Identity & access management MCP servers

A server here authentication, user accounts, permissions and access control for apps.

Not here: a server that merely requires a login itself.

325servers
168 remote157 localTagged by Odel's AI, which can make mistakes

Best fit

140 made for this, ranked by starsRemoteLocal
  1. AgentAuth @raditotev/agent-authIdentity and auth for AI agents: credentials, tokens, delegations, and permission checks.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
  2. AuthProof @kaleckh/authproofSigned, non-replayable API auth. Agents self-register and sign requests with ERC-8128.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  3. STACK @getstack-run/stackCommand your AI agents: verifiable passports, credential injection, full audit, revoke in 60s.37% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  4. RosettaHUB @danielcregg/rosettahub-mcp-serverManage RosettaHUB user AWS accounts — budgets, AWS CLI, access control.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
  5. TrigGuard @trigguard-ai/trigguardDeterministic execution authorization for AI agents and automated systems.9% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  6. SentinelGate @sentinel-gate/sentinelgateOpen-source MCP proxy for AI agent access control with CEL policies, RBAC, and audit.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.
  7. KeyID @keyid-ai/keyidSignup sessions, browser continuity, email, SMS, and OTP/TOTP infrastructure for AI agents.13% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  8. Alter Onboarding @alteraidev/alter-onboardingGuide developers from setup through a verified, policy-aware, audited Alter API call.4% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  9. Barvinca MCP @barvinca/mcpInspect ACC administration data and run bounded, approval-gated bulk user workflows.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  10. SealGate @sealgate/sealgateAdd passkeys to an existing login (made in Japan). Manage projects, API keys, passkeys, audit logs.4% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  11. agentleFS @agentlefs/agentlefsAgent permissions for the files your team shares7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  12. Enforcer @instruxi/v3Identity and authorization in one system: allow, deny, the reason, and a record.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  13. AlphaKey @seyoung230/alphakey-mcp-serverAlphaKey IDaaS MCP Server — Manage SSO, MFA, users, apps, and security policies through AI IDE10% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
  14. Auth Token Service @getvda/auth-token-mcp-serviceAuth Token MCP Service10% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  15. Auth Token Traced Service @getvda/auth-token-mcp-traced-serviceAuth Token MCP Traced Service10% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  16. MCP Auth Preflight @inversolabs/mcp-auth-preflightPreflight MCP OAuth compatibility with structured evidence and remediation guidance.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  17. Grantor @chaingrantor/grantor-mcpWrap any MCP server with enforced, bounded, revocable permissions — grant, narrow, check, revoke.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  18. InfraPulse @infrapulse/infrapulseAI agent infrastructure for discovery, authorization, execution, identity, and signed receipts.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  19. Workspace Access Comparator @wxt-ai/workspace-access-comparatorCompare workspace access lists10% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  20. Execute auth-sentinel-mcp @evozim/auth-sentinel-mcpPremium agentic endpoint for auth-sentinel-mcp.23% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
  21. Fullmakt @fullmakt/fullmaktCredential broker for AI agents: scoped, revocable API access with policy enforcement and audit.11% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  22. raccha.ai @raccha/racchaMCP-first toolbox for agents: KV storage, auth, queue, and utility tools. Free in early access.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  23. Microsoft 365 @proscendia/microsoft-365Permissioned access to Outlook, OneDrive and Teams via the user's own Microsoft account17% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  24. Tuurio ID @tuurio/tuurio-idManage users, OIDC clients, roles, settings, and audits with tenant-bound OAuth.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from a package registry.