←︎ Back to directory

THE INDEX · AUTHORIZATION & IDENTITY

Authorization & Identity

Authorization servers and identity layers that issue and validate the tokens an MCP server accepts. The MCP authorization specification builds on OAuth 2.1, so this category covers both MCP-specific products and general-purpose authorization servers used for MCP.

Who can connect, and what may they do?

What belongs in this category

  • OAuth 2.1 authorization servers used in front of MCP servers
  • Identity platforms with documented MCP authorization support
  • Products handling dynamic client registration, scopes, or agent delegation

Auth0 for AI Agents

Authorization & Identity

Provides OAuth 2.1 and OpenID Connect authorization for MCP servers, including discovery, client registration, resource-scoped tokens, and token exchange.

SaaS

AuthPlane

Authorization & Identity

A self-hosted OAuth 2.1 authorization server for MCP servers.

Self-hosted

MCP

Authorization & Identity

Adds MCP provider authentication to an application and provides a framework-agnostic remote auth client for verifying tokens and protecting resources when the MCP server is separate from Better Auth.

Self-hosted

Clerk

Authorization & Identity

Authentication platform with OAuth provider support used for MCP server authorization

SaaS

Inbound Apps

Authorization & Identity

Provides identity infrastructure for AI agents and MCP servers, including authorization, scoped access control, consent, token management, and DCR security.

SaaS

ext-auth

Authorization & Identity

Official repository of MCP authorization extensions

Self-hosted

Keycloak

Authorization & Identity

Keycloak is open-source identity and access management for applications and services.

Self-hosted

Ory Hydra

Authorization & Identity

OpenID-certified OAuth 2.0 server that delegates user authentication to your application

Hybrid

Permit.io

Authorization & Identity

Provides real-time, fine-grained authorization and policy-backed delegation, approvals, trust, and audit for humans, services, and AI agents.

Hybrid

Prefactor

Authorization & Identity

Records agent activity, classifies data risk, and stores quality evidence for reviewing agents in production.

Hybrid

Scalekit MCP Auth

Authorization & Identity

Drop-in OAuth 2.1 for any MCP server — user login, SSO, agent tokens, scopes, and DCR included

SaaS

Stytch Connected Apps

Authorization & Identity

Provides AI-agent authentication, authorization, and consent management, including an MCP authentication and authorization toolkit.

SaaS

workers-oauth-provider

Authorization & Identity

Adds OAuth 2.1 to HTTP APIs and remote MCP servers on Workers; KV-backed, with Client ID Metadata Document support

Self-hosted

WorkOS

Authorization & Identity

Provides OAuth authorization for MCP servers through AuthKit and WorkOS Connect.

SaaS

ZITADEL

Authorization & Identity

Open-source identity and access management platform for SaaS and B2B applications, providing SSO, MFA, passkeys, OIDC, SAML, SCIM, and multi-tenancy with self-hosted and SaaS deployment options.

Hybrid

Continue exploring

See the full directory →︎
Cookie preferences