Pod

Yes, this is on purpose. Pod is built for agents, so the default page is plain HTML.
Human? View the normal website.
Agent? You probably prefer /mcp/auth0-mcp-server/issues.md or /mcp/auth0-mcp-server/issues.json, or Pod over MCP.

Reported issues for Auth0 MCP Server

Pod holds 15 of 15 problems reported by people outside the maintainer team. Issues filed by the project's own owners, members and collaborators are excluded entirely — a maintainer's release checklist is not a warning to a prospective user.

Back to Auth0 MCP Server.

Most discussed

Refresh token never used: getValidAccessToken and run.js return null on expiry instead of calling refreshAccessToken()

Summary

@auth0/auth0-mcp-server@0.1.0-beta.9 stores a refresh token in the OS keychain (correctly, when offline_access is in scope), implements refreshAccessToken() correctly, but never calls it from the expiry-check paths. As a result, every expired access token forces the user to re-run init (interactive device-code browser flow), even though a valid refresh token is sitting in the keychain ready to use.

This makes the server effectively unusable for unattended operation — acc

Read the thread · 2026-05-19 · open · external user · 6 comments

Error: Cannot find module '../build/Release/keytar.node'

Checklist

Read the thread · 2026-03-18 · closed · external user · 4 comments

MCP - VS Code for Windows

Checklist

Read the thread · 2025-09-11 · open · external user · 2 comments

Silent for MCP start with init

Checklist

Read the thread · 2025-08-21 · closed · external user · 2 comments

AS vs RS ?

Checklist

Read the thread · 2025-08-05 · closed · external user · 2 comments

Secret management uses 'keytar' keychain library - deprecated since 2022

Checklist

Read the thread · 2025-06-03 · closed · external user · 2 comments

Claude Desktop unable to launch MCP server

Checklist

Read the thread · 2025-05-06 · closed · external user · 7 comments

Auth0 - Custom Domain Auth/Logging in

Checklist

Read the thread · 2025-04-28 · closed · external user · 5 comments

Most recent

Feature request: read Action trigger bindings (execution order)

Problem

There is no tool to read the bindings of an Action trigger — i.e. which actions are attached to a trigger, and the order they execute in.

auth0_list_actions (with or without trigger_id) returns each action's supported_triggers, which is the set of triggers an action could attach to. That is not the same as the bound set: an action can support post-login and not be bound to it, and the response carries no ordering.

Execution order is usually the thing you need when re

Read the thread · 2026-08-15 · open · external user · 0 comments

Feature request: Named tenant profiles for managing multiple Auth0 tenants

Checklist

Describe the problem you'd like to h

Read the thread · 2026-05-19 · open · external user · 1 comment

Stdio server emits notifications/message before initialize

Summary

@auth0/auth0-mcp-server writes a JSON-RPC notifications/message to stdout immediately on startup, before the MCP client sends initialize.

This breaks strict stdio MCP clients that expect the first server response during startup to be the initialize response.

Reproduction

timeout 5s npx -y @auth0/auth0-mcp-server@0.1.0-beta.12 run >/tmp/auth0-mcp-stdout.txt 2>/tmp/auth0-mcp-stderr.txt
cat /tmp/auth0-mcp-stdout.txt
cat /tmp/auth0-mcp-stderr.txt

Actual s

Read the thread · 2026-05-07 · closed · outside contributor · 1 comment

init --scopes offline_access,... fails because offline_access is treated as invalid

Summary

offline_access cannot be requested during init because scope validation rejects it as invalid, even though it is needed to obtain a refresh token in device flow.

Repro

npx @auth0/auth0-mcp-server init --scopes "offline_access,read:*"

Actual

CLI exits with:

Error: The following scopes are not valid: offline_access
Valid scopes are: read:clients, create:clients, update:clients, ...

Expected

offline_access should be accepted as a valid scope and

Read the thread · 2026-02-11 · open · external user · 0 comments

Add Claude Code Plugin / Marketplace

Checklist

Read the thread · 2025-10-11 · open · external user · 0 comments

During setup, accessed is granted to my Auth0 'default' tenant instead of the one last opened in the browser

Checklist

Read the thread · 2025-07-19 · closed · external user · 1 comment

NPX Init Failure - from source and simply running npx

Checklist

Read the thread · 2025-04-16 · closed · external user · 1 comment

The remaining reports are on the project's issue tracker.