# Auth0 integration

> Identity platform Management API for users, roles, applications, connections, organizations, log events, and tenant security settings.

- Authentication: apiKey

## Tools (117)

- **Add Organization Members**: Add existing users to an organization
- **Add Permissions to Role**: Attach API permissions to a role
- **Assign Organization Member Roles**: Grant roles to a member within an organization
- **Assign Permissions to User**: Directly grant API permissions to a user
- **Assign Roles to User**: Add one or more roles to a user
- **Assign Users to Role**: Add users to a role in bulk
- **Blacklist Token**: Revoke a specific JWT by its jti
- **Check Connection Status**: Health check for an enterprise connection
- **Create Action**: Create a custom Action
- **Create API (Resource Server)**: Register an API with scopes and token settings
- **Create Application**: Create a client application
- **Create Client Grant**: Authorize an application to call an API
- **Create Connection**: Create an identity connection
- **Create Custom Domain**: Register a custom domain for the tenant
- **Create Email Verification Ticket**: Generate an email-verification link
- **Create Log Stream**: Forward tenant logs to an external sink
- **Create MFA Enrollment Ticket**: Generate an MFA enrollment link for a user
- **Create Organization**: Create an organization
- **Create Organization Invitation**: Invite someone to an organization by email
- **Create Password Change Ticket**: Generate a password-reset link
- **Create Role**: Create a role
- **Create User**: Create a user in a database, passwordless, or custom connection
- **Delete Action**: Delete an Action
- **Delete API (Resource Server)**: Unregister an API
- **Delete Application**: Delete an application
- **Delete Client Grant**: Revoke an application's access to an API
- **Delete Connection**: Delete a connection and its users
- **Delete Connection User**: Delete a user from a database connection by email
- **Delete Custom Domain**: Remove a custom domain
- **Delete Grant**: Revoke a user's grant (invalidates refresh tokens)
- **Delete Log Stream**: Delete a log stream
- **Delete MFA Enrollment**: Remove a user's MFA enrollment so they re-enroll
- **Delete Organization**: Delete an organization
- **Delete Organization Invitation**: Revoke a pending invitation
- **Delete Role**: Delete a role
- **Delete User**: Permanently delete a user
- **Delete User Sessions**: Revoke all of a user's sessions (force logout)
- **Deploy Action**: Build and activate an Action's current draft
- **Export Users**: Bulk-export users to CSV/JSON (async job)
- **Get Action**: Fetch an Action with its code and status
- **Get Active Users Count**: Monthly active users for the tenant
- **Get API (Resource Server)**: Fetch an API by id or identifier
- **Get Application**: Fetch an application by client id
- **Get Breached Password Detection Settings**: Breached-password protection config
- **Get Brute Force Protection Settings**: Brute-force protection config
- **Get Connection**: Fetch a connection by id
- **Get Custom Domain**: Fetch a custom domain's status and DNS records
- **Get Daily Stats**: Daily logins and signups over a date range
- **Get Job Errors**: Per-entry failures from an import/export job
- **Get Log Event**: Fetch one log event by id
- **Get Log Stream**: Fetch one log stream
- **Get MFA Policies**: When MFA is required tenant-wide
- **Get Organization**: Fetch an organization by id
- **Get Organization by Name**: Fetch an organization by its unique name
- **Get Organization Invitation**: Fetch one invitation
- **Get Role**: Fetch a role by id
- **Get Suspicious IP Throttling Settings**: Suspicious-IP throttling config
- **Get Tenant Settings**: Tenant-wide configuration
- **Get Trigger Bindings**: Actions bound to a trigger, in execution order
- **Get User**: Fetch a single user by id
- **Get User Blocks**: Brute-force blocks currently applied to a user
- **Get User Logs**: Log events for one user (logins, failures, password changes)
- **Get Users by Email**: Exact-match lookup of users by email address
- **Import Users**: Bulk-import users from a JSON file (async job)
- **Link User Account**: Link a secondary identity into a primary user
- **List Actions**: List custom Actions (login/signup hooks)
- **List Action Triggers**: Available Action trigger points and versions
- **List APIs (Resource Servers)**: List registered APIs and their scopes
