Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, email [email protected] and we’ll put it right.

Vee3

REMOTE · MCP.VEE3.IO · SCANNED AUG 3

Hosted MCP with 91 agent tools: X, domains, SEO, Maps, Trends, Search, YouTube, TikTok, and more.

Available components

+1 this week 61 Trust /100
Trust breakdown (6 categories)

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score →

Endpoint Security57
Transport & Reachability100
Schema Quality & AI Usability63
  • AI-judged instruction clarity (good).Pass
  • Context-footprint check failed: tool/resource definitions use about 34744 tokens (~144/item across 240 items; 240 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management6
  • Stability check failed: schema churn in the 8 days we've observed: 62 tool removals, 0 breaking changes, 0 auth/transport breaks, 6 additions. See how to fix → Fail
Tool Coverage100
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 100% of tool parameters carry a description.Pass
  • Structured output schemas are declared (100% of tools); any adoption earns full credit.Pass
Capabilities100
  • Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Install

Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.

remote · mcp.vee3.io

# add to Claude Code
claude mcp add --transport http vee3io-vee3 https://mcp.vee3.io/mcp
# ~/.codex/config.toml
[mcp_servers.vee3io-vee3]
url = "https://mcp.vee3.io/mcp"
// opencode.json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "vee3io-vee3": {
      "type": "remote",
      "url": "https://mcp.vee3.io/mcp",
      "enabled": true
    }
  }
}
# add to OpenClaw
openclaw mcp add vee3io-vee3 --url https://mcp.vee3.io/mcp --transport streamable-http
# ~/.hermes/config.yaml
mcp_servers:
  vee3io-vee3:
    url: "https://mcp.vee3.io/mcp"
// mcp.json
{
  "mcpServers": {
    "vee3io-vee3": {
      "type": "http",
      "url": "https://mcp.vee3.io/mcp"
    }
  }
}

The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 2 Aug 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 0 to 2.

  • 31 Jul 26 −1
    • We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
  • 30 Jul 26 0
    • We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
  • 29 Jul 26 +1
    • This server's schema is too large to store in full, so we cannot compare its tools day to day functional
  • 28 Jul 26 0
    • This server's schema is too large to store in full, so we cannot compare its tools day to day functional
  • 27 Jul 26 0
    • We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
  • 26 Jul 26 60

    First indexed and scored.

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 3 Aug 2026 · Probed https://mcp.vee3.io/mcp

TLS valid

Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .

Subject Issuer Valid from Valid until Key Signature Serial
CN=mcp.vee3.io CN=WR3,O=Google Trust Services,C=US 19 Jul 2026 17 Oct 2026 RSA 2048 SHA256-RSA 299afbdbcd59affa0a0a4719cdd2adf2
SANs: mcp.vee3.io
CN=WR3,O=Google Trust Services,C=US (CA) CN=GTS Root R1,O=Google Trust Services LLC,C=US 13 Dec 2023 20 Feb 2029 RSA 2048 SHA256-RSA 7ff005a91568d63abc22861684aa4b5a
CN=GTS Root R1,O=Google Trust Services LLC,C=US (CA) CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE 19 Jun 2020 28 Jan 2028 RSA 4096 SHA256-RSA 77bd0d6cdb36f91aea210fc4f058d30d
DNSSEC insecure

Validation of mcp.vee3.io. Not signed

Zone DS Keys Algorithms Outcome
. trust_anchor 20326, 38696 8, 8 Verified
io. present 57355 8 Verified
vee3.io. absent Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation
Authentication No authorisation required

The endpoint answered without asking for a token. Anyone who knows the URL can reach it.

Result No authorisation required
HTTP status 200
Transports 2 probes
Transport URL Outcome Status Location
streamable-http https://mcp.vee3.io/mcp Verified 200
http (plaintext) http://mcp.vee3.io/mcp HTTPS enforced 302 https://mcp.vee3.io/mcp
MCP tools — 240 exposed · ~33,938 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.

Tool Tokens
clerk.list_organizations ~147

List organizations in a connected Clerk application. Call clerk.get_connected_accounts first. Pass clerk_instance_id to target a specific connection, or omit it to use the default account. Returns organization id, name, slug, members_count, and created_at for each organization, plus total_count. Cost = 5 tokens.

NameTypeReqDescription
clerk_instance_idClerk instance id (ins_...) from clerk.get_connected_accounts. Omit to use the default connected account.
limitintegerMaximum number of organizations to return (1–500).
offsetintegerNumber of organizations to skip before returning results.
queryOptional search string to filter organizations by name or slug.
NameTypeReqDescription
organizationsOrganizations returned for the requested page.
total_countTotal number of organizations in the Clerk application.

No examples provided.

clerk.list_redirect_urls ~122

List allowed redirect URLs for a connected Clerk instance. Call clerk.get_connected_accounts first. Pass clerk_instance_id to target a specific connection, or omit it to use the default account. Returns redirect URL summaries and total_count. Cost = 5 tokens.

NameTypeReqDescription
clerk_instance_idClerk instance id (ins_...) from clerk.get_connected_accounts. Omit to use the default connected account.
limitintegerMaximum number of redirect URLs to return (1–500).
offsetintegerNumber of redirect URLs to skip before returning results.
NameTypeReqDescription
redirect_urlsAllowed redirect URLs returned for the requested page.
total_countTotal number of redirect URLs.

