@zalt/mcp-server

Model Context Protocol (MCP) server for Zalt.io authentication. Enables AI assistants like Claude, Cursor, and Kiro to manage authentication.

Installation

npm install -g @zalt/mcp-server

Configuration

Claude Desktop

Add to ~/Library/Application Support/Claude/claude_desktop_config.json:

{
  "mcpServers": {
    "zalt": {
      "command": "zalt-mcp",
      "env": {
        "ZALT_API_URL": "https://api.zalt.io",
        "ZALT_ADMIN_KEY": "your-admin-key"
      }
    }
  }
}

Cursor

Add to .cursor/mcp.json:

{
  "mcpServers": {
    "zalt": {
      "command": "npx",
      "args": ["@zalt/mcp-server"],
      "env": {
        "ZALT_ADMIN_KEY": "your-admin-key"
      }
    }
  }
}

Kiro

Add to .kiro/settings/mcp.json:

{
  "mcpServers": {
    "zalt": {
      "command": "npx",
      "args": ["@zalt/mcp-server"],
      "env": {
        "ZALT_ADMIN_KEY": "your-admin-key"
      }
    }
  }
}

Available Tools

zalt_create_realm

Create a new authentication realm.

Input:
- name: Display name for the realm
- domain: Associated domain (optional)

Output:
- realm_id: Use this in your SDK configuration

zalt_list_realms

List all realms in your account.

zalt_create_user

Create a new user in a realm.

Input:
- realm_id: Target realm
- email: User email
- password: User password
- first_name: Optional
- last_name: Optional

zalt_check_auth_status

Check Zalt API health and configuration.

zalt_get_sdk_snippet

Get code snippets for SDK integration.

Input:
- framework: 'react' | 'nextjs' | 'node' | 'vanilla'
- feature: 'login' | 'register' | 'mfa' | 'webauthn' | 'provider'

zalt_security_check

Analyze code for security issues.

Input:
- code: Code to analyze

Checks for:
- Token storage in localStorage
- Logging sensitive data
- SMS MFA without risk acceptance
- Missing httpOnly cookies
- XSS vulnerabilities

Available Resources

zalt://docs/quickstart

Quick start guide for Zalt SDK.

zalt://docs/security

Security best practices documentation.

Example Usage

Ask your AI assistant:

• "Create a new Zalt realm for my project"
• "Show me how to add authentication to my Next.js app"
• "Check this code for security issues"
• "What's the status of the Zalt API?"

Environment Variables

| Variable | Description | Default | |----------|-------------|---------| | ZALT_API_URL | Zalt API endpoint | https://api.zalt.io | | ZALT_ADMIN_KEY | Admin API key | Required |

Security

• Admin key is stored securely in environment
• All API calls use HTTPS
• No sensitive data logged

License

MIT