Identity & access management MCP servers

A server here authentication, user accounts, permissions and access control for apps.

Not here: a server that merely requires a login itself.

325servers
168 remote157 localTagged by Odel's AI, which can make mistakes
By GitHub stars, at most two per publisher
  1. Number 1: Unico@codespar/mcp-unicoDEPRECATED: no live endpoint (api.unico.co does not resolve)4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.272 GitHub stars.
  2. Number 2: Certta@codespar/mcp-certtaDEPRECATED: no live endpoint (api.certta.com.br does not resolve)4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.272 GitHub stars.
  3. Number 3: node9@node9-ai/node9Access control for AI agents and MCP servers: allow, hold for approval, or block each tool callNot assessed yet.Runs on your machine, installed from npm.217 GitHub stars.

Best fit

140 made for this, ranked by starsRemoteLocal
  1. Auth0 MCP Server @auth0/mcpAuth0 MCP Server: Manage Auth0 applications, APIs, actions, logs, and forms using natural language4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.121 GitHub stars.
  2. Vorim @vorim-ai-labs/vorim-mcp-serverAI agent identity, permissions, trust scores, and tamper-evident audit trails via Vorim AI8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.66 GitHub stars.
  3. Grantex @mishrasanjeev/grantexOAuth 2.0 for AI agents — scoped delegation tokens, audit trails, and revocation.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.33 GitHub stars.
  4. Semrush Appcenter @mcparmory/semrush-appcenterManage subscriptions, users, and send event notifications for Semrush apps6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.32 GitHub stars.
  5. ScopeGate @alifanov/scopegatePermission gateway for AI agents: scoped MCP endpoints over 27 services, audited and revocable.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from a package registry.17 GitHub stars.
  6. Microsoft 365 Admin @okapi-ca/ms-365-adminMicrosoft 365 administration via Graph API application permissions (read-only by default).6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.15 GitHub stars.
  7. Infrabroker @luisgf/infrabrokerSSH & Kubernetes access broker for AI agents; the model never touches a credential.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.13 GitHub stars.
  8. Authentik MCP Server @samik081/mcp-authentikManage Authentik through AI assistants4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.13 GitHub stars.
  9. GreenLake users @hewlettpackard/greenlake-users-mcpHPE GreenLake users MCP Server4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.9 GitHub stars.
  10. Auth Your Agent @authyouragent/mcpAct for a person on websites: sandboxed browser, phone approvals, saved logins, scheduled plans.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.6 GitHub stars.
  11. OneLogin @onelogin/onelogin-mcpMCP server for OneLogin API - manage users, apps, roles, and authentication3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.5 GitHub stars.
  12. Odoo Gateway @parth-unjiya/odoo-mcp-gatewaySecurity-first MCP gateway for Odoo 17/18/19 — YAML-driven security, 27 tools6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.4 GitHub stars.
  13. Haldir @exposureguard/haldirGuardian layer for AI agents: identity, secrets, audit via MCP.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.4 GitHub stars.
  14. Trusty Squire @trustysquire/trusty-squireProvision, ship, and pay from your coding agent — keys and cards never leave the vault.12% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.3 GitHub stars.
  15. Microsoft Entra SCIM @darrenjrobinson/entra-scim-mcpMicrosoft Entra SCIM 2.0 Provisioning API: user and group lifecycle, with a local mock.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.2 GitHub stars.
  16. Keycloak Admin @mrz1880/mcp-keycloak-adminAdminister Keycloak via its Admin REST API: users, roles, clients, groups, IdP, events.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.2 GitHub stars.
  17. Waxseal @degenlegion-com/waxsealEd25519 identity for AI agents. Verify seals, sign documents, gate actions with approvals.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.2 GitHub stars.
  18. PrivacyFence @privacyfence/privacyfenceNeeds the PrivacyFence app from privacyfence.eu: human approval and audit for AI access to your dataNot assessed yet.Runs on your machine, installed from MCPB.1 GitHub stars.
  19. Nacre @nacre/nacreSelf-hosted permission-aware context layer. Search returns only what the caller may read.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
  20. Mnki @mnkiagentos/mnki-mcpMCP proxy that checks every tools/call against Agent Trust policy, with evidence, before it runs.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
  21. Keycloak @dockndevai/mcp-keycloakKeycloak admin for AI agents — realms, users, clients, roles; safe-by-default governance.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.

Also touches on Identity & access management

87 where it is one part of a bigger job