MCP server for enterprise authentication and authorization — JWT validation, OIDC token inspection, OAuth 2.0 introspection, role-based access control
Wellknown found it in public sources; nobody has proven control of it yet. Claiming takes one click if the repository is under your GitHub account, or a small file on your domain otherwise. Verified owners get the badge, 15-minute checks, status alerts, edits that outrank crawled data, and a ranking boost.
Agents can do it too: POST https://wellknown.network/api/v1/claims with {"agent":"enterprise-auth-mcp-server","method":"well_known_file"} — machine-readable steps at claim.json, guide at /docs/claim.
Everything here was measured by our prober or read from a registry. Nothing is self-reported.
Attributed to the source that supplied each field. Treated as claims, not facts.
# enterprise-auth-mcp-server [](https://badge.fury.io/py/enterprise-auth-mcp-server) [](https://opensource.org/licenses/MIT) MCP server for enterprise authentication and authorization — JWT validation, OIDC token inspection, OAuth 2.0 introspection, and role-based access control for AI agents. ## Features - **JWT Decode** — Inspect token header, payload, and metadata without signature verification - **JWT Validate** — Validate signature, expiry, audience, and issuer - **Permission Check** — Verify if a token has required OAuth scopes and roles - **User Roles** — Extract user identity, roles, and groups (supports Keycloak, Azure AD, Auth0, Okta) - **OAuth Introspection** — RFC 7662 token introspection (remote endpoint or local fallback) - **OIDC Claims Verify** — OpenID Connect Core 1.0 claims validation - **Token Scope List** — List all scopes, roles, and permissions with provider auto-detection - **OIDC Discovery** — Fetch provider endpoints from /.well-known/openid-configuration ## Installation ```bash pip install enterprise-auth-mcp-server ``` ## Claude Desktop Configuration Add to `claude_desktop_config.json`: ```json { "mcpServers": { "enterprise-auth": { "command": "enterprise-auth-mcp-server" } } } ``` ## Tools | Tool | Description | |------|-------------| | `decode_jwt` | Decode JWT without signature verification | | `validate_jwt` | Validate JWT signature, expiry, audience, issuer | | `check_permissions` | Check if token has required scopes/roles | | `get_user_roles` | Extract user identity and roles from token | | `oauth_introspect` | OAuth 2.0 RFC 7662 token introspection | | `verify_oidc_claims` | Validate OIDC Core 1.0 required claims | | `list_token_scopes` | List all scopes and permissions with provider detection | | `get_oidc_discovery` | Fetch OIDC provider discovery document | ## …
Mapped onto the structured taxonomy from declared text and observed tool names. Confidence shown for derived entries.
Every source is kept verbatim. Field changes are logged as events.