Best Authentik MCP Servers
Authentik is an open-source Identity Provider focused on flexibility and versatility. It provides single sign-on capabilities, multi-factor authentication, and identity management to help organizations secure their applications and services.
Why this server?
Provides governed identity operations for authentik: listing and inspecting users, groups, clients, identity providers, sessions, and authentication events; analyzing login failures, stale access, client misconfigurations, and MFA coverage; and performing audited write actions such as disabling or enabling users and revoking user sessions.
AlicenseAqualityBmaintenanceGoverned SSO/IAM operations for Keycloak and Authentik — login-failure, stale-permission, client-config, and MFA RCA, with unbypassable audit logging (MCP + CLI), budget/runaway guards, dry-run, and undo/rollback.29MITWhy this server?
Provides marketplace-based lifecycle management for Authentik, including deployment, control, and uninstallation on the infra-TAK host.
AlicenseBqualityCmaintenanceEnables MCP clients to control an infra-TAK host, including marketplace modules, Node-RED flows, MediaMTX video, TAK video publishing, and Docker operations via local APIs.19MITWhy this server?
Integration with Authentik as an OpenID Connect provider for authentication to the LaSuite Docs API.
AlicenseBqualityDmaintenanceMCP server for LaSuite Docs API, enabling operations like list, read, create, update, delete documents, versions, favorites, and current user via OIDC authentication.14MITWhy this server?
Integrates with Authentik as an identity provider for OAuth authentication, enabling secure access to the MCP server and forwarding user tokens to the backend.
AlicenseAqualityCmaintenanceEnables AI clients to browse instruments, items, dimensions, expert assignments, and calculate Content Validity Index (CVI) via a standard MCP interface.11MITWhy this server?
Supports external authentication via reverse proxy headers, allowing integration with Authentik for authentication.
AlicenseAqualityCmaintenanceDirForge is a lightweight, self-hosted file tree browser with integrated MCP that lets you share directory structures with anyone. It packs various MCP tools for browsing and analyzing files and directories.215MITWhy this server?
Can authenticate users through an Authentik OpenID Connect provider.
Why this server?
Provides authentication and user role management via Authentik, enabling user identity and access control for the platform.

PlugLayer MCP Serverofficial
AlicenseCqualityBmaintenanceEnables deploying and managing infrastructure via natural language, including project/domain management, compute nodes, image deployment, and CI/CD integration.70MITWhy this server?
Provides tools for managing Authentik identity provider resources including users, groups, applications, tokens, providers, flows, stages, policies, and admin settings.
AlicenseAqualityBmaintenanceMCP server for Authentik identity provider enabling management of users, groups, apps, tokens, flows, and policy bindings through natural language.71MITWhy this server?
Optional SSO integration through an authentik forward-auth proxy: a signed ID token passed in a header (default `x-authentik-jwt`) is verified for signature, issuer, audience, expiry and allowed email, automatically starting a web session, with logout redirected to the authentik sign-out URL to end the SSO session too.

RClaude MCP Serverofficial
AlicenseNot gradedqualityCmaintenanceExposes a Streamable HTTP endpoint that lets other agents, such as claude.ai connectors and Claude Code, start and continue Claude Code sessions remotely. It provides session control over the same single-user Claude Code environment that the web console and REST API manage.489 npm1MIT