Clerk Platform MCP Server
Enables LLMs to manage Clerk applications, domains, application transfers, instance users, JWT templates, and instance configuration via the Clerk Platform API.
Caution. Specific findings reduced this grade. They are listed on the page. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.
How we verified
Verified is a snapshot. Live keeps it current, and builds your track record.
⚡ Connect GitHub → continuous verification on every pushwhy connect →Who stands behind it
thiskevinwang
Source: Glama
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for our deepest verification, Live Monitored: read-only, revoke anytime. What we access →
Install from
The grade above is for the source repository. Registries can serve a different version, so we mark the ones we were not able to read.
These names and descriptions are the publisher's own, read from the source code. We print them as written. Our assessment is the findings above, not this list.
clerk_list_applicationsList all applications in your Clerk workspace. Returns a list of applications with their instances (development/production environments). Each instance includes its ID and publishable key. Args: - include_secret_keys (boolean): If true, include secret keys in response (default: false) Returns: …
clerk_get_applicationGet details of a specific Clerk application. Retrieves full details of an application including all its instances. Args: - application_id (string): The application ID (e.g., 'app_2abc123') - include_secret_keys (boolean): If true, include secret keys (default: false) Returns: Application ob…
clerk_create_applicationCreate a new Clerk application in your workspace. Creates a new application with the specified configuration. By default, creates both development and production instances. Args: - name (string, required): Name of the application - domain (string, optional): Domain for the application - envi…
clerk_update_applicationUpdate an existing Clerk application. Currently supports updating the application name. Args: - application_id (string, required): The application ID to update - name (string, optional): New name for the application Returns: Updated application object. Example: Input: { "application_id":…
clerk_delete_applicationDelete a Clerk application. WARNING: This permanently deletes the application and all its instances. This action cannot be undone. Args: - application_id (string, required): The application ID to delete Returns: Confirmation of deletion with the deleted object ID. Example: Input: { "applic…
clerk_upload_application_logoUpload and set an application's logo using base64-encoded image bytes.
clerk_delete_application_logoDelete an application's logo.
clerk_upload_application_faviconUpload and set an application's favicon using base64-encoded image bytes.
clerk_delete_application_faviconDelete an application's favicon.
clerk_get_config_schemaGet JSON schema for instance configuration options.
clerk_get_configGet instance configuration values.
clerk_patch_configPatch instance configuration values.
clerk_list_application_domainsList all domains for an application's production instance.
clerk_get_application_domainGet domain information for a Clerk application. Retrieves domain configuration including CNAME targets for DNS setup. Args: - application_id (string, required): The application ID - domain_id_or_name (string, required): Domain ID or domain name (e.g., 'dmn_abc123' or 'example.com') Returns: …
clerk_create_application_domainCreate a provider domain for an application's production instance.
clerk_get_application_domain_statusGet the verification status of a domain. Returns comprehensive status including DNS, SSL, mail, and proxy configuration. Args: - application_id (string, required): The application ID - domain_id_or_name (string, required): Domain ID or domain name Returns: Status object with: - status: Ov…
clerk_trigger_dns_checkTrigger a DNS verification check for a domain. Use this after configuring DNS records to verify they are correctly set up. Note: At most one DNS check can run at a time. A 409 error means a check is already in progress or was recently performed. Args: - application_id (string, required): The app…
clerk_update_application_domainUpdate the production domain for a Clerk application. Sets or changes the custom domain for the production instance. Args: - application_id (string, required): The application ID - name (string, required): The new domain name (e.g., 'auth.example.com') Returns: Updated domain object with CN…
clerk_delete_application_domainDelete a provider domain from an application's production instance.
clerk_list_jwt_templatesList JWT templates for an application instance.
clerk_create_jwt_templateCreate a JWT template for an application instance.
clerk_get_jwt_templateGet a JWT template by ID.
clerk_update_jwt_templateUpdate a JWT template by ID.
clerk_delete_jwt_templateDelete a JWT template by ID.
clerk_list_application_transfersList all application transfer requests in your workspace. Returns transfers sorted by creation date (most recent first). Args: - status (array, optional): Filter by status ('pending', 'completed', 'canceled', 'expired') - limit (number, optional): Results per page, 1-500 (default: 10) - star…
clerk_create_application_transferCreate a transfer request to move an application to another workspace. Initiates a transfer that must be claimed by the recipient using the provided code. Only one pending transfer can exist per application. Transfers expire after 24 hours. Args: - application_id (string, required): The applicat…
clerk_get_application_transferGet details of a specific application transfer. Args: - application_id (string, required): The application ID - transfer_id (string, required): The transfer ID Returns: Transfer object with current status and timestamps. Example: Input: { "application_id": "app_abc123", "transfer_id": "ap…
clerk_cancel_application_transferCancel a pending application transfer. Only transfers with 'pending' status can be canceled. Once canceled, the transfer code becomes invalid and the application remains in the current workspace. Args: - application_id (string, required): The application ID - transfer_id (string, required): Th…
clerk_list_instance_usersList users for an application instance with optional filtering and pagination.
clerk_ban_instance_userBan a user in an application instance.
clerk_unban_instance_userUnban a user in an application instance.
Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.
Anthropic's MCP TypeScript SDK has a ReDoS vulnerability
Model Context Protocol (MCP) TypeScript SDK does not enable DNS rebinding protection by default
CLERK_PLATFORM_API_KEYSet the environment variable:Tool inputs are validated
Only 0/31 tool handlers declare input schemas (0%)
Declare an inputSchema with zod/joi/yup on every tool definition.
License file
No license file
Add a LICENSE file (MIT, Apache-2.0, etc.).
Tests exist
No test files found
Add tests that exercise each declared tool.
Production dependencies are patched
0 critical, 2 high severity in production deps — @modelcontextprotocol/sdk@1.6.1 (high), @modelcontextprotocol/sdk@1.6.1 (high)
Run npm audit fix, or upgrade the affected packages to a non-vulnerable version.
Claim the listing to review these findings one by one and send us a correction where you disagree, straight to the team. Claiming also means we tell you when the grade moves, and reach you first if we find anything urgent.
[](https://m8ven.ai/mcp/thiskevinwang/2026-01-07-plapi-mcp)?variant=verified from the URL.Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.
https://m8ven.ai/api/mcp/tool-check