MCP servers - Auth and security
MCP servers for auth and security
Identity providers, secret managers and code scanners an agent can configure or query. 26 official servers from 20 vendors, 8 of them hosted by the vendor, each with setup copied from the vendor's own docs.
Last verified
Servers
- 1Password
1Password Device Trust MCP server
Self-hosted Python MCP server that exposes the 1Password Device Trust (formerly Kolide) API so agents can query devices, people, checks, issues and live query campaigns, with auto-pagination and aggregation helpers. It runs locally over Streamable HTTP or stdio.
Transport: Streamable HTTP, stdioAuth: API key - 1PasswordStatus: Beta
1Password Environments MCP server
Local stdio MCP server built into the 1Password desktop app that lets agents create, list and rename 1Password Environments, list variable names, add variables and create locally mounted .env files. It never returns secret values to the client.
Transport: stdioAuth: Other - 1Password
MCP server for 1Password SaaS Manager
MCP server exposing the 1Password SaaS Manager (formerly Trelica) API, covering audit logs, applications, workflows, people and teams, contracts and assets. Available as a hosted read-only remote server or a local sm-mcp binary that can optionally enable writes.
Transport: Streamable HTTP, stdioAuth: OAuth - Auth0Status: Beta
Auth0 MCP server
Local MCP server that connects AI clients to an Auth0 tenant through the Management API to create and update applications, APIs, client grants, Actions and Forms, read logs, and onboard a project with an Auth0 SDK quickstart.
Transport: stdioAuth: OAuth - Clerk
Clerk MCP server
Remote MCP server that lets AI agents work with a Clerk account, including creating and configuring applications, managing users, checking domains and setting up production instances, and returns Clerk SDK snippets.
Transport: Streamable HTTPAuth: OAuth - Cloudflare
Cloudflare One CASB MCP server
A remote MCP server for inspecting Cloudflare One CASB integrations, assets and asset categories to find security misconfigurations in SaaS applications.
Transport: Streamable HTTPAuth: OAuth or API key - DatadogStatus: Preview
Datadog Code Security MCP server
A local stdio MCP server that wraps Datadog security binaries to run SAST, secrets detection, SCA, IaC scanning and SBOM generation on source code from an AI coding assistant.
Transport: stdioAuth: API key - DopplerStatus: Preview
Doppler MCP server
Local stdio MCP server that exposes Doppler API operations as tools, auto-generated from Doppler's OpenAPI spec, so agents can list projects, configs and secrets, read and update secrets, and manage environments. Supports read-only mode and project or config scoping.
Transport: stdioAuth: API key - Elastic
Elastic Security MCP App
Local MCP App server from Elastic that adds interactive security operations dashboards (alert triage, Attack Discovery, case management, detection rules, ES|QL threat hunting, sample data) to MCP hosts. It connects to Elasticsearch and Kibana with the analyst's API key and writes results back through the Elastic Security APIs.
Transport: stdio, Streamable HTTPAuth: API key - HashiCorp (Terraform, Vault)Status: Beta
Vault MCP server
Self-hosted MCP server that lets agents manage Vault mounts, read and write KV secrets, and configure the PKI secrets engine (issuers, roles, certificate issuance) against a Vault server.
Transport: stdio, Streamable HTTPAuth: API key - HashiCorp (Terraform, Vault)Status: Beta
Vault Radar MCP server
Locally run MCP server that lets agents query an HCP Vault Radar project for data sources, resources, secret-leak events, and detected secret types.
Transport: stdioAuth: API key - IBM
IBM OpenPages GRC MCP server
MCP server that lets AI agents interact with the IBM OpenPages governance, risk and compliance platform, in remote HTTP or local stdio mode.
Transport: Streamable HTTP, stdioAuth: Other - IBM
IBM QRadar SIEM MCP server
MCP server for IBM QRadar SIEM with 83 tools covering offenses, AQL searches, reference data, data classification, analytics rules, log sources, assets, forensics and configuration.
Transport: Streamable HTTP, stdioAuth: Other - Infisical
Infisical MCP server
Infisical's official local stdio MCP server for managing secrets, projects, environments and folders through the Infisical API. Works with Infisical Cloud or self-hosted instances via a custom host URL.
Transport: stdioAuth: API key - MicrosoftStatus: Preview
Microsoft MCP server for Enterprise
Microsoft-hosted remote MCP server that translates natural-language requests into read-only Microsoft Graph calls over Microsoft Entra identity and directory data.
Transport: Streamable HTTPAuth: OAuth - OktaStatus: Preview
Okta Managed MCP server
Okta-hosted MCP server, served from each org's own domain, that lets AI clients manage users, groups, apps, policies, system logs and Okta Identity Governance workflows using natural language.
Transport: Streamable HTTPAuth: OAuth - OktaStatus: GA
Okta Open Source MCP server
Self-hosted MCP server that lets LLM agents manage an Okta org through the Okta Admin Management APIs, covering users, groups, applications, policies, device assurance policies, system logs, brands, themes, custom pages and email templates.