No examples provided.

clerk.list_sessions ~210

List sessions in a connected Clerk application. Call clerk.get_connected_accounts first. Pass clerk_instance_id to target a specific connection, or omit it to use the default account. Returns session id, user_id, status, last_active_at, and expire_at for each session. Cost = 5 tokens.

NameTypeReqDescription
clerk_instance_idClerk instance id (ins_...) from clerk.get_connected_accounts. Omit to use the default connected account.
client_idFilter sessions to those belonging to this Clerk client id (client_...).
limitintegerMaximum number of sessions to return (1–500).
offsetintegerNumber of sessions to skip before returning results.
statusFilter sessions by status. Accepted values: abandoned, active, ended, expired, removed, replaced, revoked.
user_idFilter sessions to those belonging to this Clerk user id (user_...). Clerk requires user_id or client_id when listing sessions; pass user_id here.
NameTypeReqDescription
sessionsSessions returned for the requested page.
total_countTotal number of sessions returned.

No examples provided.

clerk.list_user_organization_memberships ~144

List all organizations a specific Clerk user belongs to. Call clerk.get_connected_accounts first. Pass clerk_instance_id to target a specific connection, or omit it to use the default account. Returns membership id, organization_id, role, and timestamps. Cost = 5 tokens.

NameTypeReqDescription
clerk_instance_idClerk instance id (ins_...) from clerk.get_connected_accounts. Omit to use the default connected account.
limitMaximum number of organization memberships to return (1–500).
offsetNumber of organization memberships to skip before returning results.
user_idstringyesClerk user id (user_...) whose memberships to list.
NameTypeReqDescription
membershipsOrganization memberships for the user.
total_countTotal number of organization memberships for the user.

No examples provided.

clerk.list_users ~129

List users in a connected Clerk application. Call clerk.get_connected_accounts first. Pass clerk_instance_id to target a specific connection, or omit it to use the default account. Returns user id, name, primary email, and created_at for each user, plus total_count. Cost = 5 tokens.

NameTypeReqDescription
clerk_instance_idClerk instance id (ins_...) from clerk.get_connected_accounts. Omit to use the default connected account.
limitintegerMaximum number of users to return (1–500).
offsetintegerNumber of users to skip before returning results.
NameTypeReqDescription
total_countTotal number of users in the Clerk application.
usersUsers returned for the requested page.

No examples provided.

clerk.list_waitlist_entries ~193

List waitlist entries in a connected Clerk application. Call clerk.get_connected_accounts first. Pass clerk_instance_id to target a specific connection, or omit it to use the default account. Returns waitlist entry summaries and total_count. Cost = 5 tokens.

NameTypeReqDescription
clerk_instance_idClerk instance id (ins_...) from clerk.get_connected_accounts. Omit to use the default connected account.
limitintegerMaximum number of waitlist entries to return (1–500).
offsetintegerNumber of waitlist entries to skip before returning results.
order_bySort order: created_at, email_address, or invited_at with optional + or - prefix. Defaults to -created_at.
queryFilter by email address or waitlist entry id.
statusOptional status filter: "pending", "invited", "rejected", or "completed".
NameTypeReqDescription
total_countTotal number of waitlist entries on this page.
waitlist_entriesWaitlist entries returned for the requested page.

No examples provided.

clerk.reject_waitlist_entry ~112

Reject a waitlist entry in a connected Clerk application. Call clerk.get_connected_accounts first. Pass clerk_instance_id to target a specific connection, or omit it to use the default account. Returns the updated waitlist entry. Cost = 10 tokens.

NameTypeReqDescription
clerk_instance_idClerk instance id (ins_...) from clerk.get_connected_accounts. Omit to use the default connected account.
waitlist_entry_idstringyesClerk waitlist entry id (wle_...) to operate on.
NameTypeReqDescription
waitlist_entryUpdated Clerk waitlist entry after rejection.

No examples provided.

clerk.replace_user_metadata ~154

Replace the entire contents of one metadata namespace for a Clerk user. Call clerk.get_connected_accounts first. Pass clerk_instance_id to target a specific connection, or omit it to use the default account. The metadata body fully replaces the chosen namespace. Returns the updated user summary. Cost = 8 tokens.

NameTypeReqDescription
clerk_instance_idClerk instance id (ins_...) from clerk.get_connected_accounts. Omit to use the default connected account.
metadataobjectyesNew metadata dict that fully replaces the chosen namespace. Pass an empty object to clear all keys.
metadata_typestringyesMetadata namespace to replace.
user_idstringyesClerk user id (user_...) whose metadata to replace.
NameTypeReqDescription
userUpdated Clerk user object after the metadata replacement.

No examples provided.

clerk.revoke_actor_token ~127

Revoke an actor token in a connected Clerk application so it can no longer be used for impersonation. **Sensitive** — invalidates a high-privilege token. Call clerk.get_connected_accounts first. Pass clerk_instance_id to target a specific connection, or omit it to use the default account. Returns the revoked actor token object. Cost = 5 tokens.

NameTypeReqDescription
actor_token_idstringyesClerk actor token id to revoke.
clerk_instance_idClerk instance id (ins_...) from clerk.get_connected_accounts. Omit to use the default connected account.
NameTypeReqDescription
actor_tokenRevoked Clerk actor token object from the Backend API.

