Identity & access management MCP servers

A server here authentication, user accounts, permissions and access control for apps.

Not here: a server that merely requires a login itself.

325servers
168 remote157 localTagged by Odel's AI, which can make mistakes

Best fit

140 made for this, ranked by starsRemoteLocal
  1. Smartpolicy @smartpolicy-protocol/smartpolicyRuntime authorization for AI agents and smart contracts via an immutable on-chain policy registry6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  2. Gateway @bolyra/gatewayMCP auth gateway: verify agent identity, enforce per-tool permissions, block replays, emit receipts.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  3. Google Workspace @aringad/google-workspace-mcpGoogle Workspace Admin via MCP. Manage users, groups, aliases, org units.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
  4. Gatana @gatana/gatewayMCP gateway for every MCP server, OpenAPI spec and FaaS tool behind one URL: SSO, SCIM, audit logs.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from a package registry.
  5. Audit AI @audit0/auditai-mcpFinds authorization holes in Next.js + Supabase apps and live Supabase databases. No API key.20% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  6. Intended @intended-so/intendedIntended's authority layer as MCP tools: ALLOW/ESCALATE/DENY decisions with signed tokens.Not assessed yet.Runs on your machine, installed from npm.
  7. AgentAuth @raditotev/agent-authIdentity and auth for AI agents: credentials, tokens, delegations, and permission checks.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
  8. AuthProof @kaleckh/authproofSigned, non-replayable API auth. Agents self-register and sign requests with ERC-8128.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  9. RosettaHUB @danielcregg/rosettahub-mcp-serverManage RosettaHUB user AWS accounts — budgets, AWS CLI, access control.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
  10. TrigGuard @trigguard-ai/trigguardDeterministic execution authorization for AI agents and automated systems.9% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  11. SentinelGate @sentinel-gate/sentinelgateOpen-source MCP proxy for AI agent access control with CEL policies, RBAC, and audit.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.
  12. AlphaKey @seyoung230/alphakey-mcp-serverAlphaKey IDaaS MCP Server — Manage SSO, MFA, users, apps, and security policies through AI IDE10% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
  13. Grantor @chaingrantor/grantor-mcpWrap any MCP server with enforced, bounded, revocable permissions — grant, narrow, check, revoke.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  14. Tuurio ID @tuurio/tuurio-idManage users, OIDC clients, roles, settings, and audits with tenant-bound OAuth.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from a package registry.
  15. LemonLDAP::NG MCP Server @linagora/llng-mcpManage LemonLDAP::NG SSO instances: configuration, sessions, OIDC, SAML, 2FA.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  16. Agent Sudo @kisyntra/agent-sudo-mcpMCP adapter for Agent_Sudo: authorization, delegation, provenance, and audit for AI agents.15% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
  17. AscendKit @ascendkit/ascendkitAuth, email, journeys, surveys, webhooks, and analytics for SaaS in one project, one API key.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  18. ThornGuard @qwady/thornguardRemote MCP security gateway for auth, redaction, policy enforcement, and audit logging.8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from a package registry.