Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
21 changes: 21 additions & 0 deletions packages/@okta/vuepress-site/docs/concepts/mcp-server/index.md
Original file line number Diff line number Diff line change
Expand Up @@ -13,6 +13,27 @@ The Okta MCP server translates natural language instructions into structured API

IT admins, developers, and security professionals use the Okta MCP server to automate Okta administration through AI-powered interfaces.

## Deployment options: Self-hosted and Okta-hosted

To integrate AI assistants securely with your identity infrastructure, the Okta Model Context Protocol (MCP) server can be deployed using two distinct hosting options: Self-hosted and Okta-hosted.

You can choose the deployment track that matches your technical requirements:

* **Self-hosted MCP server:** You run the server software locally on your own network. This track is best for developers who want to modify the underlying server code. See, [Self hosted MCP server](/docs/guides/self-hosted-okta-mcp-server/) documentation.

* **Okta-hosted MCP server:** Okta hosts and manages the gateway in the cloud. Your chat client streams instructions over secure HTTPS, which removes local software installations and hosting fees. This setup simplifies onboarding for nontechnical users, such as Okta Identity Governance (OIG) request approvers, who need a ready-made tool without local configuration. It also supports browser-based tools and lets you run clients and servers on separate containers for better flexibility. See, Okta hosted MCP server documentation.

The following table compares the two hosting options:

| Feature | Self-hosted | Okta-hosted |
| :--- | :--- | :--- |
| **Where it runs** | Your computer, a company container, or a private cloud. | Okta cloud infrastructure. |
| **Setup required** | Install python packages, clone code repositories, and maintain tools manually. | No software to install. You connect using a web address. |
| **How it connects** | Uses local standard input and output channels on your machine. | Uses a secure internet connection (HTTPS). |
| **Sign-in method** | Browser sign-in or secure digital keys. | Uses the signed-in user's active Okta credentials. |
| **Maintenance** | You handle costs, updates, security patches, and logs. | Okta handles upgrades, scaling, and system performance. |
| **Best for** | Developers testing code in a sandbox or using a command-line interface. | Help Desk teams, IT admins, and automated Workflows. |

## Benefits

The Okta MCP server addresses security, automation, and integration requirements.
Expand Down
Original file line number Diff line number Diff line change
@@ -0,0 +1,7 @@
---
title: Okta MCP server overview
excerpt: Learn about Okta MCP server hosting models and find configuration paths for cloud-managed and local deployments.
layout: Guides
sections:
- main
---
Original file line number Diff line number Diff line change
@@ -0,0 +1,27 @@
---
title: Okta MCP server overview
excerpt: Learn about Okta MCP server hosting models and find configuration paths for cloud-managed and local deployments.
layout: Guides
---

# Okta MCP server

The Okta Model Context Protocol (MCP) server connects your AI agents and Large Language Models (LLMs) to your Okta organization. This allows you to manage your Okta organization using natural language commands.

Before starting your deployment, choose the hosting option that matches your Workflow:

* **Okta-hosted (Cloud-based):** Best for a quick deployment without managing local software dependencies or runtime environments.

* **Self-hosted (Local infrastructure):** Best for developer testing and isolated sandboxes.

## Okta-hosted MCP server

With this hosting option, Okta hosts and manages the gateway in the cloud. Your chat client streams instructions over secure HTTPS, which removes local software installations and hosting fees.

This setup simplifies onboarding for nontechnical users, such as Okta Identity Governance (OIG) request approvers, who need a ready-made tool without local configuration. It also supports browser-based tools and lets you run clients and servers on separate containers for better flexibility.

To configure permissions and link your digital assistants, use the native controls inside the Admin Console. See Okta hosted MCP server documentation.

## Self-hosted MCP server

With this hosting option, you download and run the server utility directly on your own computer or private cloud network. Use this setup if you want full control over the underlying package environment or need to run isolated tests. See [self-hosted MCP server](/docs/guides/self-hosted-okta-mcp-server/) documentation.
28 changes: 17 additions & 11 deletions packages/@okta/vuepress-theme-prose/const/navbar.const.js
Original file line number Diff line number Diff line change
Expand Up @@ -996,19 +996,25 @@ export const guides = [
],
},
{
title: "Okta MCP server",
title: "Okta MCP server overview",
guideName: "okta-hosted-mcp-overview/main",
subLinks: [
{
title: "Install and initialize",
path: "/docs/guides/mcp-server/main/",
},
{
title: "Set up Okta app authentication",
path: "/docs/guides/configure-mcp-authentication/main/",
},
{
title: "Configure, start, and test",
path: "/docs/guides/start-mcp-server/main/",
title: "Self-hosted Okta MCP server",
subLinks: [
{
title: "Install and initialize",
path: "/docs/guides/mcp-server/main/",
},
{
title: "Set up Okta app authentication",
path: "/docs/guides/configure-mcp-authentication/main/",
},
{
title: "Configure, start, and test",
path:"/docs/guides/start-mcp-server/main/",
},
],
},
],
},
Expand Down