No examples provided.

clerk.revoke_admin_portal_link_token ~150

Revoke an admin portal link token by id in a connected Clerk instance. **Sensitive** — invalidates a single-use deep-link token. Call clerk.get_connected_accounts first. Pass clerk_instance_id to target a specific connection, or omit it to use the default account. Returns the revoked admin portal link token. Cost = 8 tokens.

NameTypeReqDescription
admin_portal_link_token_idstringyesAdmin portal link token id (aplt_...) to revoke.
clerk_instance_idClerk instance id (ins_...) from clerk.get_connected_accounts. Omit to use the default connected account.
revocation_reasonOptional reason recorded when revoking the link token.
NameTypeReqDescription
admin_portal_link_tokenRevoked admin portal link token from the Backend API.

No examples provided.

clerk.revoke_api_key ~138

Revoke an API key in a connected Clerk application so it can no longer be used. Call clerk.get_connected_accounts first. Pass clerk_instance_id to target a specific connection, or omit it to use the default account. Returns the revoked API key summary. Cost = 8 tokens.

NameTypeReqDescription
api_key_idstringyesClerk API key id (ak_...) to retrieve, update, delete, or revoke.
clerk_instance_idClerk instance id (ins_...) from clerk.get_connected_accounts. Omit to use the default connected account.
revocation_reasonOptional reason recorded when revoking the API key.
NameTypeReqDescription
api_keyRevoked Clerk API key from the Backend API.

No examples provided.

clerk.revoke_invitation ~106

Revoke a pending application invitation by invitation id. Call clerk.get_connected_accounts first. Pass clerk_instance_id to target a specific connection, or omit it to use the default account. Only pending invitations can be revoked. Cost = 5 tokens.

NameTypeReqDescription
clerk_instance_idClerk instance id (ins_...) from clerk.get_connected_accounts. Omit to use the default connected account.
invitation_idstringyesClerk application invitation id (inv_...) to revoke.
NameTypeReqDescription
invitationRevoked Clerk invitation object from the Backend API.

No examples provided.

clerk.revoke_m2m_token ~130

Revoke an M2M token by id in a connected Clerk instance. **Sensitive** — invalidates a machine authentication token. Call clerk.get_connected_accounts first. Pass clerk_instance_id to target a specific connection, or omit it to use the default account. Returns the revoked M2M token. Cost = 8 tokens.

NameTypeReqDescription
clerk_instance_idClerk instance id (ins_...) from clerk.get_connected_accounts. Omit to use the default connected account.
m2m_token_idstringyesClerk M2M token id (mt_...) to revoke.
NameTypeReqDescription
m2m_tokenRevoked M2M token from the Backend API.

No examples provided.

clerk.revoke_organization_invitation ~132

Revoke a pending Clerk organization invitation. Call clerk.get_connected_accounts first. Pass clerk_instance_id to target a specific connection, or omit it to use the default account. Only pending invitations can be revoked. Returns the updated invitation summary with status revoked. Cost = 5 tokens.

NameTypeReqDescription
clerk_instance_idClerk instance id (ins_...) from clerk.get_connected_accounts. Omit to use the default connected account.
invitation_idstringyesClerk organization invitation id (orginv_...).
organization_idstringyesClerk organization id (org_...) to operate on.
NameTypeReqDescription
invitationRevoked organization invitation summary.

No examples provided.

clerk.revoke_session ~114

Revoke a session in a connected Clerk application, immediately ending it. Call clerk.get_connected_accounts first. Pass clerk_instance_id to target a specific connection, or omit it to use the default account. Returns the revoked session object with status set to revoked. Cost = 5 tokens.

NameTypeReqDescription
clerk_instance_idClerk instance id (ins_...) from clerk.get_connected_accounts. Omit to use the default connected account.
session_idstringyesClerk session id (sess_...) to retrieve or modify.
NameTypeReqDescription
client_idClerk client id associated with this session.
created_atUnix timestamp in milliseconds when the session was created.
expire_atUnix timestamp in milliseconds when this session expires.
idClerk session id (sess_...).
last_active_atUnix timestamp in milliseconds of the last activity on this session.
statusCurrent status of the session.
updated_atUnix timestamp in milliseconds when the session was last updated.
user_idClerk user id (user_...) that owns this session.

No examples provided.

clerk.revoke_sign_in_token ~129

Revoke a sign-in token in a connected Clerk application so it can no longer be used. **Sensitive** — invalidates a high-privilege token. Call clerk.get_connected_accounts first. Pass clerk_instance_id to target a specific connection, or omit it to use the default account. Returns the revoked sign-in token object. Cost = 5 tokens.

NameTypeReqDescription
clerk_instance_idClerk instance id (ins_...) from clerk.get_connected_accounts. Omit to use the default connected account.
sign_in_token_idstringyesClerk sign-in token id to revoke.
NameTypeReqDescription
sign_in_tokenRevoked Clerk sign-in token object from the Backend API.

No examples provided.

clerk.rotate_machine_secret_key ~153

Rotate the secret key for a machine in a connected Clerk instance. **Sensitive** — the response includes the new secret key; do not log or expose it. Call clerk.get_connected_accounts first. Pass clerk_instance_id to target a specific connection, or omit it to use the default account. Returns the new secret key. Cost = 10 tokens.

