Be the first to get access to new connectors. Get early access →
ConnectorBay Early access

Okta Org Settings (BYOK) — connector documentation

  • MCP endpoint: https://byok-okta-org-settings.connectorbay.com/mcp
  • REST API: POST https://byok-okta-org-settings.connectorbay.com/v1/tools/{tool_name}, described by the OpenAPI 3.1 spec at https://byok-okta-org-settings.connectorbay.com/openapi.json
  • Transport: Streamable HTTP, stateless, MCP specification 2025-06-18 or later
  • Authentication: your own Okta Org Settings Okta API token, sent in the X-Upstream-Key header of every request (never stored, logged or cached)
  • Health: https://byok-okta-org-settings.connectorbay.com/health · Tool schemas: https://byok-okta-org-settings.connectorbay.com/tools.json
  • Publisher: Unify Dynamics LLC · connectorbay.com/byok-okta-org-settings · agent@connectorbay.com

What Okta Org Settings (BYOK) is for

Okta Org Settings (BYOK) lets an AI assistant read your own Okta Org Settings data through the Okta Org Settings API with a key you supply (Okta API token). Read-only: 9 tools (get_org_settings, get_org_preferences, get_org_captcha_settings, get_client_privileges_setting, get_third_party_admin_setting, list_api_tokens, get_api_token, list_features, get_feature). The BYOK key travels with each request, is used for that one call only and is never stored, logged or cached; it is only ever sent to *.okta.com. Unofficial connector by Unify Dynamics LLC: not affiliated with, endorsed by or sponsored by Okta Org Settings. Okta Org Settings and its logos are trademarks of their owners and are used only to say which service the connector works with.

Ask your assistant things like:

  • "What is our Okta org's status and when does it expire?"
  • "Does our Okta sign-in page show the Okta footer?"
  • "On which pages is CAPTCHA enabled in our Okta org?"
  • "Can OAuth clients be assigned admin roles in our Okta org?"
  • "Are third-party administrators allowed in our Okta org?"
  • "Which Okta API tokens exist and when do they expire?"

What it does

  • get_org_settings: Show the Okta org: id, company name, subdomain, website, country, status and creation and expiry dates. Addresses and phone numbers are not picked.
  • get_org_preferences: Show whether the 'Powered by Okta' footer is shown to end users.
  • get_org_captcha_settings: Show which CAPTCHA instance the org uses and on which pages it is enabled (for example SIGN_IN, SSR).
  • get_client_privileges_setting: Show whether role assignment to OAuth 2.0 clients is enabled for the org.
  • get_third_party_admin_setting: Show whether third-party administrators are enabled for the org.
  • list_api_tokens: List API token metadata (name, client name, lifetime window, network restriction type and dates). Token values and owner ids are not returned. Needs a token with permission to read all tokens.
  • get_api_token: Get metadata of one API token: name, client name, lifetime window, network restriction type and dates.
  • list_features: List self-service features (early access and beta) with name, description, enabled or disabled status and stage.
  • get_feature: Get one self-service feature: name, description, status and stage.

BYOK key

You bring your own Okta Org Settings Okta API token (https://developer.okta.com/docs/guides/create-an-api-token/main/). Your assistant sends it in the X-Upstream-Key header with each request. ConnectorBay uses it for that one call only: it is never stored, logged or cached, never shown in an answer, and it is only sent to *.okta.com over https, with no redirects followed. Create a key with the fewest permissions the tools need (read-only if the provider offers it), and revoke it at the provider whenever you like.

Data sources

Live from the Okta Org Settings API (*.okta.com) with a BYOK key; documentation: https://developer.okta.com/docs/api/openapi/okta-management/management/tag/OrgSetting/. Endpoints checked against that documentation on 2026-10-16.

What it is not

Unofficial connector by Unify Dynamics LLC: not affiliated with, endorsed by or sponsored by Okta Org Settings. Okta Org Settings and its logos are trademarks of their owners and are used only to say which service the connector works with. It is read-only: it never creates, changes, sends or deletes anything in your Okta Org Settings account.

Built for: Worldwide. Languages: English.