Okta MCP Server API release notes (2026)

Subscribe to RSS

These release notes list customer-visible changes to the Okta MCP server.

June

Monthly release 2026.06.0

Change	Expected in Preview Orgs
Customization tools for Okta MCP server is GA in Production	June 3, 2026
Scope-based tool loading for Okta MCP server is GA in Production	June 3, 2026
Device Assurance Policy tools for Okta MCP server is GA in Production	June 3, 2026

Customization tools for Okta MCP server is GA in Production

The Okta MCP server introduces customization tools for AI clients. These tools manage Okta brands, custom domains, sign-in pages, email templates, and themes using natural language. Admins can tailor the end-user identity experience without using the Okta Admin Console. See Example commands.

Scope-based tool loading for Okta MCP server is GA in Production

The Okta MCP server features scope-based tool loading to enforce least privilege and reduce token usage. The server exposes tools to the AI client based strictly on OAuth scopes and authenticated user privileges. This contextual exposure prevents the LLM from receiving unauthorized or irrelevant capabilities. To learn more about scope-tool mapping and enabling this feature, see Configure scope-based tool loading.

Device Assurance Policy tools for Okta MCP server is GA in Production

The Okta MCP server includes Device Assurance Policy tools for AI agents. These tools programmatically retrieve, configure, and evaluate device posture requirements using natural language. Admins can audit or update prerequisites like OS versions directly within agent-led workflows. See Example commands.

March

Monthly release 2026.03.0

Change	Expected in Preview Orgs
Human oversight for destructive actions	March 4, 2026
Developer documentation update in 2026.03.0	March 4, 2026

Human oversight for destructive actions

The Okta Model Context Protocol (MCP) server now integrates the MCP Elicitation API to enforce human oversight on destructive actions. Critical operations, such as deleting apps or deactivating users, now require explicit confirmation before execution. Supported MCP clients display a chat UI dialog for users to accept or decline the request. For clients that don't support elicitation, the server returns a JSON payload for the LLM to handle confirmation.

Developer documentation update in 2026.03.0

Okta's API reference pages (opens new window) are undergoing a migration, which started on February 24. While the look and feel may vary across pages during this time, all technical documentation remains accurate and up to date.

February

Monthly release 2026.02.0

Change	Expected in Preview Orgs
Okta MCP server is GA in Production	February 4, 2026
Developer documentation updates in 2026.02.0	February 4, 2026

Okta MCP server is GA in Production

The Okta Model Context Protocol (MCP) server is a secure protocol abstraction layer that enables AI agents/Large Language Models (LLMs) to interact with the Okta org. The MCP clients can now communicate with Okta’s scoped management APIs in natural language. This simplifies building context-aware AI workflows while ensuring strict access control and least-privilege security. To learn more and start your implementation, see the Okta MCP server concept and Okta MCP server guide.

Developer documentation updates in 2026.02.0

The Okta developer portal search results now include the API references.