Auth, SSO, permissions.
desktop-mcp: an MCP server that lets an AI use your computer (shell, files, clipboard, mouse, keyboard, screen OCR/image search, windows) with per-feature permission flags. Runs entirely locally. Use: npx desktop-mcp --allow-all
Ory plugin for Amp (Sourcegraph's coding agent): a permission delegate that authorizes every tool call plus an in-process plugin for session auth and activity auditing
Clonable MCP server skeleton on the official @modelcontextprotocol/server SDK v2 (protocol 2026-07-28 + 2025 legacy, stdio + stateless Streamable HTTP), with its own OAuth 2.1 authorization server (Clerk person + organisation, cloud-identity), MCP Apps UI
MCP protocol server for NestJS with decorators, transports, guards, interceptors, and registry
Suveren gateway — local agent gateway built in compliance with the Human Agency Protocol (HAP). Runs the UI, control plane, and MCP server in one Node process.
MCP elicitation anti-patterns: secrets in forms, third-party authorize URLs, credentials in URLs
Test any MCP server: connection, tools, security, login, resources and prompts. Hard facts, no AI judging.
Manage Keycloak users, groups, roles and realms through the Keycloak Admin REST API.
Put a limit in front of any MCP server: caps per action, approval before irreversible calls, and a hash-chained receipt of every decision.
Capxul MCP server for auth, Account readiness, identity, Organizations, relationships, requests, destinations, and testnet funding over Streamable HTTP.
Outlook integration with OAuth, message search, batch operations, and calendar management
Stdio MCP bridge for protected MCP servers — drop-in for npx -y mcp-savvy.
Author, edit and run Bruno collections as files: HTTP, WebSocket, gRPC, per-request pass/fail.
Gmail MCP server — scope-gated tools + attachment/download path jails + supply-chain hardening. Fork of GongRzhe/Gmail-MCP-Server via ArtyMcLabin's intermediate fork.
Framework-neutral MCP v2 server runtime and OAuth resource-server composition for NestM.
Usher for AI agents: an MCP server that knocks on web forms, gets their map, the site's rules and a short-lived pass, and can fill a whole form journey by meaning (usher_fill).
Node.js/TypeScript MCP server for AWS Single Sign-On (SSO). Enables AI systems (LLMs) with tools to initiate SSO login (device auth flow), list accounts/roles, and securely execute AWS CLI commands using temporary credentials. Streamlines AI interaction w
JWT authentication for MCP servers — JWKS validation, scope auto-discovery, and RFC 9728 Protected Resource Metadata
Ory plugin for Goose (Block's open-source agent CLI): scaffolding skills, a local Ory instance, and authentication, authorization, and audit for every tool call
MCP server for Momen.app