"Authentik" matching MCP servers:

Governed SSO/IAM operations for Keycloak and Authentik — login-failure, stale-permission, client-config, and MFA RCA, with unbypassable audit logging (MCP + CLI), budget/runaway guards, dry-run, and undo/rollback.

Enables unified administrative control over Cloudflare, Porkbun, Docker, Proxmox VE, Nginx Proxy Manager/NPMPlus, Uptime Kuma, Authentik, and Coolify. Exposes service discovery and action execution through three MCP tools with roughly 150 cataloged operations for managing DNS, containers, VMs, proxies, monitors, users, and related infrastructure.