Mcp Auth Servers
🔒 Reference MCP servers that demo how authentication works with the current Model Context Protocol spec.
Install
$ agentstack add mcp-localden-mcp-auth-servers ✓ scanned · ✓ verified — works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
About
>[!IMPORTANT] >This is now moved under one of the official Microsoft-supported GitHub organizations. Please use that repository as a point of reference.
🔒 MCP Server Authentication Reference Collection
Reference servers that demo how authentication works with the current Model Context Protocol spec.
>[!WARNING] >Code presented here is for demo purposes only. Your specific scenarios (including rules inside your enterprise, specific security controls, or other protection mechanisms) may differ from the ones that are outlined in this repository. Always conduct a security audit and threat modeling for any production and customer-facing assets that require authentication and authorization.
Scenarios
Servers above are designed for various runtime scenarios. They are tagged as follows:
- Remote MCP servers:
- Local MCP servers:
- Dual-purpose MCP servers (can run locally or remotely):
Supported identity providers
| Provider | Scenario | Server Type | Implementation | State | |:---------|:---------|:------------|:---------------|:------| | Entra ID | Confidential client, mapped to session token. | | [entra-id-cca-session](/src/entra-id-cca-session/) | | | Entra ID | Public client, using WAM | | [entra-id-local-wam](/src/entra-id-local-wam/) | | | GitHub | GitHub application w/OAuth, mapped to session token. | | [github-app-session](/src/github-app-session/) | |
Source & license
This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: localden
- Source: localden/mcp-auth-servers
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet — be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.