NameTypeReqDescription
clerk_instance_idClerk instance id (ins_...) from clerk.get_connected_accounts. Omit to use the default connected account.
machine_idstringyesClerk machine id (mch_...) to retrieve or modify.
previous_token_ttlintegeryesSeconds the previous secret key remains valid after rotation (0–28800).
NameTypeReqDescription
machine_secret_keyRotated machine secret key payload from the Backend API.

No examples provided.

clerk.rotate_oauth_application_secret ~147

Rotate the client secret for a confidential OAuth application in a connected Clerk application. **Sensitive** — the response includes a new client_secret. Update authorized OAuth clients immediately and do not log the secret. Call clerk.get_connected_accounts first. Pass clerk_instance_id to target a specific connection, or omit it to use the default account. Returns the updated OAuth application summary with the new client_secret. Cost = 10 tokens.

NameTypeReqDescription
clerk_instance_idClerk instance id (ins_...) from clerk.get_connected_accounts. Omit to use the default connected account.
oauth_application_idstringyesClerk OAuth application id (oa_...) to retrieve, update, or delete.
NameTypeReqDescription
oauth_applicationOAuth application summary with the new client_secret.

No examples provided.

clerk.unban_users ~118

Remove bans from one or more Clerk users, restoring their ability to sign in. Call clerk.get_connected_accounts first. Pass clerk_instance_id to target a specific connection, or omit it to use the default account. Returns the updated user summaries and total count. Cost = 8 tokens.

NameTypeReqDescription
clerk_instance_idClerk instance id (ins_...) from clerk.get_connected_accounts. Omit to use the default connected account.
user_idsarrayyesList of one or more Clerk user ids (user_...) to unban.
NameTypeReqDescription
total_countNumber of users that were unbanned.
usersUpdated user summaries for all unbanned users.

No examples provided.

clerk.update_api_key ~180

Update an API key in a connected Clerk application. Call clerk.get_connected_accounts first. Pass clerk_instance_id to target a specific connection, or omit it to use the default account. Returns the updated API key summary. Cost = 8 tokens.

NameTypeReqDescription
api_key_idstringyesClerk API key id (ak_...) to retrieve, update, delete, or revoke.
claimsUpdated custom claims for tokens minted from this API key.
clerk_instance_idClerk instance id (ins_...) from clerk.get_connected_accounts. Omit to use the default connected account.
descriptionUpdated description for the API key.
scopesUpdated permission scopes for the API key.
seconds_until_expirationUpdated seconds until expiration from now.
subjectUpdated subject (user_... or org_...).
NameTypeReqDescription
api_keyUpdated Clerk API key from the Backend API.

No examples provided.

clerk.update_domain ~129

Update a custom domain on a connected Clerk instance. Call clerk.get_connected_accounts first. Pass clerk_instance_id to target a specific connection, or omit it to use the default account. Returns the updated domain. Cost = 8 tokens.

NameTypeReqDescription
clerk_instance_idClerk instance id (ins_...) from clerk.get_connected_accounts. Omit to use the default connected account.
domain_idstringyesClerk organization domain id (dmn_...) to update, delete, or verify.
nameUpdated domain hostname.
proxy_urlUpdated proxy URL for a satellite domain.
NameTypeReqDescription
domainUpdated Clerk domain from the Backend API.

No examples provided.

clerk.update_email_address ~138

Update a Clerk email address by id. Call clerk.get_connected_accounts first. Pass clerk_instance_id to target a specific connection, or omit it to use the default account. Returns the updated email address summary. Cost = 8 tokens.

NameTypeReqDescription
clerk_instance_idClerk instance id (ins_...) from clerk.get_connected_accounts. Omit to use the default connected account.
email_address_idstringyesClerk email address id (idn_...) to retrieve or modify.
primaryWhen true, set this email as the user's primary email address.
verifiedWhen true, mark the email address as verified.
NameTypeReqDescription
email_addressUpdated Clerk email address summary.

No examples provided.

clerk.update_enterprise_connection ~255

Update an enterprise SSO connection in a connected Clerk application. Call clerk.get_connected_accounts first. Pass clerk_instance_id to target a specific connection, or omit it to use the default account. Returns the updated enterprise_connection summary. Cost = 8 tokens.

NameTypeReqDescription
activeWhether the connection is active.
allow_organization_account_linkingWhether account linking via organization membership is allowed.
clerk_instance_idClerk instance id (ins_...) from clerk.get_connected_accounts. Omit to use the default connected account.
connection_idstringyesClerk enterprise connection id (entc_...) to retrieve, update, delete, or test.
custom_attributesUpdated custom attribute mappings.
disable_additional_identificationsWhether to block additional identifications for this connection.
domainsUpdated domain list (replaces existing domains when provided).
nameUpdated display name for the connection.
oidcUpdated OIDC client configuration.
organization_idClerk organization id (org_...) to link to this connection.
samlUpdated SAML IdP configuration.
sync_user_attributesWhether to sync user attributes on each sign-in.
NameTypeReqDescription
enterprise_connectionUpdated enterprise SSO connection.

No examples provided.

clerk.update_instance_communication_settings ~109

Update SMS communication settings for a connected Clerk instance. Call clerk.get_connected_accounts first. Pass clerk_instance_id to target a specific connection, or omit it to use the default account. Returns the updated communication settings. Cost = 8 tokens.

