# Clerk

Clerk auth: users, organizations, sessions, invitations, JWT templates. Exposes **48 actions** covering the API surface an agent needs - read and write.

## What it can do

| Method | What it does |
| --- | --- |
| `clerk_users_list` | List all users - GET /users. |
| `clerk_user_get` | Get one user by ID - GET /users/{id}. |
| `clerk_user_create` | Create a new user - POST /users. |
| `clerk_user_update` | Update a user - PATCH /users/{id}. |
| `clerk_user_ban` | Ban a user (prevent login/API access) - POST /users/{id}/ban. |
| `clerk_user_unban` | Unban a user (restore access) - DELETE /users/{id}/ban. |
| `clerk_user_lock` | Lock a user account (disable) - POST /users/{id}/lock. |
| `clerk_user_unlock` | Unlock a user account (enable) - DELETE /users/{id}/lock. |
| `clerk_user_delete` | Delete a user - DELETE /users/{id}. |
| `clerk_organizations_list` | List organizations - GET /organizations. |
| `clerk_organization_get` | Get one organization - GET /organizations/{id}. |
| `clerk_organization_create` | Create an organization - POST /organizations. |
| `clerk_organization_update` | Update an organization - PATCH /organizations/{id}. |
| `clerk_organization_delete` | Delete an organization - DELETE /organizations/{id}. |
| `clerk_org_memberships_list` | List organization members - GET /organizations/{organization_id}/memberships. |
| `clerk_org_membership_get` | Get one organization member - GET /organizations/{organization_id}/memberships/{user_id}. |
| `clerk_org_membership_create` | Add a user to an organization - POST /organizations/{organization_id}/memberships. |
| `clerk_org_membership_update` | Update organization member role - PATCH /organizations/{organization_id}/memberships/{user_id}. |
| `clerk_org_membership_delete` | Remove a user from organization - DELETE /organizations/{organization_id}/memberships/{user_id}. |
| `clerk_org_invitations_list` | List organization invitations - GET /organizations/{organization_id}/invitations. |
| `clerk_org_invitation_create` | Create an organization invitation - POST /organizations/{organization_id}/invitations. |
| `clerk_org_invitation_revoke` | Revoke an organization invitation - DELETE /organizations/{organization_id}/invitations/{invitation_id}. |
| `clerk_sessions_list` | List sessions - GET /sessions. |
| `clerk_session_get` | Get one session - GET /sessions/{id}. |
| `clerk_session_revoke` | Revoke a session (force user logout) - POST /sessions/{id}/revoke. |
| `clerk_invitations_list` | List invitations - GET /invitations. |
| `clerk_invitation_create` | Create an invitation - POST /invitations. |
| `clerk_invitation_revoke` | Revoke an invitation - DELETE /invitations/{id}. |
| `clerk_allowlists_list` | List allowlisted identifiers - GET /allowlist_identifiers. |
| `clerk_allowlist_create` | Add to allowlist - POST /allowlist_identifiers. |
| `clerk_allowlist_delete` | Remove from allowlist - DELETE /allowlist_identifiers/{id}. |
| `clerk_blocklists_list` | List blocklisted identifiers - GET /blocklist_identifiers. |
| `clerk_blocklist_create` | Add to blocklist - POST /blocklist_identifiers. |
| `clerk_blocklist_delete` | Remove from blocklist - DELETE /blocklist_identifiers/{id}. |
| `clerk_jwt_templates_list` | List JWT templates - GET /jwt_templates. |
| `clerk_jwt_template_get` | Get one JWT template - GET /jwt_templates/{id}. |
| `clerk_jwt_template_create` | Create a JWT template - POST /jwt_templates. |
| `clerk_jwt_template_update` | Update a JWT template - PATCH /jwt_templates/{id}. |
| `clerk_jwt_template_delete` | Delete a JWT template - DELETE /jwt_templates/{id}. |
| `clerk_domains_list` | List custom domains - GET /domains. |
| `clerk_domain_get` | Get one domain - GET /domains/{id}. |
| `clerk_domain_create` | Create a custom domain - POST /domains. |
| `clerk_domain_delete` | Delete a custom domain - DELETE /domains/{id}. |
| `clerk_clients_list` | List OAuth clients - GET /oauth_applications. |
| `clerk_client_get` | Get one OAuth client - GET /oauth_applications/{id}. |
| `clerk_client_create` | Create an OAuth client - POST /oauth_applications. |
| `clerk_client_update` | Update an OAuth client - PATCH /oauth_applications/{id}. |
| `clerk_client_delete` | Delete an OAuth client - DELETE /oauth_applications/{id}. |

## How to get credentials

This connector uses an **API key / token**. Create one in the provider
dashboard, then paste it into FlyMyAI:

- **`CLERK_SECRET_KEY`** - Clerk Dashboard - API Keys - Secret key (sk_...). (https://dashboard.clerk.com/)

## Fields to fill in FlyMyAI

| FlyMyAI field | Where it comes from |
| --- | --- |
| `CLERK_SECRET_KEY` | Clerk Dashboard - API Keys - Secret key (sk_...). |

## Troubleshooting

- **`401 Unauthorized` / `403 Forbidden`** - the token is wrong, expired, or missing a required scope; regenerate it.
- **`429 Too Many Requests`** - provider rate limit; retry after a short backoff.
- **Unexpected `4xx` on writes** - double-check required fields; the agent confirms before write actions.

## Links

- [Clerk API documentation](https://clerk.com/docs/reference/backend-api)