{"$schema":"https://wellknown.network/schemas/agent-record-v1.json","schemaVersion":"1","id":"ag_c939tncwqgzy","handle":"enterprise-auth-mcp-server","url":"https://wellknown.network/agents/enterprise-auth-mcp-server","links":{"self":"https://wellknown.network/agents/enterprise-auth-mcp-server/record.json","html":"https://wellknown.network/agents/enterprise-auth-mcp-server","markdown":"https://wellknown.network/agents/enterprise-auth-mcp-server/record.md","api":"https://wellknown.network/api/v1/agents/enterprise-auth-mcp-server","status":"https://wellknown.network/api/v1/agents/enterprise-auth-mcp-server/status","claim":"https://wellknown.network/agents/enterprise-auth-mcp-server/claim","claimApi":"https://wellknown.network/api/v1/claims","claimDescriptor":"https://wellknown.network/agents/enterprise-auth-mcp-server/claim.json","badge":"https://wellknown.network/agents/enterprise-auth-mcp-server/badge.svg","openapi":"https://wellknown.network/openapi.json"},"ard":{"identifier":"urn:air::server:enterprise-auth-mcp-server","type":"application/mcp-server-card+json"},"kind":"mcp_server","declared":{"name":"enterprise-auth-mcp-server","summary":"MCP server for enterprise authentication and authorization — JWT validation, OIDC token inspection, OAuth 2.0 introspection, role-based access control","description":"# enterprise-auth-mcp-server\n\n[![PyPI version](https://badge.fury.io/py/enterprise-auth-mcp-server.svg)](https://badge.fury.io/py/enterprise-auth-mcp-server)\n[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)\n\nMCP server for enterprise authentication and authorization — JWT validation, OIDC token inspection, OAuth 2.0 introspection, and role-based access control for AI agents.\n\n## Features\n\n- **JWT Decode** — Inspect token header, payload, and metadata without signature verification\n- **JWT Validate** — Validate signature, expiry, audience, and issuer\n- **Permission Check** — Verify if a token has required OAuth scopes and roles\n- **User Roles** — Extract user identity, roles, and groups (supports Keycloak, Azure AD, Auth0, Okta)\n- **OAuth Introspection** — RFC 7662 token introspection (remote endpoint or local fallback)\n- **OIDC Claims Verify** — OpenID Connect Core 1.0 claims validation\n- **Token Scope List** — List all scopes, roles, and permissions with provider auto-detection\n- **OIDC Discovery** — Fetch provider endpoints from /.well-known/openid-configuration\n\n## Installation\n\n```bash\npip install enterprise-auth-mcp-server\n```\n\n## Claude Desktop Configuration\n\nAdd to `claude_desktop_config.json`:\n\n```json\n{\n  \"mcpServers\": {\n    \"enterprise-auth\": {\n      \"command\": \"enterprise-auth-mcp-server\"\n    }\n  }\n}\n```\n\n## Tools\n\n| Tool | Description |\n|------|-------------|\n| `decode_jwt` | Decode JWT without signature verification |\n| `validate_jwt` | Validate JWT signature, expiry, audience, issuer |\n| `check_permissions` | Check if token has required scopes/roles |\n| `get_user_roles` | Extract user identity and roles from token |\n| `oauth_introspect` | OAuth 2.0 RFC 7662 token introspection |\n| `verify_oidc_claims` | Validate OIDC Core 1.0 required claims |\n| `list_token_scopes` | List all scopes and permissions with provider detection |\n| `get_oidc_discovery` | Fetch OIDC provider discovery document |\n\n## …","publisher":null,"homepage":"https://github.com/AiAgentKarl/enterprise-auth-mcp-server","repository":"https://github.com/AiAgentKarl/enterprise-auth-mcp-server","version":"0.1.0","license":"MIT","protocols":["mcp"],"tags":["ai-agents","authentication","authorization","enterprise","jwt","mcp","model-context-protocol","oauth","oidc","security","sso"],"pricing":null,"endpoints":[{"url":"pypi:enterprise-auth-mcp-server","type":"package_pypi","auth":null,"probeable":false}],"skills":null,"tools":null,"extra":null,"attribution":{"kind":"pypi","name":"pypi","license":"pypi","repoUrl":"pypi","summary":"pypi","version":"pypi","description":"pypi","homepageUrl":"pypi"}},"derived":{"capabilities":[{"slug":"security.identity","name":"Identity & Access","confidence":1,"provenance":"declared"}],"categories":["security"],"language":"en"},"observed":{"status":"unknown","statusReason":"Distributed as a package to run locally; no network endpoint to check.","lastOkAt":null,"lastProbedAt":null,"statusComputedAt":null,"reliability30d":null,"latestObservations":[],"tools":null,"package":{"name":"enterprise-auth-mcp-server","registry":"pypi","observedAt":"2026-09-09T15:23:48.325Z","publishedAt":"2026-04-06T08:38:20.526609Z","latestVersion":"0.1.0"}},"verification":{"claimed":false,"claimedAt":null,"proofs":[]},"provenance":{"sources":[{"source":"pypi","key":"enterprise-auth-mcp-server","url":"https://pypi.org/project/enterprise-auth-mcp-server/","firstSeenAt":"2026-09-09T15:21:35.340Z","fetchedAt":"2026-09-09T15:21:35.340Z","normalizedAt":"2026-09-09T15:21:35.340Z"}]},"firstSeenAt":"2026-09-09T15:21:35.340Z","updatedAt":"2026-09-09T15:23:48.325Z"}