NameTypeReqDescription
blocked_country_codesISO country codes to block from receiving SMS messages (up to 250).
clerk_instance_idClerk instance id (ins_...) from clerk.get_connected_accounts. Omit to use the default connected account.
NameTypeReqDescription
communication_settingsUpdated Clerk instance communication settings from the Backend API.

No examples provided.

clerk.update_instance_oauth_settings ~123

Update OAuth settings for a connected Clerk instance. Call clerk.get_connected_accounts first. Pass clerk_instance_id to target a specific connection, or omit it to use the default account. Returns the updated OAuth settings. Cost = 8 tokens.

NameTypeReqDescription
clerk_instance_idClerk instance id (ins_...) from clerk.get_connected_accounts. Omit to use the default connected account.
dynamic_oauth_client_registrationWhether dynamic OAuth client registration should be enabled.
oauth_jwt_access_tokensWhether OAuth access tokens should be issued as JWTs.
NameTypeReqDescription
oauth_settingsUpdated Clerk instance OAuth settings from the Backend API.

No examples provided.

clerk.update_instance_organization_settings ~214

Update organization feature settings for a connected Clerk instance. Call clerk.get_connected_accounts first. Pass clerk_instance_id to target a specific connection, or omit it to use the default account. Returns the updated organization settings. Cost = 8 tokens.

NameTypeReqDescription
admin_delete_enabledWhether organization admins can delete their organization.
clerk_instance_idClerk instance id (ins_...) from clerk.get_connected_accounts. Omit to use the default connected account.
creator_roleDefault role assigned to the organization creator.
domains_default_roleDefault role for members who join via a verified organization domain.
domains_enabledWhether organization domains should be enabled.
domains_enrollment_modesAllowed organization domain enrollment modes: manual_invitation, automatic_invitation, or automatic_suggestion.
enabledWhether organizations should be enabled for the instance.
initial_role_set_keyInitial role set key applied to new organizations.
max_allowed_membershipsMaximum organization memberships allowed per user.
NameTypeReqDescription
organization_settingsUpdated Clerk instance organization settings from the Backend API.

No examples provided.

clerk.update_instance_restrictions ~181

Update sign-up and sign-in restriction settings for a connected Clerk instance. Call clerk.get_connected_accounts first. Pass clerk_instance_id to target a specific connection, or omit it to use the default account. Returns the updated instance restrictions. Cost = 8 tokens.

NameTypeReqDescription
allowlistWhether the allowlist restriction should be enabled.
allowlist_blocklist_disabled_on_sign_inWhether allowlist and blocklist checks should be skipped during sign-in.
block_disposable_email_domainsWhether disposable email domains should be blocked.
block_email_subaddressesWhether email subaddresses (plus-addressing) should be blocked.
blocklistWhether the blocklist restriction should be enabled.
clerk_instance_idClerk instance id (ins_...) from clerk.get_connected_accounts. Omit to use the default connected account.
NameTypeReqDescription
restrictionsUpdated Clerk instance restrictions from the Backend API.

No examples provided.

clerk.update_instance_settings ~215

Update core settings for a connected Clerk application instance. Call clerk.get_connected_accounts first. Pass clerk_instance_id to target a specific connection, or omit it to use the default account. Returns the updated instance settings. Cost = 8 tokens.

NameTypeReqDescription
allowed_originsAllowed browser origins for the instance.
clerk_instance_idClerk instance id (ins_...) from clerk.get_connected_accounts. Omit to use the default connected account.
clerk_js_versionPinned Clerk.js version for the instance.
development_originDevelopment origin URL for local testing.
hibpWhether Have I Been Pwned password checking should be enabled.
preferred_sign_in_strategy_when_password_requiredPreferred sign-in strategy when a password is required: "password" or "otp".
support_emailSupport email address shown to end users.
test_modeWhether the instance should run in test mode.
url_based_session_syncingWhether URL-based session syncing should be enabled.
NameTypeReqDescription
instance_settingsUpdated Clerk instance settings from the Backend API.

No examples provided.

clerk.update_jwt_template ~211

Update an existing JWT template in a connected Clerk application. Call clerk.get_connected_accounts first. Pass clerk_instance_id to target a specific connection, or omit it to use the default account. Returns the updated template summary. Cost = 8 tokens.

NameTypeReqDescription
allowed_clock_skewOptional new allowed clock skew in seconds (0–300).
claimsOptional new JWT claims template as a JSON object.
clerk_instance_idClerk instance id (ins_...) from clerk.get_connected_accounts. Omit to use the default connected account.
custom_signing_keyOptional flag to enable or disable a custom signing key.
lifetimeOptional new token lifetime in seconds (30–315360000).
nameOptional new unique template name.
signing_algorithmOptional custom signing algorithm.
signing_keyOptional custom signing private key.
template_idstringyesClerk JWT template id (jtmp_...) to retrieve, update, or delete.
NameTypeReqDescription
jwt_templateUpdated Clerk JWT template summary.

No examples provided.

clerk.update_machine ~129

Update a machine in a connected Clerk instance. Call clerk.get_connected_accounts first. Pass clerk_instance_id to target a specific connection, or omit it to use the default account. Returns the updated machine. Cost = 8 tokens.

