1. Conduid
  2. AI
  3. Auth Servers
MCP server · AI

Auth Servers

by · github.com/Azure-Samples/mcp-auth-servers

🔒 Reference MCP servers that demo how authentication works with the current Model Context Protocol spec.

Unclaimed MIT last commit 9 months ago ai
InstallView source
58Fair

Scored 5 months ago · breakdown

About Auth Servers

Auth Servers is an MCP server published by Azure-Samples in the AI category: 🔒 Reference MCP servers that demo how authentication works with the current Model Context Protocol spec.

The repository has 50 stars and 10 forks, with the last commit 9 months ago. Six months or more without a commit doesn't mean the server is broken, but check the open issues before depending on it in production.

Install

From source
git clone https://github.com/Azure-Samples/mcp-auth-servers

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about Auth Servers

Powered by Claude · Grounded in docs

I know everything about Auth Servers. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

Static checks derived from the repository 7 hours ago. Heuristics on the source, not an audit.

  • ✓README presentThe repository ships documentation.
  • ✓License declaredUsable under a stated license.
  • !Tests presentNo tests found. Behaviour changes may go unnoticed between versions.
  • !Dependencies pinnedNo lockfile. Installs can pull different code over time.
  • ✓No dynamic code executionSource scan found no eval, dynamic Function, or shell execution.
  • !Scoped permissionsDoesn't declare a permission scope. Assume it can do anything its process can.

README

🔒 MCP Server Authentication Reference Collection

Reference servers that demo how authentication works with the current Model Context Protocol spec.

[!WARNING] Code presented here is for demo purposes only. Your specific scenarios (including rules inside your enterprise, specific security controls, or other protection mechanisms) may differ from the ones that are outlined in this repository. Always conduct a security audit and threat modeling for any production and customer-facing assets that require authentication and authorization.

Scenarios

Servers above are designed for various runtime scenarios. They are tagged as follows:

  • Remote MCP servers: Remote MCP Server
  • Local MCP servers: Local MCP Server
  • Dual-purpose MCP servers (can run locally or remotely): Dual-purpose MCP Server

Supported identity providers

Provider Scenario Server Type Implementation State
Entra ID API Management gating MCP server. Remote MCP Server remote-mcp-apim-functions-python
Entra ID Confidential client, mapped to session token. Dual-purpose MCP Server entra-id-cca-session
Entra ID Public client, using WAM. Local MCP Server entra-id-local-wam
GitHub GitHub application w/OAuth, mapped to session token. Dual-purpose MCP Server github-app-session
Entra ID API Management gating an Azure Functions MCP server. Remote MCP Server remote-auth-mcp-apim-py
Entra ID API Management gating an App Service MCP server with Protected Resource Metadata (PRM) Remote MCP Server remote-mcp-apim-oauth-prm

README fetched from the repository 7 hours ago. The original is authoritative.

Questions

About Auth Servers

How do I install Auth Servers?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is Auth Servers safe to use with an AI agent?

Its trust score is 58 out of 100 (fair). It passes 3 of the 6 static security checks run so far; the failures are listed above. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Auth Servers still maintained?

The last commit was 9 months ago and 3 open issues. That's long enough that you should check whether the maintainer is responding to issues before depending on it.