# Identity and provisioning MCP tools

This page documents **15 tools** in the identity and provisioning group. Return to the [complete MCP tool reference](/docs/developers/api/mcp/tools) to browse another group.

Select a tool to inspect its schemas and behavior. Schema links open the exact definition in GitHub.

### `listUsers` — List Users

List all users for the organization.

- **Input:** [`ListUsersInput`](/docs)
- **Output:** [`ListUsersOutput`](/docs)
- **Behavior:** Read only · Non-destructive · Idempotent · Closed world
- **Source:** [specification.yaml · L14317–L14328 ↗](/docs)

### `getUser` — Get User

Get a user by ID (profile ID).

- **Input:** [`GetUserInput`](/docs)
- **Output:** [`GetUserOutput`](/docs)
- **Behavior:** Read only · Non-destructive · Idempotent · Closed world
- **Source:** [specification.yaml · L14329–L14340 ↗](/docs)

### `createUser` — Create User

Create a new user in the organization.

- **Input:** [`CreateUserInput`](/docs)
- **Output:** [`CreateUserOutput`](/docs)
- **Behavior:** Writes data · Non-destructive · Non-idempotent · Closed world
- **Source:** [specification.yaml · L14341–L14352 ↗](/docs)

### `inviteUser` — Invite User

Invite a user (profile) to the organization.

- **Input:** [`InviteUserInput`](/docs)
- **Output:** [`InviteUserOutput`](/docs)
- **Behavior:** Writes data · Non-destructive · Non-idempotent · Closed world
- **Source:** [specification.yaml · L14353–L14364 ↗](/docs)

### `updateUser` — Update User

Update an existing user (profile).

- **Input:** [`UpdateUserInput`](/docs)
- **Output:** [`UpdateUserOutput`](/docs)
- **Behavior:** Writes data · Non-destructive · Idempotent · Closed world
- **Source:** [specification.yaml · L14365–L14376 ↗](/docs)

### `updateMembership` — Update Membership

Update a membership role.

- **Input:** [`UpdateMembershipInput`](/docs)
- **Output:** [`UpdateMembershipOutput`](/docs)
- **Behavior:** Writes data · Non-destructive · Idempotent · Closed world
- **Source:** [specification.yaml · L14377–L14388 ↗](/docs)

### `removeUser` — Remove User

Remove a user from the organization.

- **Input:** [`RemoveUserInput`](/docs)
- **Output:** [`RemoveUserOutput`](/docs)
- **Behavior:** Writes data · Destructive · Idempotent · Closed world
- **Source:** [specification.yaml · L14389–L14400 ↗](/docs)

### `deactivateUser` — Deactivate User

Deactivate a user in the organization.

- **Input:** [`DeactivateUserInput`](/docs)
- **Output:** [`DeactivateUserOutput`](/docs)
- **Behavior:** Writes data · Non-destructive · Idempotent · Closed world
- **Source:** [specification.yaml · L14401–L14412 ↗](/docs)

### `getSCIMConfiguration` — Get SCIM Configuration

Get the SCIM configuration for an organization.

- **Input:** [`GetSCIMConfigurationInput`](/docs)
- **Output:** [`GetSCIMConfigurationOutput`](/docs)
- **Behavior:** Read only · Non-destructive · Idempotent · Closed world
- **Source:** [specification.yaml · L17545–L17556 ↗](/docs)

### `createSCIMConfiguration` — Create SCIM Configuration

Create a SCIM configuration for an organization. Optionally provide a connector ID to also create a SCIM bridge.

- **Input:** [`CreateSCIMConfigurationInput`](/docs)
- **Output:** [`CreateSCIMConfigurationOutput`](/docs)
- **Behavior:** Writes data · Non-destructive · Non-idempotent · Closed world
- **Source:** [specification.yaml · L17557–L17568 ↗](/docs)

### `deleteSCIMConfiguration` — Delete SCIM Configuration

Delete a SCIM configuration and its associated bridge.

- **Input:** [`DeleteSCIMConfigurationInput`](/docs)
- **Output:** [`DeleteSCIMConfigurationOutput`](/docs)
- **Behavior:** Writes data · Destructive · Idempotent · Closed world
- **Source:** [specification.yaml · L17569–L17580 ↗](/docs)

### `regenerateSCIMToken` — Regenerate SCIM Token

Regenerate the bearer token for a SCIM configuration.

- **Input:** [`RegenerateSCIMTokenInput`](/docs)
- **Output:** [`RegenerateSCIMTokenOutput`](/docs)
- **Behavior:** Writes data · Destructive · Non-idempotent · Closed world
- **Source:** [specification.yaml · L17581–L17592 ↗](/docs)

### `getSCIMBridge` — Get SCIM Bridge

Get a SCIM bridge by ID.

- **Input:** [`GetSCIMBridgeInput`](/docs)
- **Output:** [`GetSCIMBridgeOutput`](/docs)
- **Behavior:** Read only · Non-destructive · Idempotent · Closed world
- **Source:** [specification.yaml · L17593–L17604 ↗](/docs)

### `updateSCIMBridge` — Update SCIM Bridge

Update a SCIM bridge's excluded user names.

- **Input:** [`UpdateSCIMBridgeInput`](/docs)
- **Output:** [`UpdateSCIMBridgeOutput`](/docs)
- **Behavior:** Writes data · Non-destructive · Idempotent · Closed world
- **Source:** [specification.yaml · L17605–L17616 ↗](/docs)

### `listSCIMEvents` — List SCIM Events

List SCIM events for a configuration.

- **Input:** [`ListSCIMEventsInput`](/docs)
- **Output:** [`ListSCIMEventsOutput`](/docs)
- **Behavior:** Read only · Non-destructive · Idempotent · Closed world
- **Source:** [specification.yaml · L17617–L17628 ↗](/docs)