NameTypeReqDescription
clerk_instance_idClerk instance id (ins_...) from clerk.get_connected_accounts. Omit to use the default connected account.
default_token_ttlUpdated default M2M token lifetime in seconds.
machine_idstringyesClerk machine id (mch_...) to retrieve or modify.
nameUpdated machine display name.
NameTypeReqDescription
machineUpdated machine object from the Backend API.

No examples provided.

clerk.update_oauth_application ~192

Update an OAuth application in a connected Clerk application. Call clerk.get_connected_accounts first. Pass clerk_instance_id to target a specific connection, or omit it to use the default account. Returns the updated OAuth application summary. Cost = 8 tokens.

NameTypeReqDescription
clerk_instance_idClerk instance id (ins_...) from clerk.get_connected_accounts. Omit to use the default connected account.
consent_screen_enabledWhether to show the OAuth consent screen during authorization.
nameNew display name for the OAuth application.
oauth_application_idstringyesClerk OAuth application id (oa_...) to retrieve, update, or delete.
publicWhether this is a public OAuth client (no client secret; PKCE-capable).
redirect_urisReplacement list of allowed redirect URIs.
scopesSpace-delimited scopes (e.g. profile email public_metadata).
NameTypeReqDescription
oauth_applicationUpdated Clerk OAuth application summary.

No examples provided.

clerk.update_organization ~166

Update fields for a Clerk organization. Call clerk.get_connected_accounts first. Pass clerk_instance_id to target a specific connection, or omit it to use the default account. Returns the updated organization summary. Cost = 8 tokens.

NameTypeReqDescription
clerk_instance_idClerk instance id (ins_...) from clerk.get_connected_accounts. Omit to use the default connected account.
max_allowed_membershipsOptional new maximum number of memberships allowed.
nameOptional new display name for the organization.
organization_idstringyesClerk organization id (org_...) to operate on.
private_metadataOptional private metadata to merge into the organization.
public_metadataOptional public metadata to merge into the organization.
slugOptional new URL-friendly slug.
NameTypeReqDescription
organizationUpdated Clerk organization summary.

No examples provided.

clerk.update_organization_domain ~146

Update enrollment mode or verification status for an organization domain. Call clerk.get_connected_accounts first. Pass clerk_instance_id to target a specific connection, or omit it to use the default account. Returns the updated domain summary. Cost = 8 tokens.

NameTypeReqDescription
clerk_instance_idClerk instance id (ins_...) from clerk.get_connected_accounts. Omit to use the default connected account.
domain_idstringyesClerk organization domain id (dmn_...) to update, delete, or verify.
enrollment_modeFilter or set enrollment mode: manual_invitation, automatic_invitation, or automatic_suggestion.
verifiedWhether the domain is verified.
NameTypeReqDescription
domainUpdated organization domain summary.

No examples provided.

clerk.update_organization_membership ~147

Change the role of a Clerk organization member. Call clerk.get_connected_accounts first. Pass clerk_instance_id to target a specific connection, or omit it to use the default account. Returns the updated membership. Cost = 8 tokens.

NameTypeReqDescription
clerk_instance_idClerk instance id (ins_...) from clerk.get_connected_accounts. Omit to use the default connected account.
organization_idstringyesClerk organization id (org_...) containing the member.
rolestringyesNew role for the member (e.g. org:member, org:admin).
user_idstringyesClerk user id (user_...) of the member to update.
NameTypeReqDescription
membershipUpdated organization membership.

No examples provided.

clerk.update_organization_membership_metadata ~151

Merge public or private metadata on a Clerk organization membership. Call clerk.get_connected_accounts first. Pass clerk_instance_id to target a specific connection, or omit it to use the default account. Returns the updated membership. Cost = 8 tokens.

NameTypeReqDescription
clerk_instance_idClerk instance id (ins_...) from clerk.get_connected_accounts. Omit to use the default connected account.
organization_idstringyesClerk organization id (org_...) containing the membership.
private_metadataPrivate metadata to merge into the membership.
public_metadataPublic metadata to merge into the membership.
user_idstringyesClerk user id (user_...) of the member.
NameTypeReqDescription
membershipUpdated organization membership.

No examples provided.

clerk.update_organization_metadata ~138

Merge metadata into a Clerk organization (deep merge — existing keys are preserved unless overwritten). Call clerk.get_connected_accounts first. Pass clerk_instance_id to target a specific connection, or omit it to use the default account. Returns the updated organization summary. Cost = 8 tokens.

NameTypeReqDescription
clerk_instance_idClerk instance id (ins_...) from clerk.get_connected_accounts. Omit to use the default connected account.
organization_idstringyesClerk organization id (org_...) to operate on.
private_metadataPrivate metadata to merge into the organization.
public_metadataPublic metadata to merge into the organization.
NameTypeReqDescription
organizationUpdated Clerk organization summary.

No examples provided.

clerk.update_organization_permission ~120

Update an organization permission in a connected Clerk application. Call clerk.get_connected_accounts first. Pass clerk_instance_id to target a specific connection, or omit it to use the default account. Returns the updated permission summary. Cost = 8 tokens.

NameTypeReqDescription
clerk_instance_idClerk instance id (ins_...) from clerk.get_connected_accounts. Omit to use the default connected account.
descriptionUpdated permission description.
nameUpdated permission display name.
permission_idstringyesClerk organization permission id to update or delete.
NameTypeReqDescription
organization_permissionUpdated organization permission summary.

