Okta Workspace MCP

Item: Okta Workspace MCP
Rating: 74
Author: M8ven

A community security-research MCP server providing Browser Session and OIDC authentication for Okta workspaces, enabling read-only exploration of Okta organizations and user identity.

→ oreneHack/okta_mcp · listed on glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

✅

Open source with a license and README

Anyone can audit the code, the license is declared, and the publisher documents what it does.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configCODEX_CLI_PATH

configCODEX_HOME

configOKTA_AUTH_SERVER

configOKTA_CLIENT_ID

configOKTA_MCP_ALLOW_INSECURE_HTTP

configOKTA_MCP_AUTHORIZED_LAB

configOKTA_MCP_BROWSER_WORKER

configOKTA_MCP_COLLECTOR_HOST

configOKTA_MCP_COLLECTOR_OUTPUT_DIR

configOKTA_MCP_COLLECTOR_PORT

configOKTA_MCP_CONFIG_DIR

configOKTA_MCP_LAB_BROWSER

configOKTA_MCP_LAB_COLLECTOR

configOKTA_MCP_PROOF_RETENTION

configOKTA_OAUTH_CALLBACK_HOST

configOKTA_OAUTH_CALLBACK_PORT

configOKTA_ORG_URL

configOKTA_SCOPES

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 6 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/orenehack-okta-mcp-auutk3)](https://m8ven.ai/mcp/orenehack-okta-mcp-auutk3)

commit: b7d64bf5f7ba41b2254b947e7002dd0ce96f345e

code hash: fe158f29c8d8f5374b83d6b9de6a5c7d5b75f1524a9b475f73bec7ddefaf9deb

verified: 7/21/2026, 8:57:35 AM

view raw JSON →