Identity & access management MCP servers

A server here authentication, user accounts, permissions and access control for apps.

Not here: a server that merely requires a login itself.

325servers
168 remote157 localTagged by Odel's AI, which can make mistakes

Best fit

140 made for this, ranked by starsRemoteLocal
  1. secureFlows @michal-lefler/secure-flowsMCP server for secureFlows (secure-flows.com). Alias of io.github.michal-lefler/secureflows-mcp.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  2. secureFlows @michal-lefler/secureflows-mcpMCP server for secureFlows: token-free URL builders and integration-linting tools for AI agents.11% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  3. Skycloak @skycloak/skycloak-mcpManaged Keycloak from any MCP client: clusters, realms, apps, SSO, users, domains, audit events.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  4. AccessOracle @tooloracle/accessoracleAccessOracle - 10 access control tools: IAM, PAM, recertification, segregation of duties.4% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  5. Authshore @jyswee/authshoreAuth infrastructure for coding agents. User pools, secrets vault, token management. As easy as git.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  6. Gentkey @gentkey/mcpOne MCP URL for all your connectors — scoped writes, enforced constraints, and a full audit trail.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  7. HODLXXI Read-Only @hodlxxi/hodlxxi-readonlyPublic read-only MCP server for HODLXXI agent identity, trust, receipts, and verification.3% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  8. Gateway @titus-civic/mcp-gatewayIdentity, authorization, audit trails, and revocable permissions for AI agents accessing MCP tools.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  9. Agent Policy Enforcement @csoai-org/agent-policy-enforcement-mcpPer-agent-pair IAM for A2A. Define policies ('orchestrator may call billing only when amount<100...12% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  10. EUDI Wallet @csoai-org/eudi-wallet-mcpEUDI Wallet MCP — EU Digital Identity Wallet under eIDAS 2.0 for AI agent authentication via14% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  11. Zeroidagent @clauxel/zeroidagent-mcpA paid remote MCP for ZeroID, built to return verdicts, receipts, usage logs, and audit-ready JSON.10% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
  12. SuperDB @superdb/mcpBackend brasileiro (Postgres, login, storage): a IA cria tabelas, liga RLS e roda SQL no projeto.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  13. Access Review Checklist @wxt-ai/workspace-access-checklist-workbenchCreate an access review checklist.Not assessed yet.A remote server; no sign-in.
  14. Cloud @skkkadoosh/cloudShare the app you built with AI privately: one sign-in link, remove anyone at once.11% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  15. autobus — signed attestations for agents, $0.01 per call @ninefiveonefive/autobusSigned attestations for agents, $0.01/call via x402: URL witness, AI permission, tx finality, JWKS.Not assessed yet.A remote server; no sign-in.
  16. Orchard — Agentic Cloud Backend @nicha404/orchardManaged database, auth, file storage, email, analytics, and deployment for coding agents.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  17. ZP Nexus @sistemasinovadores/zp-nexusSuas IAs nos computadores e projetos da empresa, com permissões, aprovações e auditoria.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  18. Drawbridge @xorfox/serverIdentity, secrets, and passwordless SSH provisioning for AI agents — Keycloak, vault, MCP tools.10% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  19. STACK @getstack-run/stackCommand your AI agents: verifiable passports, credential injection, full audit, revoke in 60s.37% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  20. KeyID @keyid-ai/keyidSignup sessions, browser continuity, email, SMS, and OTP/TOTP infrastructure for AI agents.13% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  21. Alter Onboarding @alteraidev/alter-onboardingGuide developers from setup through a verified, policy-aware, audited Alter API call.4% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  22. Barvinca MCP @barvinca/mcpInspect ACC administration data and run bounded, approval-gated bulk user workflows.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  23. SealGate @sealgate/sealgateAdd passkeys to an existing login (made in Japan). Manage projects, API keys, passkeys, audit logs.4% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  24. agentleFS @agentlefs/agentlefsAgent permissions for the files your team shares7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.