No examples provided.

clerk.update_organization_role ~152

Update an organization role in a connected Clerk application. Call clerk.get_connected_accounts first. Pass clerk_instance_id to target a specific connection, or omit it to use the default account. Returns the updated role summary. Cost = 8 tokens.

NameTypeReqDescription
clerk_instance_idClerk instance id (ins_...) from clerk.get_connected_accounts. Omit to use the default connected account.
descriptionUpdated role description.
is_creator_eligibleWhether this role may be assigned as organization creator.
nameUpdated role display name.
permissionsPermission keys to assign to the role.
role_idstringyesClerk organization role id to retrieve, update, or delete.
NameTypeReqDescription
organization_roleUpdated organization role summary.

No examples provided.

clerk.update_phone_number ~156

Update a Clerk phone number by id. Call clerk.get_connected_accounts first. Pass clerk_instance_id to target a specific connection, or omit it to use the default account. Returns the updated phone number summary. Cost = 8 tokens.

NameTypeReqDescription
clerk_instance_idClerk instance id (ins_...) from clerk.get_connected_accounts. Omit to use the default connected account.
phone_number_idstringyesClerk phone number id (idn_... or phn_...) to retrieve or modify.
primaryWhether this should be the user's primary phone number.
reserved_for_second_factorWhether to reserve this number for multi-factor authentication.
verifiedWhether the phone number should be marked verified.
NameTypeReqDescription
phone_numberUpdated Clerk phone number object from the Backend API.

No examples provided.

clerk.update_user ~137

Update profile fields for a Clerk user. Call clerk.get_connected_accounts first. Pass clerk_instance_id to target a specific connection, or omit it to use the default account. Returns the updated user summary. Cost = 8 tokens.

NameTypeReqDescription
clerk_instance_idClerk instance id (ins_...) from clerk.get_connected_accounts. Omit to use the default connected account.
external_idOptional external id for the user.
first_nameOptional first name.
last_nameOptional last name.
user_idstringyesClerk user id (user_...) to update.
usernameOptional username.
NameTypeReqDescription
userUpdated Clerk user summary.

No examples provided.

clerk.update_user_metadata ~165

Merge metadata fields for a Clerk user. Only the provided metadata keys are updated. Call clerk.get_connected_accounts first. Pass clerk_instance_id to target a specific connection, or omit it to use the default account. Returns the updated user summary. Cost = 8 tokens.

NameTypeReqDescription
clerk_instance_idClerk instance id (ins_...) from clerk.get_connected_accounts. Omit to use the default connected account.
private_metadataPrivate metadata fields to merge. Existing keys not listed are preserved.
public_metadataPublic metadata fields to merge. Existing keys not listed are preserved.
unsafe_metadataUnsafe metadata fields to merge. Existing keys not listed are preserved.
user_idstringyesClerk user id (user_...) whose metadata to update.
NameTypeReqDescription
userUpdated Clerk user object after the metadata merge.

No examples provided.

clerk.upload_oauth_application_logo ~161

Upload or replace the logo image for an OAuth application in a connected Clerk application. Call clerk.get_connected_accounts first. Pass clerk_instance_id to target a specific connection, or omit it to use the default account. Returns the updated OAuth application summary. Cost = 8 tokens.

NameTypeReqDescription
clerk_instance_idClerk instance id (ins_...) from clerk.get_connected_accounts. Omit to use the default connected account.
file_namestringyesStored file name from files.list_uploaded_files. Upload with files.upload_file first.
oauth_application_idstringyesClerk OAuth application id (oa_...) to retrieve, update, or delete.
uploader_user_idClerk user id (user_...) credited with the image upload.
NameTypeReqDescription
oauth_applicationOAuth application summary with updated client_image_url.

No examples provided.

clerk.verify_organization_domain_ownership ~125

Mark an organization domain's DNS ownership as verified via manual override. Call clerk.get_connected_accounts first. Pass clerk_instance_id to target a specific connection, or omit it to use the default account. Idempotent when ownership is already verified. Returns the updated domain summary. Cost = 5 tokens.

NameTypeReqDescription
clerk_instance_idClerk instance id (ins_...) from clerk.get_connected_accounts. Omit to use the default connected account.
domain_idstringyesClerk organization domain id (dmn_...) to update, delete, or verify.
NameTypeReqDescription
domainOrganization domain summary after ownership verification.

No examples provided.

domains.check_availability ~76

Check domain name availability for up to ten domains in one request. Returns a JSON object whose keys are the requested domain names and whose values are booleans: true if the domain appears available, false if it is taken. Cost = 5 tokens.

NameTypeReqDescription
domainsarrayyesDomain names to check (maximum 10).

Structured output declared, but exposes no named fields.

No examples provided.

domains.dns_records ~121

Fetch DNS records for a domain. Returns an array of records. Each record includes name, ttl, type (for example A, AAAA, CNAME, MX, NS, SOA, TXT), and data (record value). Optionally pass subdomain to include records for a host under the domain (for example blog for blog.example.com). Cost = 2 tokens.

NameTypeReqDescription
domainstringyesDomain name to look up (for example example.com).
subdomainOptional subdomain label to include (for example www or blog).
NameTypeReqDescription
recordsDNS records returned for the domain.

