{"$schema":"https://wellknown.network/schemas/agent-record-v1.json","schemaVersion":"1","id":"ag_zxkmez7cn8jp","handle":"mcp-kanidm","url":"https://wellknown.network/agents/mcp-kanidm","links":{"self":"https://wellknown.network/agents/mcp-kanidm/record.json","html":"https://wellknown.network/agents/mcp-kanidm","markdown":"https://wellknown.network/agents/mcp-kanidm/record.md","api":"https://wellknown.network/api/v1/agents/mcp-kanidm","status":"https://wellknown.network/api/v1/agents/mcp-kanidm/status","claim":"https://wellknown.network/agents/mcp-kanidm/claim","claimApi":"https://wellknown.network/api/v1/claims","claimDescriptor":"https://wellknown.network/agents/mcp-kanidm/claim.json","badge":"https://wellknown.network/agents/mcp-kanidm/badge.svg","openapi":"https://wellknown.network/openapi.json","history":"https://wellknown.network/api/v1/agents/mcp-kanidm/history","tools":"https://wellknown.network/api/v1/agents/mcp-kanidm/tools"},"ard":{"identifier":"urn:air::server:mcp-kanidm","type":"application/mcp-server-card+json"},"kind":"mcp_server","declared":{"name":"mcp-kanidm","summary":"MCP server for Kanidm Identity Management using FastMCP","description":"# Kanidm MCP Server (mcp-kanidm)\n\nA professional Model Context Protocol (MCP) server for managing an advanced Kanidm deployment. Built completely asynchronously leveraging `httpx` and `FastMCP`.\n\nThis server is designed to work via the Kanidm REST v1 API using Service Accounts to keep your intelligent agents sandboxed and robust (eliminating standard CLI shell constraints).\n\n## Features\n\nProvides the following MCP tools for Identity and Access Management in Kanidm:\n\n- `list_users`: Queries validated user identities with simple search filters.\n- `get_user_details`: Extends deep query capabilities into PII attributes and precise access windows (requires an appropriate service account assigned).\n- `reset_password_intent`: Generates a credential update intent token for help-desking scenarios securely (the AI agent will never directly reset nor touch user passwords directly).\n- `delete_user`: Manages robust termination via a **Human-in-the-Loop** (HITL) prompt (`ctx.elicit()`) guaranteeing a person grants affirmative consent ahead of any destructive REST operation.\n\n## Installation and Usage\n\nTo install or run this server dynamically within any compatible framework (Claude Desktop, etc.), you can run it via `uvx` dynamically or install via Python global packages using `uv`.\n\n### Autenticación: Cómo obtener el KANIDM_TOKEN\n\n**Importante:** Nunca debes configurar el agente MCP utilizando tu cuenta principal de `admin`. Para mantener la seguridad, aislar los privilegios y garantizar un rastro de auditoría claro, debes usar una **Cuenta de Servicio** (Service Account).\n\nSigue estos 3 pasos usando la CLI de Kanidm:\n\n1. **Crear una cuenta de servicio** para esta integración (por ejemplo, llamada `mcp-agent`):\n   ```bash\n   kanidm service-account create mcp-agent \"MCP Server Agent\"\n   ```\n\n2. **Asignarle los privilegios correctos**. Añade esta cuenta al grupo adecuado, como `idm_people_admins` (para gestión completa de usuarios) o `idm_service_desk` (para tareas de soporte):\n …","publisher":null,"homepage":null,"repository":null,"version":"0.1.0","license":null,"protocols":["mcp"],"tags":["mcp"],"pricing":null,"endpoints":[{"url":"pypi:mcp-kanidm","type":"package_pypi","auth":null,"probeable":false}],"skills":null,"tools":null,"extra":null,"attribution":{"kind":"pypi","name":"pypi","summary":"pypi","version":"pypi","description":"pypi"}},"derived":{"capabilities":[{"slug":"dev.terminal","name":"Terminal & Shell","confidence":0.745,"provenance":"derived"}],"categories":["dev"],"language":"es"},"observed":{"status":"unknown","statusReason":"Distributed as a package to run locally; no network endpoint to check.","lastOkAt":null,"lastProbedAt":null,"statusComputedAt":null,"reliability30d":null,"latestObservations":[],"tools":null,"package":{"name":"mcp-kanidm","registry":"pypi","observedAt":"2026-10-28T11:27:29.863Z","publishedAt":"2026-05-13T15:39:12.400342Z","latestVersion":"0.1.0"},"toolSurface":null,"endpointFacts":[]},"verification":{"claimed":false,"claimedAt":null,"proofs":[]},"provenance":{"sources":[{"source":"pypi","key":"mcp-kanidm","url":"https://pypi.org/project/mcp-kanidm/","firstSeenAt":"2026-09-10T02:23:08.024Z","fetchedAt":"2026-10-28T11:26:57.091Z","normalizedAt":"2026-10-28T11:26:57.091Z"}]},"firstSeenAt":"2026-09-10T02:23:08.024Z","updatedAt":"2026-10-28T11:27:29.863Z"}