docs: add Logto MCP Server documentation

Author: xiaoyijun

docs/integrate-logto/README.mdx

@@ -10,6 +10,10 @@ import ProtectedAppIcon from '@site/src/assets/protected-app.svg';
 
 # Integrate Logto authentication
 
+:::tip[Use AI to integrate (Logto Cloud)]
+If you're using AI-powered development tools, try [Logto MCP Server](/logto-cloud/logto-mcp-server) to integrate Logto with the help of AI. It detects your framework, creates applications, and generates working code.
+:::
+
 Logto provides comprehensive authentication solutions for web, mobile and desktop applications, supports [Machine-to-Machine (M2M)](/quick-starts/m2m) authentication between services, and can serve as an Identity Provider (IdP) for [third-party applications](/integrate-logto/third-party-applications) through standard protocols like [OpenID Connect(OIDC)](https://auth.wiki/openid-connect) and [OAuth 2.0](https://auth.wiki/oauth-2.0).
 
 Start your integration by selecting the solution that best matches your needs:

docs/introduction/README.mdx

@@ -17,6 +17,7 @@ import LinkIcon from '@site/src/assets/link.svg';
 import LockIcon from '@site/src/assets/lock.svg';
 import LockoutIcon from '@site/src/assets/lockout.svg';
 import LogtoApiIcon from '@site/src/assets/logto-api.svg';
+import McpIcon from '@site/src/assets/mcp.svg';
 import OpenSourceIcon from '@site/src/assets/open-source.svg';
 import OrganizationIcon from '@site/src/assets/organization.svg';
 import ScreenIcon from '@site/src/assets/screen.svg';
@@ -203,6 +204,16 @@ Logto’s capabilities are built on four key pillars, forming the foundation for
         icon: <SdkIcon />,
       },
     },
+    {
+      type: 'link',
+      label: 'Logto MCP Server',
+      href: '/logto-cloud/logto-mcp-server',
+      description:
+        'A remote MCP server that connects AI tools and IDEs to Logto Cloud, enabling resource management and authentication integration.',
+      customProps: {
+        icon: <McpIcon />,
+      },
+    },
   ]}
 />
 

docs/introduction/set-up-logto-cloud.mdx

@@ -35,4 +35,8 @@ This setup allows your project to have both development testing and production e
 
 ## Migrate from the existing system \{#migrate-from-the-existing-system}
 
-If you’re working on an existing project and need to switch auth providers, Logto supports user migration from other platforms. You can migrate [basic data](/user-management/user-data#basic-data), [custom data](/user-management/user-data#custom-data), [social identities](/user-management/user-data#social-identities), and password hashes. For details, see the [Migrate to Logto](../user-management/user-migration.mdx) guide.
+If you're working on an existing project and need to switch auth providers, Logto supports user migration from other platforms. You can migrate [basic data](/user-management/user-data#basic-data), [custom data](/user-management/user-data#custom-data), [social identities](/user-management/user-data#social-identities), and password hashes. For details, see the [Migrate to Logto](../user-management/user-migration.mdx) guide.
+
+## Use Logto MCP Server with AI tools \{#use-logto-mcp-server-with-ai-tools}
+
+If you're using AI-powered development tools like VS Code with Copilot, Cursor, or Claude Desktop, you can connect to [Logto MCP Server](/logto-cloud/logto-mcp-server) to interact with Logto directly from your AI assistant. The AI can detect your framework, create applications, and generate working integration code for you.

docs/logto-cloud/README.mdx

@@ -2,6 +2,7 @@ import TenantSettings from '@site/src/assets/database.svg';
 import Developer from '@site/src/assets/developer.svg';
 import TenantMemberManagement from '@site/src/assets/gear.svg';
 import PricingAndBilling from '@site/src/assets/key.svg';
+import McpIcon from '@site/src/assets/mcp.svg';
 import CustomDomains from '@site/src/assets/search.svg';
 import SystemLimit from '@site/src/assets/security.svg';
 
@@ -73,5 +74,15 @@ If you have any questions about cloud services and need additional support, plea
         icon: <SystemLimit />,
       },
     },
+    {
+      type: 'link',
+      label: 'Logto MCP Server',
+      href: '/logto-cloud/logto-mcp-server',
+      description:
+        'Connect AI tools and IDEs to Logto Cloud via MCP to manage resources and integrate authentication.',
+      customProps: {
+        icon: <McpIcon />,
+      },
+    },
   ]}
 />

