"How to implement Active Directory authentication in a project" matching MCP servers:

It enables AI agents to securely perform directory administration, automation, security auditing, health diagnostics, and compliance reporting with strict guardrails, write-approval workflows, and immutable audit logs.

Enables AI agents to get evidence-backed allow, review, or block decisions before installing or invoking third-party tools, with trust-aware discovery, official docs search, and prediction-market risk preflight.

MCP server enabling Claude Code to capture screenshots of Windows applications through WSL2, allowing AI to diagnose UI errors and verify layouts.

Implements a secure MCP server with API Key and JWT authentication, providing tools like echo, login, secure_action, and admin_action. Includes MCP Inspector integration for testing and debugging.

Enables AI agents to call tools through a security gateway that intercepts requests, enforces deterministic policy and risk checks, blocks or escalates high-risk actions for human approval, and keeps tool credentials and audit logs protected.

This MCP server provides secure access to databases for AI agents, enforcing authentication, authorization, human approval, logging, and notifications to prevent dangerous actions.

Enables AI agents to request an independent second opinion from a different frontier model, with PII scrubbing before transit, live web search grounding, caching, and multi-provider failover.

Provides identity-aware tools for checking the current employee, finding employees and direct reports, and viewing access entitlements, with visibility limited to the caller and their direct reports.

A production-ready MCP server that enables AI assistants to manage enterprise Active Directory environments through 45 specialized tools for users, groups, and GPOs. Its multi-client architecture allows for the secure management of multiple AD domains from a single codebase using natural language commands.

A template for building MCP servers with optional per-tool authentication using WorkOS AuthKit and Vercel MCP adapter.

Enables scanning projects for dependency vulnerabilities, secrets, license conflicts, code quality, and git health, returning a 0-100 health score with actionable suggestions.

Serves as a reusable FastMCP starter that verifies platform JWT bearer tokens, scopes encrypted upstream connection credentials per user/persona pair stored in MongoDB, and exposes manifest, schema, configuration, connection-status, and health routes. It also scaffolds an MCP Apps UI with build, testing, and extension guidance so developers can quickly adapt the template to their own integrations.

Security scanner for MCP servers and AI-generated code. Detects leaked API keys, PII, prompt injection, and MCP misconfigs with A-F security grades.

A production-ready MCP server with OAuth 2.1 authentication, enabling authenticated MCP tool calls via Google OAuth.

Enables AI agents to safely interact with Supabase through read-only and gated-write tools, with bounded queries, allowlists, and explicit project targeting.

Provides deterministic MCP tools for managing encrypted member profiles, including self/other lookups, responsible-person contacts, and birthday queries with privacy-focused local encryption.

Demonstrates OAuth2/OIDC authentication for MCP servers using Asgardeo, with JWT validation and a sample weather tool to showcase secured API access.

An MCP server that sends plain-text Gmail messages only to a predefined allowlist, using generated recipient IDs instead of email addresses to enforce security.

Enables authorized web/API security analysis as a stateful, multi-stage workflow with persistent session state, human-controlled validation, candidate versus confirmed finding tracking, and stop conditions.

Read-only MCP server for narrowly scoped Google Workspace user lookups via the Admin SDK Directory API, providing user status, search, aliases, and summary tools with strict domain and trust-boundary controls.

Enables centralized authentication and authorization for MCP servers, with OAuth 2.1, static API keys, and JWT verification via drop-in middleware.

This MCP server implements a secure OAuth 2.1 authorization server with Google login, enabling authenticated tool execution and a user interface for MCP applications.

Blocks AI coding assistants from installing non-existent packages and accessing non-existent files.

Provides agent certification and trust verification tools for AI agents, enabling certification checks, trust score calculations, audit ticket issuance, and emergency kill switch activation through the A-SOC trust network.

Enables AI agents to securely invoke only allowlisted, read-only tools on a local Kali Linux host over an encrypted network with OAuth2 authentication and least-privilege enforcement.

Enables executing arbitrary Joern/CPGQL queries against a loaded Code Property Graph, loading source code in multiple languages (PHP, Java, JavaScript, Python, C/C++) to build new CPGs, and inspecting loaded projects and the active workspace. It communicates with a running Joern server over its synchronous HTTP query endpoint, so no state polling is required.

Enables Claude to list Iceberg tables and run read-only DuckDB SQL queries, including time travel by snapshot, with per-caller token authentication and audit logging.

A wrapper for mcp-remote that provides secure authentication for protected MCP servers using Adobe IMS or Okta OAuth flows. It features automated token management, validation, and background refreshing for seamless access to remote resources.

Authentik MCP provides seamless integration with Authentik's API, supporting both full-featured and diagnostic modes. These enable secure, automated user, group, and system management through MCP-compatible tools.

Enables autonomous agents and MCP-compatible clients to enforce policy-approved actions using risk tiers, reversible checkpoints, and token approval bounds.

Enables secure API key management for development projects by storing keys in OS keychains, auto-generating .env files and SDK client code, and providing AI-assisted key management through Claude Code integration.

Enables safe file system operations including reading, writing, updating, and deleting files with built-in security safeguards, automatic backups, and comprehensive error handling. Provides directory listing, file metadata extraction, and protects against operations on system-critical paths.

An MCP authorization server implementing OAuth2/OIDC flows, supporting dynamic client registration, PKCE, consent screens, and client ID metadata documents for MCP authorization.

MCP server for heavy equipment management with role-based access, supervisor authentication, and high-risk request elicitation/sampling.

Enables AI agents to manage VPN infrastructure through provisioning, lifecycle control, traffic routing, and health monitoring.

Blocks prompt injection, jailbreaks, and out-of-scope input before an AI agent acts. classify_input tool, stdio transport.

Enables security analysts to carry structured investigation state across sessions by storing typed observations, hypotheses, tasks, evidence and versioned decisions in a local SQLite graph with full-text search. It also enforces authorized scope and request controls, redacted and content-hashed evidence, duplicate-test signatures and validation gates that leave findings in draft until reproducibly confirmed, then produces technical and executive reports for Antigravity, Codex and other stdio MCP clients.

Enables an AI agent to preflight concrete tool calls by recording principal, destination, scope, authority evidence, and relations, allowing only formed actions to execute and producing inspectable evidence receipts.

Enables MCP clients to triage SOC alerts while enforcing a trust firewall across retrieval, memory, and privileged actions. It exposes tools for alerts, logs, memory, and alert actions, with defenses that refuse risky operations in the presence of attacker-controllable content.

Enables Active Directory administration over LDAPS, including reading and writing users, computers, and groups with a dry-run-first safety guard.