Connect the directory
Connects the company's Microsoft Entra ID or Okta, checked by reading one person.
$0.001 a call
From your agent’s balance. A call that fails costs nothing.
An example
Connect our Okta so you can set up new hires. Here is the API token from our admin.
Your agent callsdirectory_connect$0.001 a call
The example business is Hansen & Voss, a restaurant-equipment wholesaler in Hamburg with 60 staff. The reply is the one the tool really gives.
{
"provider": "okta",
"org_url": "https://hansenvoss.okta.com",
"secret": "00aBcD-example-token"
}Use it when
The business wants joiners and leavers handled in its directory.
What it does
Connect the company's Microsoft Entra ID or Okta. Entra ID: tenant_id, client_id and the client secret of an app registration with User.ReadWrite.All and GroupMember.ReadWrite.All (and User.EnableDisableAccount.All), consented by the tenant's admin. Okta: org_url and an admin's API token. The connection is checked by reading one person. Suspensions then wait for the owner's approval by default.
What comes back
directory: the provider, the tenant or org and when it was connected; suspensions_need_approval when an approval rule for suspensions was made. Every reply also carries cost_usd and balance_usd.
Inputs
| Name | Type | What it is |
|---|---|---|
providerRequired | string | One of: entra,okta. |
tenant_id | string | Up to 120 characters. |
client_id | string | Up to 120 characters. |
org_url | string | Up to 200 characters. |
secretRequired | string | The Entra client secret or the Okta API token. Never shown again. 8 to 2,000 characters. |
The call
Over MCP, call directory_connect on https://api.conecto.chat/mcp/directory. Over REST:
curl -X POST https://api.conecto.chat/v1/tools/directory_connect \
-H "Authorization: Bearer $CONECTO_KEY" \
-H "Content-Type: application/json" \
-d '{"provider":"okta","org_url":"https://hansenvoss.okta.com","secret":"00aBcD-example-token"}'When it refuses
A refused call costs nothing and says what to do next.
| Code | When | What to do |
|---|---|---|
invalid_input400 | Entra ID was given without tenant_id or client_id, or org_url is not an Okta org. | Give what the message names. |
directory_rejected502 | The directory refused, usually because a permission is missing. | Ask its admin to grant what the message names. |
directory_unavailable503 | The directory could not be reached. | Try again in a minute; nothing changed. |
More Directory tools
All 11 tools- List people in the directory
directory_list_usersPeople in the directory with their name, email, title, department and whether they can sign in.Free* - Get a person from the directory
directory_get_userOne person in the directory by id or email.Free* - List groups
directory_list_groupsThe directory's groups with their id, name and description.Free* - Create an account for a joiner
directory_create_userOpens a joiner's account with their title, department and groups; no password passes Conecto.$0.25 a call - Update a person in the directory
directory_update_userChanges a person's title, department or manager in the directory.$0.01 a call - Change a person's groups
directory_set_groupsAdds a person to groups and takes them out of others.$0.01 a call - Suspend a leaver
directory_suspend_userBlocks a leaver's sign-in and ends their sessions, after the owner approves by default.$0.25 a call - Restore a suspended person
directory_restore_userLets a suspended person sign in again.$0.001 a call
Give this to your agent.
Set up Conecto from https://conecto.chat/SKILL.md