FusionAuth: MCP server, CLI and agent surfaces
Yes: FusionAuth runs a public MCP server at ai.fusionauth.dev that listed 2 tools to a client with no credentials on 4 November 2026. Examples: ask_fusionauth_question, search_fusionauth_sources. It speaks streamable-http, protocol 2025-06-18. Ora's cached score for fusionauth.io is 71, grade B, read on 5 November 2026.
Fact sheet
| Company | FusionAuth (registry title: fusionauth.io) |
|---|---|
| Domain | fusionauth.io |
| Category | Identity & Auth (Ora leaderboard category) |
| MCP server | Verified (No authentication) |
| Ora score | 71, grade B; Ora scanned the domain on 31 October 2026 and the cached score was read on 5 November 2026 from its score API (Ora's score page for fusionauth.io, a vendor-published score) |
| Company found through | Ora's public leaderboard |
| Last verified | 4 November 2026 |
MCP server
| Endpoint | https://ai.fusionauth.dev/mcp/docs |
|---|---|
| How it was found | listed in Ora's public leaderboard |
| Transport | streamable-http |
| HTTP status | 200 |
| Protocol version | 2025-06-18 |
| Server | fusionauth-docs-mcp 1.0.0 |
| Capabilities | tools |
| Tools | 2 |
| Resources | 0 |
| Prompts | 0 |
| Connected | 4 November 2026, 20:02 UTC |
| Handshake time | 1,754 ms over 1 attempt |
Tools listed
2 tools
- ask_fusionauth_question
- search_fusionauth_sources
Connector log
2 connections on 4 November 2026, read-only methods only
- 19:57:35Z https://ai.fusionauth.dev/mcp/docs sent initialize, notifications/initialized, tools/list result verified (HTTP 200) 2031 ms
- 20:03:01Z https://ai.fusionauth.dev/mcp/docs sent initialize, notifications/initialized, tools/list result verified (HTTP 200) 1754 ms
Authentication
| Auth type | No authentication |
|---|
The sign-in route, step by step
- Send the handshake to
https://ai.fusionauth.dev/mcp/docsover streamable-http. Servers on the 2026-07-28 revision answerserver/discover; older servers answerinitialize. - Send
tools/list, thenresources/listandprompts/listif the capabilities name them. - Send no token. The connector sent none and the server answered, so any MCP client can read this list.
- Calling a tool is a separate step this directory never takes.
See OAuth for MCP: client ID metadata documents and dynamic registration for how each route works.
CLI
No CLI is on record for FusionAuth. The directory checks a package only where a source names one, so this is a floor: a company can ship a command line that no source read for this edition mentions. See shipping a CLI agents can use.
Other agent surfaces
| Surface | Result |
|---|---|
| OpenAPI file | No OpenAPI file at the root paths checked. |
| WebMCP in the initial HTML | Not detected on the home page by the shared crawl. |
| MCP discovery file | Not found (the crawl got a non-200 answer). |
| A2A agent card | Not found (the crawl got a non-200 answer). |
| A2A agent card (older path) | Not found (the crawl got a non-200 answer). |
| agents.json | Not found (the crawl got a non-200 answer). |
| OAuth authorization server metadata | Not found (the crawl got a non-200 answer). |
| NLWeb endpoint | Not checked in this edition. |
Registry listings
| Registry | Listed |
|---|---|
| Official MCP Registry | Yes: io.fusionauth/mcp-docs |
| GitHub MCP Registry | No |
| awesome-remote-mcp-servers | No |
| Smithery | Not checked: Smithery's listing pages and search API were unavailable on 4 November 2026. |
| Glama | Not checked: Glama's API needs a key and attribution terms. |