Ory (BYOK) — connector documentation
- MCP endpoint:
https://byok-ory.connectorbay.com/mcp - REST API:
POST https://byok-ory.connectorbay.com/v1/tools/{tool_name}, described by the OpenAPI 3.1 spec athttps://byok-ory.connectorbay.com/openapi.json - Transport: Streamable HTTP, stateless, MCP specification 2025-06-18 or later
- Authentication: your own Ory Ory Network workspace API key, sent in the
X-Upstream-Keyheader of every request (never stored, logged or cached) - Health:
https://byok-ory.connectorbay.com/health· Tool schemas:https://byok-ory.connectorbay.com/tools.json - Publisher: Unify Dynamics LLC · connectorbay.com/byok-ory · agent@connectorbay.com
What Ory (BYOK) is for
Ory (BYOK) lets an AI assistant read your own Ory data through the Ory API with a key you supply (Ory Network workspace API key). Read-only: 10 tools (list_workspaces, get_workspace, list_projects, list_workspace_projects, get_project, list_organizations, get_organization, list_event_streams, list_project_api_keys, list_workspace_api_keys). The BYOK key travels with each request, is used for that one call only and is never stored, logged or cached; it is only ever sent to api.console.ory.sh. Unofficial connector by Unify Dynamics LLC: not affiliated with, endorsed by or sponsored by Ory. Ory and its logos are trademarks of their owners and are used only to say which service the connector works with.
Ask your assistant things like:
- "Which Ory workspaces do we have?"
- "What plan is our Ory workspace on?"
- "Which Ory Network projects do we have and are they running?"
- "Which projects are in our Ory workspace?"
- "Is the Ory project with a given ID running and in which region?"
- "Which SSO organizations are set up in our Ory project?"
What it does
list_workspaces: List the Ory Network workspaces the key can see with name, plan and access policy.get_workspace: Get one workspace by ID or slug: name, plan, access policy and timestamps.list_projects: List all Ory Network projects the key can see with name, slug, state, environment, region and plan.list_workspace_projects: List the projects in one workspace with name, slug, state, environment, region and plan.get_project: Get one project's basic details: name, slug, state, environment, region and revision. The full service configuration is not returned by this tool.list_organizations: List a project's Enterprise SSO organizations with label, domains, default region and session lifespan.get_organization: Get one Enterprise SSO organization of a project: label, domains and session lifespan.list_event_streams: List a project's event streams with type, status, endpoint and timestamps.list_project_api_keys: List a project's API keys by name, last characters, owner and expiry. The key values are not returned by this tool.list_workspace_api_keys: List a workspace's API keys by name, last characters, owner and expiry. The key values are not returned by this tool.
BYOK key
You bring your own Ory Ory Network workspace API key (https://www.ory.com/docs/concepts/personal-access-token). Your assistant sends it in the X-Upstream-Key header with each request. ConnectorBay uses it for that one call only: it is never stored, logged or cached, never shown in an answer, and it is only sent to api.console.ory.sh over https, with no redirects followed. Create a key with the fewest permissions the tools need (read-only if the provider offers it), and revoke it at the provider whenever you like.
Data sources
- https://www.ory.com/docs/reference/api (the API this connector calls, with a BYOK key)
Live from the Ory API (api.console.ory.sh) with a BYOK key; documentation: https://www.ory.com/docs/reference/api. Endpoints checked against that documentation on 2026-10-16.
What it is not
Unofficial connector by Unify Dynamics LLC: not affiliated with, endorsed by or sponsored by Ory. Ory and its logos are trademarks of their owners and are used only to say which service the connector works with. It is read-only: it never creates, changes, sends or deletes anything in your Ory account.
Built for: Worldwide. Languages: English.