---
title: "Open edX MCP"
description: "Run Open edX admin tasks from an AI agent, including courses, users, roles, enrollment, certificates and reports, using native Open edX platform APIs."
source: "https://docs.blend-ed.com/openedx-mcp/"
---

# Open edX MCP

Connect in one command

```
claude mcp add --transport http openedx https://mcp.<LMS_HOST>/mcp \--header "Authorization: Bearer <YOUR_MCP_KEY>"
```
## What it does
### People & access

Create users, enroll (single + bulk), grant course/instructor roles, gate admin escalation, reset attempts, retire accounts.

 ### Courses & authoring

Read outlines, build section→component trees, edit blocks, update schedule / grading / advanced settings, publish — straight into the CMS modulestore.

 ### Certificates & reports

Generate / regenerate / invalidate certificates; kick off async grade and roster exports and fetch their download links.

 ### Analytics

Enrollment counts, course + user listings, per-learner grades — cheap cached reads, no heavy queries. 
## Built for safety
### is_staff / superuser — live

One authority: the platform’s own flags, re-checked every request. Demote a user and every key they hold dies on the next call.

 ### Least-privilege scopes

Nine scopes narrow each key. `destructive` is additive; granting admin needs a dedicated `grant:admin` scope.

 ### Dry-run + confirm

High-impact and destructive tools preview first and return a single-use, payload-bound confirm token before anything is written.

 ### Rate-limited + audited

Per-tool fixed-window limits stop runaway agents; every write is recorded in an append-only audit log before it happens. 
## Pure Open edX
Every operation calls **native `openedx-platform` Python APIs** — no core fork, no Hasura, no external identity, no multi-tenant model. Ships as two standard Open edX djangoapp plugins (LMS + CMS) plus a thin MCP proxy. **Ulmo** release.

[Quickstart](/openedx-mcp/quickstart/) Enable, build, mint a key, connect — in minutes. [Tool catalog](/openedx-mcp/tools/) Every tool, its scope, and the native API behind it. [Security & scopes](/openedx-mcp/security/) The authorization model and the nine scopes. [Self-host](/openedx-mcp/self-host/) Tutor + Kubernetes, config, health probes.