- **List Applications**: List client applications (SPA, native, M2M, regular web)
- **List Blacklisted Tokens**: JTIs currently blacklisted
- **List Client Grants**: M2M grants between applications and APIs
- **List Connections**: List identity connections (database, social, enterprise, passwordless)
- **List Custom Domains**: Configured custom domains and their verification status
- **List Grants**: User consent/refresh-token grants
- **List Log Streams**: Configured log-forwarding streams
- **List MFA Factors**: Guardian factor types and their enabled state
- **List Organization Invitations**: Pending invitations for an organization
- **List Organization Member Roles**: Roles a member holds within an organization
- **List Organization Members**: Members of an organization
- **List Organizations**: List organizations (checkpoint or page pagination)
- **List Role Permissions**: Permissions attached to a role
- **List Roles**: List tenant roles, optionally filtered by name
- **List Role Users**: Users assigned to a role
- **List Signing Keys**: Application signing keys (current, next, revoked)
- **List User MFA Enrollments**: Guardian MFA enrollments for a user
- **List User Permissions**: Direct and role-derived permissions of a user
- **List User Roles**: Roles directly assigned to a user
- **List User Sessions**: Active sessions for a user
- **Remove Organization Member Roles**: Revoke organization-scoped roles from a member
- **Remove Organization Members**: Remove members from an organization
- **Remove Permissions from Role**: Detach permissions from a role
- **Remove Permissions from User**: Revoke directly-assigned permissions from a user
- **Remove Roles from User**: Remove one or more roles from a user
- **Rotate Application Secret**: Generate a new client secret
- **Rotate Signing Key**: Rotate the tenant's JWT signing key
- **Search Log Events**: Tenant log events: logins, failures, signups, API calls
- **Search Users**: List or search users with Lucene query syntax (search_engine=v3)
- **Send Verification Email**: Have Auth0 send the verification email to a user
- **Unblock User**: Clear brute-force blocks for a user
- **Unlink User Account**: Detach a linked identity back into its own user
- **Update Action**: Update an Action's code or dependencies (creates a new draft)
- **Update API (Resource Server)**: Patch API scopes or token settings
- **Update Application**: Patch application settings (callbacks, grants, tokens)
- **Update Breached Password Detection Settings**: Configure breached-password protection
- **Update Brute Force Protection Settings**: Configure brute-force protection
- **Update Client Grant**: Change the scopes on a client grant
- **Update Connection**: Patch connection options or enabled clients
- **Update Log Stream**: Pause/resume a stream or change its sink/filters
- **Update MFA Factor**: Enable or disable an MFA factor
- **Update MFA Policies**: Set the MFA enforcement policy
- **Update Organization**: Patch organization display name, branding, or metadata
- **Update Role**: Rename or re-describe a role
- **Update Suspicious IP Throttling Settings**: Configure suspicious-IP throttling
- **Update Tenant Settings**: Patch tenant-wide configuration
- **Update Trigger Bindings**: Set which Actions run on a trigger and their order
- **Update User**: Patch user attributes, metadata, block status, or password
- **Verify Custom Domain**: Trigger DNS verification for a custom domain

## Triggers (1)

- **New Log Event in Auth0**: Triggers on new tenant log events (logins, failed logins, signups, API calls). Filter by type codes (e.g. "f, fp" for failed logins, "ss" for signups) or leave empty to fire on every event.

## Related prompts

- [Turn Auth0 signups into HubSpot leads with a Slack alert](https://www.generalinput.com/prompts/turn-auth0-signups-into-hubspot-leads-with-a-slack-alert.md)
- [Post Slack alerts for Auth0 login failures and lockouts](https://www.generalinput.com/prompts/post-slack-alerts-for-auth0-login-failures-and-lockouts.md)
- [Weekly Auth0 activity brief for ops and security teams](https://www.generalinput.com/prompts/weekly-auth0-activity-brief-for-ops-and-security-teams.md)
- [Monthly Auth0 MAU and login ledger in Google Sheets](https://www.generalinput.com/prompts/monthly-auth0-mau-and-login-ledger-in-google-sheets.md)

Connect Auth0 in General Input: https://www.generalinput.com/apps/auth0