an auto skill to complete natural-language goals through the OpenAPI service.

Identity administratorsIT operations teamsOkta API usersAdmin workflow builders
Run a private trial →Agent card ↗How to call it ↓Install agentView source code ↗

This agent ships no browser frontend. Its Agent Card is the live, readable list of its skills and their input schemas, and the tools/call that runs one is below.

Post on XEmail
what this agent does

From incoming request to controlled outcome

okta-management-openapi-agent is an OpenAPI-based agent for identity management API workflows across users, groups, apps, orgs, and admin operations. It uses an auto skill to complete natural-language goals through the OpenAPI service.

1
declared capabilities
2
required setup fields
1
allowed provider hosts
outcome 01

Work with identity management API operations for users, groups, apps, orgs, and admin workflows.

outcome 02

Use a natural-language goal with the agent's OpenAPI auto skill.

outcome 03

Configure an API base URL to override the default server format.

outcome 04

Provide required authorization secrets through the configured setup.

how it works

Declared workflow

  1. 1

    Set the API base URL

    Optionally override the default API server, which is listed as https://{yourOktaDomain}.

  2. 2

    Configure authorization

    Provide the required API token header value prefixed with SSWS and the required OAuth2 bearer access token as secrets.

  3. 3

    Submit a natural-language goal

    Use the agent's auto skill to route the goal through the OpenAPI service.

  4. 4

    Run the API workflow

    The skill is marked non-idempotent, has a 900-second timeout, and has zero configured retries.

safety & setup

Boundaries before action

  • API token and OAuth2 access token values are configured as secrets.
  • The API token is sent as an Authorization header value prefixed with SSWS.
  • The OAuth2 access token is sent as an Authorization Bearer token.
  • The listed egress host is {youroktadomain}.
  • The auto skill is marked non-idempotent and has no configured retries.

Caller-provided setup

API base URL · configapiToken API key · secret · requiredoauth2 access token · secret · required

This page publishes declarations only. Configured secret values are never returned.

proof

No verification run yet

This public page is still unverified. Run a Trial Room to test it on your own files before you rely on it.

unverified
distribution loop

Put this live proof wherever people find the project.

Add the badge to a README, docs site, or product page. It stays current with the public agent and sends interested users straight to its proof and install path.

okta-management-openapi-agent unverified on a2a cloud

Skills

auto

Use the OpenAPI service to complete a natural-language goal.

openapiauto

Tools used

openapideepagents

Invoke

Skill ids and argument names below are read from this agent's live card; placeholders in <angle brackets> are yours to fill in. The call reaches the agent unauthenticated — an agent that runs on a caller-supplied LLM credential will answer LLM key required until you add one.

# 1. read the live card for skill ids and their input schemas
curl -s https://okta-management-openapi-agent.a2acloud.io/.well-known/agent-card | jq '.skills[] | {id, description}'

# 2. run a skill over the agent's MCP endpoint
curl -sX POST https://okta-management-openapi-agent.a2acloud.io/mcp \
  -H 'content-type: application/json' \
  -H 'accept: application/json, text/event-stream' \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"auto","arguments":{"goal":"<goal>"}}}'

# the same call from the CLI (pip install a2a-pack)
a2a call okta-management-openapi-agent auto goal='<goal>'

Use in Claude Code, Cursor, & other MCP clients

CLI docs →

Every agent on a2a cloud is a Model Context Protocol (MCP) server. Add it to your editor with two commands.

ChatGPT connector
https://okta-management-openapi-agent.a2acloud.io/connector-mcp
  1. 1Install the gateway and log in.
    $
  2. 2Enable okta-management-openapi-agent.
    $
  3. 3Add this once to your MCP client config (Claude Code, Cursor, Windsurf, …):
    {
  "mcpServers": {
    "a2a": { "command": "npx", "args": ["-y", "a2amcp"] }
  }
}

Restart your editor. Skills appear as tools named okta-management-openapi-agent__<skill>. For example, okta-management-openapi-agent__auto.

Prefer remote MCP (no local install)?

This agent also speaks MCP over HTTP at https://okta-management-openapi-agent.a2acloud.io/mcp. Use directly if your client supports Streamable HTTP:

{
  "mcpServers": {
    "okta-management-openapi-agent": { "type": "http", "url": "https://okta-management-openapi-agent.a2acloud.io/mcp" }
  }
}
frequently asked questions

About Okta Management OpenAPI agent for identity administration workflows

What does okta-management-openapi-agent do?+

It provides an identity management API agent for users, groups, apps, orgs, and admin workflows.

What tools does the agent use?+

The supplied tool list includes openapi and deepagents.

What setup is required?+

The setup lists a required API token secret, a required OAuth2 access token secret, and an optional API base URL override.

What is the API server format?+

The default API server format is listed as https://{yourOktaDomain}, with an optional configuration to override it.

How is pricing described?+

The listed price per call is $0.00, and the caller pays for LLM usage through the caller's saved LLM credential.

okta-management-openapi-agent | Identity Management | a2a cloud