No examples provided.

domains.list_tlds ~209

List or search top-level domains (TLDs) with registry metadata. Filter by substring search, availability phase, TLD category, and paginate with limit and page. limit defaults to 100 when omitted. Each result includes the TLD suffix, type, availability phase, WHOIS server, domain counts when known, registry organization details, and created/changed timestamps. availability values: general-availability (open for normal registration) or sunrise (trademark sunrise period before general availability). Cost = 2 tokens.

NameTypeReqDescription
availabilityFilter by registration phase: general-availability (normal public registration) or sunrise (early trademark-holder period).
limitMaximum number of TLDs to return. Defaults to 100 when omitted.
pagePage number for paginated results.
searchReturn TLDs whose suffix contains this substring.
tld_typeFilter by TLD category: country-code, generic, generic-restricted, infrastructure, or sponsored.
NameTypeReqDescription
tldsMatching top-level domain records.

No examples provided.

domains.lookup ~107

Look up a domain and return normalized registration details. Combines registry and registrar RDAP and WHOIS sources to return the most accurate normalized fields across TLDs: availability, domain status, created/updated/expiry dates, registrar data, contact records, and nameservers. Use this when you need registrant-oriented summary data rather than raw WHOIS or RDAP payloads. Cost = 5 tokens.

NameTypeReqDescription
domainstringyesDomain name to look up (for example example.com).
NameTypeReqDescription
availabilityAvailability state (for example registered or available).
contactsRegistrant, admin, tech, and billing contact records.
datesRegistration lifecycle dates.
domainLooked-up domain name.
keywordSecond-level domain label without the TLD.
nameserversAuthoritative nameserver host names.
registrarRegistrar summary data.
sourcePrimary data source used for the normalized response.
statusNormalized EPP status codes.
tldTop-level domain suffix.

No examples provided.

domains.metrics ~128

Analyze a domain with comprehensive SEO metrics, backlink data, and social signals. Returns authority metrics (Moz domain/page authority, Ahrefs domain rating, Majestic trust and citation flow), backlink profile counts (total backlinks, referring domains, EDU/GOV links), traffic and keyword estimates (organic traffic, traffic value, organic keywords, Ahrefs rank), social signals (Facebook shares/comments, Pinterest pins, StumbleUpon), and technical data (IP addresses, subnets, topical trust flow categories). Cost = 40 tokens.

NameTypeReqDescription
domainstringyesDomain name to analyze (for example example.com).
NameTypeReqDescription
FB_commentsTotal Facebook comments.
FB_sharesTotal Facebook shares.
ahrefsBacklinksTotal number of backlinks from Ahrefs.
ahrefsDRAhrefs domain rating (0-100).
ahrefsOrganicKeywordsNumber of ranking organic keywords.
ahrefsRankGlobal website ranking from Ahrefs.
ahrefsRefDomainsNumber of unique referring domains from Ahrefs.
ahrefsTrafficEstimated monthly organic traffic.
ahrefsTrafficValueEstimated value of organic traffic.
domainAnalyzed domain name.
last_updatedWhen the metrics snapshot was last updated.
majesticCFMajestic citation flow score (0-100).
majesticLinksTotal links from the Majestic database.
majesticTFMajestic trust flow score (0-100).
mozDAMoz domain authority score (0-100).
mozPAMoz page authority score (0-100).
pinterest_pinsTotal Pinterest saves.
stumblesTotal StumbleUpon shares.

No examples provided.

domains.rdap ~79

Look up raw RDAP (Registration Data Access Protocol) data for a domain. Returns registrar entities, domain status codes, registration and expiration events, nameservers, DNSSEC delegation data, RDAP conformance labels, and registry notices. Cost = 3 tokens.

NameTypeReqDescription
domainstringyesDomain name to look up (for example example.com).
NameTypeReqDescription
entitiesRegistrar, registrant, and related RDAP entities.
eventsRegistration, expiration, and last-changed timestamps.
ldhNameDomain name in LDH form.
nameserversAuthoritative nameservers for the domain.
objectClassNameRDAP object class (for example domain).
secureDNSDNSSEC delegation and DS record data.
statusEPP status codes for the domain.

No examples provided.

domains.tld_details ~106

Look up detailed registry information for a single top-level domain (TLD). Returns status, TLD type, availability phase, WHOIS and RDAP servers, registry URL, domain counts, delegation dates, registry organization, administrative/technical contacts, and remarks. Pass the TLD suffix without a leading dot (for example io or com). Cost = 1 token.

NameTypeReqDescription
tldstringyesTLD suffix to look up without a leading dot (for example io).
NameTypeReqDescription
availabilityRegistration phase for the TLD.
changedTLD record last changed timestamp.
contactsRegistry contact records.
createdTLD delegation created timestamp.
domains_countApproximate registered domain count when reported by the registry.
levelTLD level (1 for standard TLDs).
organizationRegistry operator contact details.
rdap_serverAuthoritative RDAP server URL.
registry_urlRegistry web site URL.
remarksAdditional registry notes or links.
statusDelegation status (for example ACTIVE).
tldTLD suffix without a leading dot.
typeTLD category (for example country-code or generic).
whois_serverAuthoritative WHOIS server host name.

No examples provided.