Agent Auth MCP Server

Identity and authentication service for AI agents. Issues verifiable credentials, manages API key lifecycles, and provides OAuth-like flows for

Remote serverstreamable-httpPython

What is the Agent Auth MCP Server?

Identity and authentication service for AI agents. Issues verifiable credentials, manages API key lifecycles, and provides OAuth-like flows for machine-to-machine

Recorded tools

  • discover — Returns supported grant types, available scopes, token lifetimes, and all endpoint URLs. Call this first to understand what the service offers.
  • authenticate — Exchange an API key for an access token (client_credentials grant).
  • refresh_token — Exchange a refresh token for a new access + refresh token pair.
  • introspect_token — Check whether a token is valid and inspect its claims (RFC 7662).
  • revoke_token — The token is added to the blocklist and invalidated. Idempotent — revoking an already-revoked token succeeds.
  • create_credential — The raw_key is returned once — save it immediately. Subsequent reads only show the key prefix.
  • rotate_credential — Revoke an existing API key and issue a replacement in one atomic operation.
  • revoke_credential — The revoke_credential tool exposed by this server.
  • create_delegation — The delegate can only receive scopes the delegator already holds. Delegations can be chained up to max_chain_depth times.
  • check_permission — Dry-run policy evaluation — checks whether an agent is allowed to perform an action without actually enforcing it. Useful for pre-flight checks.
  • list_agents — The list_agents tool exposed by this server.
  • get_agent — Returns agent fields (id, name, agent_type, trust_level, status) merged with metadata (is_root, is_active).

More MCP options

Compare MCP servers by category, or browse hosted MCP servers if you prefer an endpoint over a local process.

Maintainer setup documentation.

Recorded tools

Check the linked publisher documentation and your connected client's tool list. Names and availability can vary with the server version and account permissions.

ToolWhat it does
refresh_token
introspect_token
revoke_token
create_credential
rotate_credential
revoke_credential
create_delegation
check_permission
list_agents
get_agent

How to install the Agent Auth MCP Server

{
  "mcpServers": {
    "agentauth": {
      "command": "uv",
      "args": [
        "run",
        "--directory",
        "/path/to/agent-auth/mcp-server",
        "agentauth-mcp"
      ],
      "env": {
        "AGENTAUTH_URL": "https://agentauth.radi.pro"
      }
    }
  }
}

From the project documentation. Replace placeholders and example paths before connecting.

Configuration

VariableDescriptionRequired
AGENTAUTH_URLDeclared in the maintainer’s client configuration.Check documentation

Example prompts to try

  • “Use Agent Auth to discover.”
  • “Use Agent Auth to quickstart.”
  • “Use Agent Auth to authenticate.”

Frequently asked questions

Identity and authentication service for AI agents. Issues verifiable credentials, manages API key lifecycles, and provides OAuth-like flows for machine-to-machine Confirm the tools offered by your installed version in the connected client. Tool availability and permissions depend on the server and account configuration.