RapidIdentity MCP Server

Getting Started

Using Claude Extensions

1. Download mcpb package for your OS
2. Open Claude Desktop and go to Settings ➡️ Extensions ➡️ Advanced Settings ➡️ Install Extension
3. Choose mcpb package from step 1
4. Enter Hostname and Username/Password OR Service Identity

Using Go Install

go install github.com/ramon-ramon/mcp-rapidid/cmd/mcp-rapidid

This will install the binary in the bin folder within your GOPATH. The GOPATH environment variable can be found by running the following command go env. Typically, the path to the binary, once installed, on macOS will be /Users/<username>/go/bin/mcp-rapidid.

Usage with Model Context Protocol

To integrate this server with apps that support MCP using your RapidIdentity username and password

{
  "mcpServers": {
    "mcp-rapidid": {
      "command": "/Users/kelly/go/bin/mcp-rapidid",
      "env": {
        "RI_USER": "kclarkson",
        "RI_PASSWORD": "notarealpassword123",
        "RI_HOST": "portal.us006-rapididentity.com"
      }
    }
  }
}

To integrate this server with apps that support MCP using RapidIdentity service identities. Keep in mind that Service Identities do not have access to all API endpoints even with the Tenant Admin role.

{
  "mcpServers": {
    "mcp-rapidid": {
      "command": "/Users/kelly/go/bin/mcp-rapidid",
      "env": {
        "RI_SERVICE_IDENTITY_SECRET_KEY": "1jdie203i4jjf9",
        "RI_HOST": "portal.us006-rapididentity.com"
      }
    }
  }
}

Tools

• search-users: Performs a simple search based on the delegations available to the authenticated user.
• search-entitlements-for-user: Performs a search of entitlements for the given user based on their idautoID.
• start-entitlement-request: Initiates an entitlement request for a particular user and entitlement based on idautoID and resourceId respectively.
• get-my-delegations: Gets delegations that are accessible to the authenticated user. This is based on the credentials included in your environment variables.
• get-user-info-in-delegation: Does an advanced search of a RapidID delegation.
• search-groups: Does a simple search of a RapidID group.
• get-group-members: Gets group members for a specificed RapidID group.
• get-user-activity-from-audit-log: Returns audit log activity for a specific RapidIdentity user over a given date range.

Skills

• RapidIdentity Role Mining: Process for identifying dynamic filters for static RapidID groups.