Transport: stdioAuth: OAuth - Red HatStatus: Preview
MCP server for Red Hat security content
Red Hat-hosted remote MCP server that gives agents CVE details, security advisories and errata, affected products and remediation context for Red Hat products.
Transport: Streamable HTTPAuth: OAuth - Semgrep
Semgrep MCP server
Exposes Semgrep static analysis to AI agents: scan code for security vulnerabilities, run custom rules, run supply chain scans, fetch the AST and pull findings from Semgrep AppSec Platform. It ships inside the Semgrep CLI as the `semgrep mcp` subcommand and is bundled with hooks and skills as Semgrep Guardian.
Transport: stdio, Streamable HTTPAuth: OAuth or API key - SnykStatus: GA
Snyk API & Web MCP server
Local Python MCP server for Snyk API & Web (formerly Probely), a DAST product, that lets an agent onboard web and API scan targets, configure login sequences and credentials, start scans and triage findings.
Transport: stdioAuth: API key - Snyk
Snyk MCP server
Local MCP server built into the Snyk CLI (snyk mcp) that lets coding agents run Snyk SAST, open source dependency, container, IaC and SBOM scans and pull the findings into the agent. It is the MCP part of Snyk Studio's secure-at-inception workflow.
Transport: stdio, SSEAuth: Other - Socket
Socket MCP server
Lets AI assistants query Socket dependency security scores and metadata across npm, PyPI, cargo, Maven, NuGet, RubyGems, Go and more, list org alerts and threat feed items, and inspect files inside published packages. Use the public hosted server or self-host the npm package.
Transport: Streamable HTTP, stdioAuth: OAuth or API key - Stytch
Stytch MCP server
Hosted remote MCP server for the Stytch Management API, letting an agent read and configure Stytch workspace assets such as projects, redirect URLs, public tokens, SDK config and email templates. Anything available through Stytch Programmatic Workspace Actions is exposed to the agent.
Transport: Streamable HTTP, SSEAuth: OAuth - Tailscale
Aperture MCP endpoint
Aperture by Tailscale is an AI agent backed by an LLM gateway that runs in your tailnet. The gateway serves a /v1/mcp endpoint that gathers tools and resources from configured remote MCP servers behind Tailscale identity-based grants, and can add built-in tools for provisioning tailnet nodes and running commands over Tailscale SSH.
Transport: Streamable HTTP, SSEAuth: Other - Teleport
Teleport database access MCP server
A local stdio MCP server started by the Teleport tsh client (tsh mcp db start). It lets MCP clients list Teleport-enrolled databases and run SQL against PostgreSQL databases using the user's Teleport identity and RBAC.
Transport: stdioAuth: Other - WorkOS
WorkOS MCP server
Hosted remote MCP server that lets an agent manage a WorkOS workspace (organizations, users, SSO connections, Directory Sync, AuthKit branding, webhooks and more) by calling the WorkOS API as the signed-in dashboard user. It inherits the user's dashboard role and defaults to a sandbox environment.
Transport: Streamable HTTPAuth: OAuth
Compare at a glance
Stage is the vendor's own label. Runs says whether the vendor hosts the server, it runs on your own instance, or you install it locally.
| Server | Stage |
|---|---|
| 1Password Device Trust MCP server1Password | Status: Unlabelled |
| 1Password Environments MCP server1Password | Status: Beta |
| MCP server for 1Password SaaS Manager1Password | Status: Unlabelled |
| Auth0 MCP serverAuth0 | Status: Beta |
| Clerk MCP serverClerk | Status: Unlabelled |
| Cloudflare One CASB MCP serverCloudflare | Status: Unlabelled |
| Datadog Code Security MCP serverDatadog | Status: Preview |
| Doppler MCP serverDoppler | Status: Preview |
| Elastic Security MCP AppElastic | Status: Unlabelled |
| Vault MCP serverHashiCorp (Terraform, Vault) | Status: Beta |
| Vault Radar MCP serverHashiCorp (Terraform, Vault) | Status: Beta |
| IBM OpenPages GRC MCP serverIBM | Status: Unlabelled |
| IBM QRadar SIEM MCP serverIBM | Status: Unlabelled |
| Infisical MCP serverInfisical | Status: Unlabelled |
| Microsoft MCP server for EnterpriseMicrosoft | Status: Preview |
| Okta Managed MCP serverOkta | Status: Preview |
| Okta Open Source MCP serverOkta | Status: GA |
| MCP server for Red Hat security contentRed Hat | Status: Preview |
| Semgrep MCP serverSemgrep | Status: Unlabelled |
| Snyk API & Web MCP serverSnyk | Status: GA |
| Snyk MCP serverSnyk | Status: Unlabelled |
| Socket MCP serverSocket | Status: Unlabelled |
| Stytch MCP serverStytch | Status: Unlabelled |
| Aperture MCP endpointTailscale | Status: Unlabelled |
| Teleport database access MCP serverTeleport | Status: Unlabelled |
| WorkOS MCP serverWorkOS | Status: Unlabelled |
Newsletter
New MCP servers, the week they ship
One email per week. New official MCP servers, the coding tools that support them and how developers wire them up.