1. Conduid
  2. Security
  3. Authz
MCP server · Security

Authz

by · github.com/jagreehal/mcp-authz

Authorization for MCP servers: OAuth 2.1 resource server, roles/permissions policy, permission-gated tools (2026-07-28)

Unclaimed mcpmodel-context-protocoloauthauthorizationresource-serverrbac
InstallView source
37Low

Scored a month ago · breakdown

About Authz

Authz is an MCP server published by jagreehal in the Security category: authorization for MCP servers: OAuth 2.1 resource server, roles/permissions policy, permission-gated tools (2026-07-28).

Recent commit activity is the strongest signal that reported issues will get attention.

Install

Claude Code
claude mcp add authz -- npx -y mcp-authz
npx
npx -y mcp-authz

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about Authz

Powered by Claude · Grounded in docs

I know everything about Authz. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

6 checks have not been run yet.

Releases

mcp-authz@0.5.0mcp-authz@0.5.0 · 5 Oct 2026Minor Changes fda35d5: Hold every MCP server to the tool definitions you approved. `mcp-authz tools` saves a server's catalogue with an estimated token cost per tool and flags definitions with hidden characters or text addressed to the…
mcp-authz@0.4.0mcp-authz@0.4.0 · 3 Oct 2026Minor Changes 37ab42c: Add `mcp-authz wrap`, which runs a stdio MCP server and shows the client only the tools you choose. `mcp-authz tools --out` saves a server's tools as a commented config with an editor schema, `tools --check` reports…
mcp-authz@0.3.0mcp-authz@0.3.0 · 30 Sep 2026Minor Changes 111c593: `verifier.requireEmail: false` accepts a token with no email, such as an agent's OAuth client-credentials token. The caller's identity is its `sub`, which a policy rule names. Email and domain rules never match it.
mcp-authz@0.2.0mcp-authz@0.2.0 · 29 Sep 2026Minor Changes 9b0cf40: Human approval for permitted actions, policy explain and a CLI, plus security and audit fixes. Approval. A capability can declare `approval: true`, or a predicate over its arguments, and the call waits for a person…
Questions

About Authz

How do I install Authz?

Run claude mcp add authz -- npx -y mcp-authz, then add the server to your MCP client's configuration.

Is Authz safe to use with an AI agent?

Its trust score is 37 out of 100 (low). Conduid hasn't run static security checks on this repository yet, so review the source yourself before granting it credentials. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Authz still maintained?

Yes — the latest release is mcp-authz@0.5.0 (5 Oct 2026), and the last commit was 17 days ago. The repository has 0 stars.