Identity & access management MCP servers

A server here authentication, user accounts, permissions and access control for apps.

Not here: a server that merely requires a login itself.

325servers
168 remote157 localTagged by Odel's AI, which can make mistakes
By GitHub stars, at most two per publisher
  1. Number 1: Hexis@bevel-software/hexisGit-backed platform for skills, tools, and context for AI agents5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.94 GitHub stars.
  2. Number 2: Microsoft MCP Server for Enterprise@microsoft/enterprisemcpOfficial Microsoft MCP Server to query Microsoft Entra data using natural language5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.58 GitHub stars.
  3. Number 3: WorkOS@workos/mcpManage your WorkOS workspace in plain language: orgs, users, SSO, Directory Sync, and AuthKit.4% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.45 GitHub stars.

Best fit

140 made for this, ranked by starsRemoteLocal
  1. TAP @human/tapCredential isolation for AI agents: placeholder secrets, policy checks, optional human approval.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.12 GitHub stars.
  2. Cortex Gateway @wellknownmcp/cortex-gatewaySelf-hosted federated MCP gateway: one OAuth 2.1 MCP server in front of N apps, user-level scopes.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.12 GitHub stars.
  3. AIMEAT @aimeat/aimeatAIMEAT - the Linux of AI. An open, federated, self-hosted AI operating system you own. MIT.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.8 GitHub stars.
  4. Supabase SelfHosted @smithery/mistersandfr-supabase-mcp-selfhostedManage Supabase projects end to end across database, auth, storage, realtime, and migrations. Moni…9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.7 GitHub stars.
  5. MCP Gateway @panossalt/mcp-gatewayMulti-tenant MCP platform with OAuth 2.1, Entra SSO, RBAC and audit logging.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.6 GitHub stars.
  6. Insumer @insumermodel/insumerWallet auth: send a wallet and conditions, get a signed boolean across 37 chains.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.2 GitHub stars.
  7. Raziel @tide-foundation/razielMCP server teaching AI agents to implement TideCloak: auth, E2EE, IGA, security analysis6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.2 GitHub stars.
  8. CorroborateMe @cnrcode/corroboratemeProve end users to agents and apps: login-links, OIDC clients, and API keys over remote MCP8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.1 GitHub stars.
  9. Boat House @boathousecloud/boathouseDeploy and share small apps with team login, persistent data, versioned updates and domains.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.1 GitHub stars.
  10. SealGate MCP Gateway @sealgate/gatewayMCP gateway with runtime security policy, tool-call-level control, and audit of agent actions.10% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.1 GitHub stars.
  11. Auth Token Service @mikerawsonnz/auth-token-serviceHash passwords with bcrypt and issue/verify JWT session tokens over A2A + MCP.22% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.1 GitHub stars.
  12. Oakallow @oakallow/oakallowRuntime permission, approval, and audit layer for AI agent tool execution.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.1 GitHub stars.
  13. AgentSIM MCP @agentsim/mcpControl plane for agent auth walls. Connector 0 handles SMS OTP with US test numbers.23% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.1 GitHub stars.
  14. 4chems Platform — IUCLID, CHESAR & QSAR Toolbox hosting @4chems/platform-apiRemote MCP server for 4chems hosted IUCLID, CHESAR and QSAR Toolbox: onboarding, inquiries, admin.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  15. The Bridge @thebridge/bridgeHosted login, teams, billing and feature flags for your SaaS app, set up by your AI assistant.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
  16. Unkey MCP by usefulapi @usefulapi/unkeyManage API keys, identities, permissions, rate-limit overrides and verification analytics.Not assessed yet.A remote server; no sign-in.
  17. Kinde MCP by usefulapi @usefulapi/kindeUsers, organizations, roles, permissions, applications and feature flags.Not assessed yet.A remote server; no sign-in.
  18. FGAC.ai: Multiple Gmail Accounts, Google Sheets & Docs @fgac/fgacMultiple Gmail accounts, editable Google Sheets & Docs for AI agents. Deny-by-default access rules.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  19. Proofable MCP @proofable/mcpContext and control for any AI. Agent identity, scoped access, and proof across tools.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  20. Proof Holdings @proof/mcp-serverOne API, all things verified — control, delegation, human approval, anti-impersonation.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
  21. MANDATE Credential Broker @projetnanocorp/mandateMCP server for mandates, delegation, policy-gated execution, credential grants, and audit.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.

Also touches on Identity & access management

86 where it is one part of a bigger job