Clerk (BYOK) — connector documentation
- MCP endpoint:
https://byok-clerk.connectorbay.com/mcp - REST API:
POST https://byok-clerk.connectorbay.com/v1/tools/{tool_name}, described by the OpenAPI 3.1 spec athttps://byok-clerk.connectorbay.com/openapi.json - Transport: Streamable HTTP, stateless, MCP specification 2025-06-18 or later
- Authentication: your own Clerk Clerk secret key (sk_live_... or sk_test_...), sent in the
X-Upstream-Keyheader of every request (never stored, logged or cached) - Health:
https://byok-clerk.connectorbay.com/health· Tool schemas:https://byok-clerk.connectorbay.com/tools.json - Publisher: Unify Dynamics LLC · connectorbay.com/byok-clerk · agent@connectorbay.com
What Clerk (BYOK) is for
Clerk (BYOK) lets an AI assistant read your own Clerk data through the Clerk API with a key you supply (Clerk secret key (sk_live_... or sk_test_...)). Read-only: 12 tools (get_instance, list_users, count_users, get_user, list_organizations, get_organization, list_organization_memberships, list_sessions, list_invitations, list_waitlist_entries, list_domains, list_jwt_templates). The BYOK key travels with each request, is used for that one call only and is never stored, logged or cached; it is only ever sent to api.clerk.com. Unofficial connector by Unify Dynamics LLC: not affiliated with, endorsed by or sponsored by Clerk. Clerk and its logos are trademarks of their owners and are used only to say which service the connector works with.
Ask your assistant things like:
- "Which Clerk instance is my secret key for, development or production?"
- "Which users signed up most recently in my Clerk app?"
- "How many users does my Clerk app have?"
- "Show Clerk user user_2NNEqL2nrIRdJ194ndJqAHwEfxC"
- "What organizations exist in my Clerk app?"
- "Show details of the Clerk organization acme"
What it does
get_instance: Show the Clerk instance the secret key belongs to: id, environment type (development or production) and allowed origins.list_users: List users of the instance, newest first by default, with name, username, email addresses, ban and lock flags and sign-in times (times are Unix milliseconds).count_users: Count users in the instance, optionally only those matching a text query or the banned flag.get_user: Get one user by id: name, username, email addresses, two-factor and password flags, ban status and sign-in times.list_organizations: List organizations of the instance with name, slug, member counts and creation time, newest first by default.get_organization: Get one organization by id or slug: name, slug, member count, pending invitations and limits.list_organization_memberships: List the members of one organization with role and the member's user id, name and identifier.list_sessions: List sessions with user id, status and activity times; filter by user, client or status. Times are Unix milliseconds.list_invitations: List non-revoked sign-up invitations with email, status and expiry; filter by status or email text.list_waitlist_entries: List waitlist entries with email, status and dates, newest first by default.list_domains: List the domains of the instance (primary and satellite) with their frontend API and accounts portal URLs.list_jwt_templates: List the instance's JWT templates with name, token lifetime, clock skew and signing algorithm (claims are not returned).
BYOK key
You bring your own Clerk Clerk secret key (sk_live_... or sk_test_...) (https://dashboard.clerk.com/last-active?path=api-keys). Your assistant sends it in the X-Upstream-Key header with each request. ConnectorBay uses it for that one call only: it is never stored, logged or cached, never shown in an answer, and it is only sent to api.clerk.com over https, with no redirects followed. Create a key with the fewest permissions the tools need (read-only if the provider offers it), and revoke it at the provider whenever you like.
Data sources
- https://clerk.com/docs/reference/backend-api (the API this connector calls, with a BYOK key)
Live from the Clerk API (api.clerk.com) with a BYOK key; documentation: https://clerk.com/docs/reference/backend-api. Endpoints checked against that documentation on 2026-10-16.
What it is not
Unofficial connector by Unify Dynamics LLC: not affiliated with, endorsed by or sponsored by Clerk. Clerk and its logos are trademarks of their owners and are used only to say which service the connector works with. It is read-only: it never creates, changes, sends or deletes anything in your Clerk account.
Built for: Worldwide. Languages: English.