Okta Resource Servers
| eventType | Description | Sample | Rule |
|---|---|---|---|
| resource_ | Activate an API server. | N | N |
| resource_ | Add a third-party authorization server to an API server. | N | N |
| resource_ | Remove a third-party authorization server from an API server. | N | N |
| resource_ | Update a third-party authorization server linked to an API server. | N | N |
| resource_ | Deactivate an API server. | N | N |
| resource_ | Delete an API server. | N | N |
| resource_ | Register a new API server. | N | N |
| resource_ | Update an API server. | N | N |
| resource_ | Create client authentication settings for a resource server. | N | N |
| resource_ | Delete client authentication settings for a resource server. | N | N |
| resource_ | Update client authentication settings for a resource server. | N | N |
| resource_ | Activate MCP server. | N | N |
| resource_ | Create third-party authorization server. | N | N |
| resource_ | Delete third-party authorization server. | N | N |
| resource_ | Update third-party authorization server metadata. | N | N |
| resource_ | Discover MCP server capabilities. | N | N |
| resource_ | Deactivate MCP server. | N | N |
| resource_ | Delete MCP server. | N | N |
| resource_ | Register MCP server. | N | N |
| resource_ | Update MCP server. | N | N |
| resource_ | Add an authorization server to a Virtual MCP server. | N | N |
| resource_ | Remove an authorization server from a Virtual MCP server. | N | N |
| resource_ | Add a capability to a Virtual MCP server connection. | N | N |
| resource_ | Remove a capability from a Virtual MCP server connection. | N | N |
| resource_ | Update a capability on a Virtual MCP server connection. | N | N |
| resource_ | An Okta custom authorization server has been associated with an A2A server, enabling that authorization server to issue tokens accepted by the A2A server. | N | N |
| resource_ | An authorization server association has been removed from an A2A server. | N | N |
| resource_ | Delete A2A server. | N | N |
| resource_ | Register A2A server. | N | N |
resource_servers.api_server.activate
#Description
Activate an API server. This can be used to audit when an API server is transitioned to an active state.
References #
resource_servers.api_server.auth_server.add
#Description
Add a third-party authorization server to an API server. This can be used to audit the association of a third-party authorization server with a resource server.
References #
resource_servers.api_server.auth_server.remove
#Description
Remove a third-party authorization server from an API server. This can be used to audit the removal of a third-party authorization server association from a resource server.
References #
resource_servers.api_server.auth_server.update
#Description
Update a third-party authorization server linked to an API server. This can be used to audit configuration changes for a linked third-party authorization server.
References #
resource_servers.api_server.deactivate
#Description
Deactivate an API server. This can be used to audit when an API server is transitioned to an inactive state.
References #
resource_servers.api_server.delete
#Description
Delete an API server. This can be used to audit the removal of a registered third-party API server.
References #
resource_servers.api_server.register
#Description
Register a new API server. This can be used to audit the registration of a third-party API server as a resource server.
References #
resource_servers.api_server.update
#Description
Update an API server. This can be used to audit when an API server configuration is modified.
References #
resource_servers.client_authentication_settings.create
#Description
Create client authentication settings for a resource server. This can be used to audit the creation of client authentication settings for a resource server.
References #
resource_servers.client_authentication_settings.delete
#Description
Delete client authentication settings for a resource server. This can be used to audit the deletion of client authentication settings for a resource server.
References #
resource_servers.client_authentication_settings.update
#Description
Update client authentication settings for a resource server. This can be used to audit an update to the configuration of client authentication settings for a resource server.
References #
resource_servers.mcp_server.activate
#Description
Activate MCP server. This can be used to monitor when MCP servers are activated and made available for use by AI agents.
References #
resource_servers.mcp_server.auth_server.create
#Description
Create third-party authorization server. This can be used to monitor when third-party authorization servers are discovered and created during MCP server registration. Emitted during MCP server registration or metadata refresh.
References #
resource_servers.mcp_server.auth_server.delete
#Description
Delete third-party authorization server. This can be used to monitor when third-party authorization servers are removed during MCP server deletion.
References #
resource_servers.mcp_server.auth_server.update
#Description
Update third-party authorization server metadata. This can be used to monitor when third-party authorization server metadata is updated.
References #
resource_servers.mcp_server.capability.discover
#Description
Discover MCP server capabilities. This can be used to audit when MCP server tool discovery runs, including how many capabilities were discovered.
References #
resource_servers.mcp_server.deactivate
#Description
Deactivate MCP server. This can be used to monitor when MCP servers are deactivated and no longer available for use by AI agents.
References #
resource_servers.mcp_server.delete
#Description
Delete MCP server. This can be used to monitor when MCP servers are removed from your organization.
References #
resource_servers.mcp_server.register
#Description
Register MCP server. This can be used to monitor when new MCP servers are registered in your organization.
References #
resource_servers.mcp_server.update
#Description
Update MCP server. This can be used to monitor when MCP server metadata is updated, either through admin changes or an automated refresh from the remote server.
References #
resource_servers.virtual_mcp_server.auth_server.add
#Description
Add an authorization server to a Virtual MCP server. This can be used to audit when an Okta Custom Authorization Server is linked to a Virtual MCP server to allow AI agents to authenticate to the Okta Agent Gateway.
References #
resource_servers.virtual_mcp_server.auth_server.remove
#Description
Remove an authorization server from a Virtual MCP server. This can be used to audit when an Okta Custom Authorization Server association is removed from a Virtual MCP server.
References #
resource_servers.virtual_mcp_server.capability.add
#Description
Add a capability to a Virtual MCP server connection. This can be used to audit which capabilities from upstream MCP servers are selectively exposed to AI agents through a Virtual MCP server, and to detect unsanctioned capability exposure. vMCP currently exposes only TOOL capabilities. Additional capability types may be added when vMCP supports other MCP protocol capability types. When a bulk capability replace is performed, multiple add and remove events may be emitted as part of the same operation.
References #
resource_servers.virtual_mcp_server.capability.remove
#Description
Remove a capability from a Virtual MCP server connection. This can be used to detect when a capability is removed from a Virtual MCP and is no longer available to AI agents. vMCP currently exposes only TOOL capabilities. Additional capability types may be added when vMCP supports other MCP protocol capability types. When a bulk capability replace is performed, multiple add and remove events may be emitted as part of the same operation.
References #
resource_servers.virtual_mcp_server.capability.update
#Description
Update a capability on a Virtual MCP server connection. This can be used to detect when an exposed capability's configuration (typically its alias) is changed, which could be used to obscure the underlying upstream tool. vMCP currently exposes only TOOL capabilities. Additional capability types may be added when vMCP supports other MCP protocol capability types.
References #
resource_servers.a2a_server.auth_server.add
#Description
An Okta custom authorization server has been associated with an A2A server, enabling that authorization server to issue tokens accepted by the A2A server. This can be used to audit when an Okta custom authorization server is linked to an A2A server.
References #
resource_servers.a2a_server.auth_server.remove
#Description
An authorization server association has been removed from an A2A server. This can be used to audit when an Okta custom authorization server is unlinked from an A2A server.
References #
resource_servers.a2a_server.delete
#Description
Delete A2A server. This can be used to monitor when A2A servers are removed from your organization.