1. Conduid
  2. Agents
  3. Agentic IAM PoC
MCP server · Agents

Agentic IAM PoC

by · github.com/goncoco/Agentic-IAM-PoC

Proof of concept showing how OAuth 2.0, OIDC, Token Exchange (RFC 8693) and an external policy engine (OPA) compose to secure multi-agent LLM systems. Includes a LangGraph orchestrator over MCP, a Keycloak realm with per-agent clients, and five adversarial scripts (AT1–AT5) that empirically validate the controls. Master's thesis (TFM).

Unclaimed iamkeycloaklanggraphmcpoauth2oidcsecurity
InstallView source
34Low

Scored 21 days ago · breakdown

About Agentic IAM PoC

Agentic IAM PoC is an MCP server published by goncoco in the Agents category: proof of concept showing how OAuth 2.0, OIDC, Token Exchange (RFC 8693) and an external policy engine (OPA) compose to secure multi-agent LLM systems. Includes a LangGraph orchestrator over MCP, a Keycloak realm with per-agent clients, and five adversarial scripts (AT1–AT5) that empirically validate the controls. Master's thesis (TFM).

Install

From source
git clone https://github.com/goncoco/Agentic-IAM-PoC

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about Agentic IAM PoC

Powered by Claude · Grounded in docs

I know everything about Agentic IAM PoC. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

6 checks have not been run yet.

Questions

About Agentic IAM PoC

How do I install Agentic IAM PoC?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is Agentic IAM PoC safe to use with an AI agent?

Its trust score is 34 out of 100 (low). Conduid hasn't run static security checks on this repository yet, so review the source yourself before granting it credentials. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Agentic IAM PoC still maintained?

Conduid hasn't recorded a commit date for this repository yet. Check the repository directly for recent activity.