Be the first to get access to new connectors. Get early access →
ConnectorBay Early access

Descope (BYOK) — connector documentation

  • MCP endpoint: https://byok-descope.connectorbay.com/mcp
  • REST API: POST https://byok-descope.connectorbay.com/v1/tools/{tool_name}, described by the OpenAPI 3.1 spec at https://byok-descope.connectorbay.com/openapi.json
  • Transport: Streamable HTTP, stateless, MCP specification 2025-06-18 or later
  • Authentication: your own Descope Project ID and management key, joined with a colon (ProjectID:ManagementKey), sent in the X-Upstream-Key header of every request (never stored, logged or cached)
  • Health: https://byok-descope.connectorbay.com/health · Tool schemas: https://byok-descope.connectorbay.com/tools.json
  • Publisher: Unify Dynamics LLC · connectorbay.com/byok-descope · agent@connectorbay.com

What Descope (BYOK) is for

Descope (BYOK) lets an AI assistant read your own Descope data through the Descope API with a key you supply (Project ID and management key, joined with a colon (ProjectID:ManagementKey)). Read-only: 10 tools (get_project, list_tenants, get_tenant, list_roles, list_permissions, list_lists, list_widgets, get_password_policy, get_otp_settings, get_session_settings). The BYOK key travels with each request, is used for that one call only and is never stored, logged or cached; it is only ever sent to api.descope.com. Unofficial connector by Unify Dynamics LLC: not affiliated with, endorsed by or sponsored by Descope. Descope and its logos are trademarks of their owners and are used only to say which service the connector works with.

Ask your assistant things like:

  • "Which Descope project and environment is this key for?"
  • "Which tenants exist in our Descope project?"
  • "What are the settings of the Descope tenant with a given ID?"
  • "What roles are defined in Descope and which permissions do they carry?"
  • "Which permissions exist in our Descope project?"
  • "Which allow and deny lists are configured in Descope?"

What it does

  • get_project: Show the project's name, ID, environment (production or development) and tags.
  • list_tenants: List tenants with name, auth type, domains, SSO enforcement, parent tenant and creation time. Custom attributes are not returned by this tool.
  • get_tenant: Get one tenant by ID: name, auth type, domains, SSO enforcement, parent and default roles.
  • list_roles: List roles with name, description, the permissions they grant, tenant scope and whether they are defaults.
  • list_permissions: List permissions with name, description and whether Descope ships them by default.
  • list_lists: List the project's IP and text allow or deny lists with name, description and type. Entries are not returned by this tool.
  • list_widgets: List widgets with name, type, whether they are disabled and the permissions they require.
  • get_password_policy: Show the project's password policy: minimum length, character rules, expiry, reuse, lockout and strength settings.
  • get_otp_settings: Show one-time-passcode settings: whether OTP is on and how long codes stay valid.
  • get_session_settings: Show project session settings: app URL, trusted domains, token lifetimes, inactivity timeout and concurrent-session limit. Test-user tokens are not returned by this tool.

BYOK key

You bring your own Descope Project ID and management key, joined with a colon (ProjectID:ManagementKey) (https://docs.descope.com/management/management-keys). Your assistant sends it in the X-Upstream-Key header with each request. ConnectorBay uses it for that one call only: it is never stored, logged or cached, never shown in an answer, and it is only sent to api.descope.com over https, with no redirects followed. Create a key with the fewest permissions the tools need (read-only if the provider offers it), and revoke it at the provider whenever you like.

Data sources

Live from the Descope API (api.descope.com) with a BYOK key; documentation: https://docs.descope.com/management/. Endpoints checked against that documentation on 2026-10-16.

What it is not

Unofficial connector by Unify Dynamics LLC: not affiliated with, endorsed by or sponsored by Descope. Descope and its logos are trademarks of their owners and are used only to say which service the connector works with. It is read-only: it never creates, changes, sends or deletes anything in your Descope account.

Built for: Worldwide. Languages: English.