@clerk/mcp-tools — Watchlist

MCP100 Assessment

Watchlist / Tracking

Why we’re tracking it

Recheck a specific changing behavior of npm/@clerk/mcp-tools: Have token-validation and authorization-metadata requirements changed for MCP integrations?

Reviewed Oct 9, 2026 · Documentation review; complete setup workflow not independently tested

Best fit

Developers implementing MCP authentication

What we know

Clerk MCP Tools is a library for implementing authenticated MCP clients and servers.

Maintenance / activity evidence

Clerk mcp-tools repository committed a v0.6.0 release on 2026-07-14.

Tracking evidence observed Oct 9, 2026. These dated signals do not establish current maintenance. Reviewed enrichment confidence: high.

Activity source · commits ↗

Verification gaps / watch-outs

Installation and comprehensive security have not been independently audited.
Embedded developer library, not an end-user executable MCP server. Complete write authority is not verified.
Authentication not yet verified.
Clerk-owned authenticated MCP client/server integration library. Requires application, provider configuration and appropriate permission scopes.

Clerk-owned authenticated MCP client/server integration library. Requires application, provider configuration and appropriate permission scopes.
Advisory/security review not completed; no safety badge.
Unknown vulnerabilities and provider data handling are not certified by this public tracking review.

Full authority, access and evidence limits are available in Review context and Access & risk.

Popularity

50 shared-repository stars · 755.5k package downloads / 30 days

Stars observed Oct 9, 2026. Downloads observed Oct 9, 2026.

Repository total for clerk/mcp-tools; not package-specific.

Exact npm package @clerk/mcp-tools; provider interval 2026-09-08–2026-10-07 (inclusive); observed 2026-10-09.

All limitations / Review context

Have token-validation and authorization-metadata requirements changed for MCP integrations?

No identified material blocker to an accurately qualified public tracking entry in the limited cited evidence. This is not an installation safety certification; product-specific cautions must remain visible.

Clerk-owned authenticated MCP client/server integration library. Requires application, provider configuration and appropriate permission scopes.
Advisory/security review not completed; no safety badge.
Embedded developer library, not an end-user executable MCP server.
Complete write authority is not verified.
Installation, client compatibility and comprehensive security have not been independently audited. Authentication and access depend on the configured services.
Auth helper does not replace server authorization policy; host integration and token handling remain developer responsibilities.
Unknown vulnerabilities and provider data handling are not certified by this public tracking review.
Release evidence proves attributable activity, not entire installation or tool-level safety.
Current Discovery source binding and atomic apply must be generated using MCP100 existing pipeline.
exact authentication contract
first-party data processing and retention
data retention and permission scope
Write actions/tool inventory not confirmed against exact tool documentation; listed action classes remain illustrative or context-dependent. Empty inventory does not establish read-only.
Not an installable end-user MCP Server.
This is not a standalone general-purpose MCP server; use the resource-type-specific setup and expectations.
Radar public tracking editorial review completed in limited scope; not a security or installation certification. Verify setup according to deployment mode and do not invent unresolved facts.

Original activity observations

Clerk mcp-tools repository committed a v0.6.0 release on 2026-07-14.

Technical identity

npm/@clerk/mcp-tools

Exact implementation source: https://www.npmjs.com/package/@clerk%2Fmcp-tools ↗
Reviewed resource type: SDK
Repository identity: clerk/mcp-tools
Package identity: npm:@clerk/mcp-tools

Evidence & Sources

Evidence basis: Recorded source evidence
Setup runtime verification: Not independently runtime-tested by MCP100 for this setup workflow.

Reviewed Oct 9, 2026 · Latest source observation Oct 9, 2026

GitHub repository ↗
clerk/mcp-tools
Recorded repository material and project history.
Includes references whose attribution is not established.
Package registry ↗
@clerk/mcp-tools
Recorded package identity, distribution or download evidence.
Includes references whose attribution is not established.

Setup · Watchlist

SDK setup

Publisher instructions.

Source evidence observed Oct 14, 2026.

Additional setup details required — see the specific gaps below.

Install / connect
Publisher instructions
Developer library built on MCP TypeScript SDK for OAuth protected resource and authorization metadata; no generic stdio MCP server. See framework-specific Clerk examples.
sdk install not standalone mcp · Publisher instructions
npm install @clerk/mcp-tools
Configure / authenticate
MCP100 setup guide
`@clerk/mcp-tools` is an SDK for implementing MCP OAuth client tools in an application. Install with the documented package-manager command in the app and integrate its OAuth callback/metadata routes; it is not a standalone MCP server to register.
Check connection
Suggested check
Verify SDK initialization and protected-resource/OAuth metadata in the application; do not expect a `claude mcp` server just from installing the SDK.
Remove / uninstall / revoke
MCP100 setup guide
Remove the SDK/import or integration from the consuming application, then uninstall only its exact package if installed; stop any app server separately. This product does not by itself create an MCP host registration.
Client unregister, package uninstall, data deletion, and OAuth/API token/wallet permissions are distinct.
Package / application cleanup · matching installation environment · MCP100 composed guide
npm uninstall @clerk/mcp-tools

Official Documentation & Sources

What it does

Clerk MCP Tools is a library for implementing authenticated MCP clients and servers.

Capability: Security & Testing
Resource type: SDK
Best fit: Developers implementing MCP authentication

Representative uses

MCP client/server helper library
auth integration

Limitations

Not an installable end-user MCP Server.
This is not a standalone general-purpose MCP server; use the resource-type-specific setup and expectations.
Radar public tracking editorial review completed in limited scope; not a security or installation certification. Verify setup according to deployment mode and do not invent unresolved facts.

Reviewed access

Access & risk

Review the exact access boundary before connecting this MCP to accounts, credentials, or sensitive data.

Authentication: Not documented in the reviewed sources
Permissions: Embedded developer library, not an end-user executable MCP server.
Data handling: Not documented in the reviewed sources
Cost: unknown
Risk and cautions: Clerk-owned authenticated MCP client/server integration library. Requires application, provider configuration and appropriate permission scopes.

Access scope and cautions

Write actions: Not verified
Risk level: moderate
Security notes: Advisory/security review not completed; no safety badge.

The reviewed evidence does not establish the complete write authority of this MCP. Consult the unresolved evidence before granting write access.

FAQ

Based on reviewed evidence as of 2026-10-09. Watchlist tracking is not a recommendation or a security certification.

Which tasks are documented for this implementation?

The reviewed tasks include: MCP client/server helper library; auth integration.

What setup and authentication are documented?

A complete connection procedure is not verified. Client notes: Validate integrated app auth flow; no standalone MCP tools/list test. These facts do not supply missing installation commands, credentials or a verified authentication procedure. Authentication: Library integrates Clerk authentication into a developer-operated MCP client/server; no standalone login.

Can it modify data or perform write operations?

Not verified. The available evidence does not establish the complete write authority. Recorded permission context: Embedded developer library, not an end-user executable MCP server.

What limitations and risks should I check before use?

Clerk-owned authenticated MCP client/server integration library. Requires application, provider configuration and appropriate permission scopes. Not an installable end-user MCP Server. This is not a standalone general-purpose MCP server; use the resource-type-specific setup and expectations. Radar public tracking editorial review completed in limited scope; not a security or installation certification. Verify setup according to deployment mode. Advisory/security review not completed; no safety badge. Auth helper does not replace server authorization policy; host integration and token handling remain developer responsibilities. Unknown vulnerabilities and provider data handling are not certified by this public tracking review.