Authentication & Identity MCP Servers for Claude Desktop

Scans MCP server auth code for OAuth 2.1 anti-patterns: token passthrough, missing audience

AI agent identity, permissions, trust scores, and tamper-evident audit trails via Vorim AI

Resolve, verify and discover .agt agent names: owner, records, signed manifest, endpoints.

Manage Authentik through AI assistants

Encrypted environment variable vault with AI access policies, keeping secrets safe from AI agents.

MCP auth gateway: verify agent identity, enforce per-tool permissions, block replays, emit receipts.

Keycloak admin for AI agents — realms, users, clients, roles; safe-by-default governance.

Generate and verify time based one time passwords locally. No network and no key.

MCP server for Logto: users, applications. Works with Cloud or self-hosted.

Ask the human for API keys in a browser page and write them to .env. The model only sees key names.

MCP server for Zitadel: users, organizations. Works with any instance.

MCP server for interacting with 1Password via the CLI to read and manage credentials.

Neutral MCP server for AgentEnvelope authority: sovereign verify + vault verify/lookup/mint.

Decode and verify JSON Web Tokens locally. No network and no key.

Administer Keycloak via its Admin REST API: users, roles, clients, groups, IdP, events.

Portable cryptographic identity for AI agents. Ed25519 keypairs and signed manifests.

An auth proxy for accessing remote MCP servers using Google Cloud Application Default Credentials (ADC)

Keep credentials out of AI coding agents with local approvals, scoped injection, and audit trails.

Verify a proposed action against a signed Agent Mandate without executing or mutating accounts.

Post-quantum (ML-DSA-65/FIPS-204) agent identity + AI-decision receipts, verifiable offline.

Check a counterparty's verifiable Credda trust record; verify or present signed credentials.