Clerk

Source: https://runstack.engineer/docs/toolkits/clerk

Manage Clerk users, sessions, and organizations — look up accounts, create or update users, set metadata, ban users, revoke sessions, mint session tokens, manage org members and invitations, and mint sign-in tokens.

Tools (25):

Tool	Description
`clerkListUsers`	Lists users of the Clerk instance with limit/offset (or starting_after cursor) pagination, filterable by email, phone, username, external ID, organization, or banned state.
`clerkGetUser`	Gets one Clerk user by ID: identities, emails, phones, username, metadata, banned/locked state, and last sign-in.
`clerkCreateUser`	Creates a user in Clerk with an email address, phone number, and/or username (optionally a password). Use skipPasswordChecks for admin-created accounts.
`clerkUpdateUser`	Updates a Clerk user: rename, change username, set the primary email, reset a password, or sign out of other sessions. Only provided fields change.
`clerkDeleteUser`	Permanently deletes a Clerk user with all sessions, identities, and metadata. Cannot be undone — only when explicitly asked (account deletion / GDPR).
`clerkSetUserMetadata`	Merges metadata into a Clerk user: public (client-readable), private (server-only), or unsafe metadata. Provided keys are merged over existing values.
`clerkBanUser`	Bans a Clerk user: they are signed out and cannot sign in again until unbanned. For moderation/abuse response when explicitly asked.
`clerkUnbanUser`	Removes a ban from a Clerk user so they can sign in again.
`clerkListSessions`	Lists sessions of the Clerk instance, filterable by user, client, or status (active/revoked/ended/expired) — see where and when users are signed in.
`clerkGetSession`	Gets one Clerk session by ID: status, user and client IDs, active organization, and created/last-active/expire times.
`clerkRevokeSession`	Revokes a Clerk session, signing that device out immediately (security response, "log this device out").
`clerkCreateSessionToken`	Creates a session token (optionally from a JWT template) for an active Clerk session — let a backend act "as" that user. Short-lived and sensitive.
`clerkListOrganizations`	Lists organizations (B2B tenants/workspaces) of the Clerk instance, filterable by name/domain query or by member user, newest first.
`clerkGetOrganization`	Gets one Clerk organization by ID or slug: name, slug, verified domains, logo, metadata, and member counts.
`clerkCreateOrganization`	Creates an organization in Clerk with a name and slug (optionally a verified domain for auto-join). Returns the new org ID.
`clerkUpdateOrganization`	Updates a Clerk organization: rename it, change the slug, logo, or membership limits. Only provided fields change.
`clerkDeleteOrganization`	Permanently deletes a Clerk organization with its memberships and invitations. Cannot be undone — only when explicitly asked.
`clerkListOrganizationMembers`	Lists the members of a Clerk organization with their roles and membership status, filterable by user or role.
`clerkAddOrganizationMember`	Adds an existing Clerk user to an organization with a role (e.g. "basic_member", "org:admin"). Use createOrganizationInvitation to onboard by email instead.
`clerkUpdateOrganizationMember`	Changes a member’s role in a Clerk organization — promote to org:admin or demote to basic_member.
`clerkRemoveOrganizationMember`	Removes a member from a Clerk organization (the user still exists, they just lose access to this org).
`clerkListOrganizationInvitations`	Lists invitations of a Clerk organization (pending/accepted/revoked) with the invited email, role, and expiry.
`clerkCreateOrganizationInvitation`	Invites an email address to join a Clerk organization with a role; Clerk emails an accept link. Set notify=false to create it silently.
`clerkListJwtTemplates`	Lists the JWT templates configured for the Clerk instance — templates define claims Clerk stamps into tokens for third-party services.
`clerkCreateSignInToken`	Creates a one-time sign-in token for a Clerk user (e.g. support "login as user" / impersonation links). Short-lived and sensitive — never log it.