docs/logto-cloud/logto-mcp-server.mdx

@@ -0,0 +1,84 @@
+---
+id: logto-mcp-server
+title: Logto MCP Server
+sidebar_position: 7
+---
+
+# Logto MCP Server
+
+Logto MCP Server is a remote [MCP (Model Context Protocol)](https://modelcontextprotocol.io/) server. Add the URL to your AI application, sign in with your Logto Cloud account, and start talking to Logto.
+
+:::tip
+Logto MCP Server is built with Logto and [MCP Auth](https://mcp-auth.dev). If you want to build your own remote MCP server, see [Build your own remote MCP server](#build-your-own-remote-mcp-server).
+:::
+
+## What you can do
+
+- **Add authentication to your project**: The AI detects your framework, creates a Logto application, and generates working integration code. Supports 38+ frameworks including React, Next.js, Vue, Nuxt, SvelteKit, Express, Go, Python, iOS, Android, Flutter, and more.
+- **Ask questions about Logto**: The AI searches Logto documentation and gives you answers with sources.
+
+More capabilities are coming soon, including sign-in experience configuration, RBAC and permission management with best practice guidance, multi-tenancy setup for building B2B apps with organizations, and more.
+
+## Set up in your AI application
+
+### VS Code
+
+1. Open the command palette (`Command + Shift + P`), and select **MCP: Add Server...**.
+2. Choose **HTTP** as the server type.
+3. Enter the URL: `https://mcp.logto.io`. You can choose to install it to your workspace for better isolation and management.
+4. When the OAuth flow starts, enter the App ID: `mcp-client`. Leave the App Secret empty and press Enter to skip.
+5. You will be redirected to the Logto Cloud sign-in page. Sign in with your Logto Cloud account to connect.
+
+### Cursor
+
+1. Open the command palette (`Command + Shift + P`), and select **View: Open MCP Settings**.
+2. In the **Installed MCP Servers** section, click the **Add Custom MCP** button.
+3. In the `mcp.json` file that opens, add the following configuration:
+
+```json
+{
+  "mcpServers": {
+    "logto": {
+      "command": "npx",
+      "args": [
+        "mcp-remote",
+        "https://mcp.logto.io",
+        "--allow-http",
+        "--static-oauth-client-info",
+        "{ \"client_id\": \"mcp-client\", \"scope\": \"mcp:all\" }",
+        "--resource",
+        "https://mcp.logto.io/"
+      ]
+    }
+  }
+}
+```
+
+A Logto Cloud sign-in page will appear automatically. Sign in with your Logto Cloud account to connect.
+
+### Claude Desktop
+
+1. Open **Settings** from the main menu, navigate to **Connectors**, and click **Add custom connector**.
+2. Enter the name `Logto MCP Server` and the remote MCP server URL: `https://mcp.logto.io`.
+3. Expand **Advanced settings** and enter the OAuth Client ID: `mcp-client`. Click **Add**.
+4. In the **Connectors** list, find **Logto MCP Server** and click **Connect**.
+5. You will be redirected to the Logto Cloud sign-in page. Sign in and authorize to connect.
+
+### Other MCP clients
+
+Logto MCP Server works with any MCP client that supports OAuth authorization. Use the following configuration:
+
+- **MCP server URL:** `https://mcp.logto.io`
+- **OAuth client ID:** `mcp-client`
+- **Resource:** `https://mcp.logto.io/` (if your client requires it)
+- **Scope:** `mcp:all` (if your client requires it)
+
+If you are an AI application developer and want to support connecting to Logto MCP Server, but Logto MCP Server does not yet support your application's redirect URI, please [contact us](https://logto.io/contact) with your application details.
+
+## Build your own remote MCP server
+
+Logto MCP Server is built with Logto and [MCP Auth](https://mcp-auth.dev). If you want to build your own remote MCP server with authentication, check out the following resources:
+
+- [Remote MCP server in action: a new entry point for SaaS products in the AI era](https://blog.logto.io/remote-mcp-server-in-action)
+- [Join our Discord](https://discord.gg/logto): Share learnings and best practices on building remote MCP servers
+- [MCP Auth](https://mcp-auth.dev): Everything you need to add production-ready auth to your MCP server. No weeks spent reading specs or wiring things up.

docs/logto-cloud/system-limit.mdx

@@ -1,3 +1,7 @@
+---
+sidebar_position: 6
+---
+
 # System limits
 
 System limits keep Logto stable and fair for everyone. They are separate from billing.

docs/quick-starts/README.md

@@ -6,7 +6,9 @@ sidebar_label: Logto quick starts
 
 Welcome to Logto quick starts. This documentation contains useful guides for integrating Logto into your application.
 
-Most of guides uses Logto official SDKs. Please don't hesitate to contact us if you have any questions.
+Most of guides uses Logto official SDKs. If you're using AI-powered development tools, try our [Logto MCP Server](/logto-cloud/logto-mcp-server) for AI-assisted integration.
+
+Please don't hesitate to contact us if you have any questions.
 
 :::info
 This page focuses on Logto client integration, including backend-for-frontend patterns. For server-side API protection, see [API protection](/api-protection).

docs/use-cases/ai/fragments/_configure-third-party-ai-agent.mdx

@@ -4,6 +4,12 @@ import QuickStartsReference from '../../../quick-starts/third-party/oidc/_quick-
 
 To enable the third-party AI agent to access your {props.serviceName ?? 'your service'}, you need to set up a **third-party app** in Logto. This app will be used to represent the AI agent and obtain the necessary credentials for authentication and authorization.
 
+:::info[What is a third-party app?]
+A **third-party app** is an application created by external developers (not the resource owner) that needs user consent to access protected resources. Unlike first-party apps (your own applications), third-party apps will show a consent screen asking users to approve specific permissions before accessing their data. This ensures users have control over what data they share with external services.
+
+To learn more, see [Third-party applications](/integrate-logto/third-party-applications).
+:::
+
 ### Allow developers to create third-party apps in Logto \{#allow-developers-to-create-third-party-apps-in-logto}
 
 If you are building a marketplace or want to allow developers to create third-party apps in Logto, you can leverage [Logto Management API](/integrate-logto/interact-with-management-api) to create third-party apps programmatically. This allows developers to register their applications and obtain the necessary credentials for authentication.