AI agent tools for identity and access
In this catalog, an identity and access tool is one that handles sign-in, authorization, secrets and credentials for agents or apps. Our enrichment pass tags 130 listings with it: 49 MCP servers, 28 agent skills, 10 plugins, 5 agent frameworks and 38 AI agents. By listing rank, the top MCP server is OpenWork MCP Gateway, the top agent skill is access-review and the top AI agent is OpenInstinct. 17 of the 130 are published by the vendor behind the product, and 81 were active in the last 30 days. 12 of the 49 MCP servers run only as remote servers, with nothing to install locally. Each entry below links to its listing page, with grades, install commands and sources.
Updated Oct 26, 2026 · Built from catalog data; how we rank and grade
What the job is
- Tagged listings
- 130
- By type
- 49 MCP servers, 28 agent skills, 10 plugins, 5 agent frameworks and 38 AI agents
- Published by the vendor
- 17 of 130
- Active in the last 30 days
- 81 of 130
- Open source
- 76 of 130
- MCP servers that run only remotely
- 12 of 49
- Hosts named by the MCP servers
- Claude Code (48), Cursor (48), VS Code (48)
Building blocks by type
The top entries of each type, by listing rank. Open a listing for its install command, grades and sources.
MCP servers 49 tagged
- 1OpenWork MCP Gateway
openworklabs.com
Your OpenWork org's skills, plugins, workflows, and connections through one OAuth MCP URL.
- Most GitHub stars here (24,243)
- Remote server, no local install
- Active in the last 30 days
★ 24.2KLast active Oct 24, 2026Remote (HTTP)Claude Code, VS Code, Cursor, Windsurf
AFreshness: A–Security: not graded yet - 2UniFi Access MCP
sirkirby
Manage UniFi Access doors, credentials, policies, visitors, and events.
- Most weekly downloads here (1K)
- Active in the last 30 days
- Open source (MIT)
★ 945↓ 1K/wkLast active Oct 22, 2026Local (stdio)Claude Code, Codex, VS Code, Cursor +2
AFreshness: A–Security: not graded yet - 3node9
node9-ai
Access control for AI agents and MCP servers: allow, hold for approval, or block each tool call
- Active in the last 30 days
- Open source (Apache-2.0)
★ 219Last active Oct 24, 2026Local (stdio)Claude Code, Codex, VS Code, Cursor +2
AFreshness: A–Security: not graded yet - 4Attestix
VibeTensor
AI agent identity, signed credentials, delegated authority and governance evidence.
- Active in the last 30 days
- Open source (Apache-2.0)
★ 839↓ 161/wkLast active Oct 12, 2026Local (stdio)Claude Code, Codex, VS Code, Cursor +2
AFreshness: A–Security: not graded yet - 5WorkOS
workos.comOfficial
Manage your WorkOS workspace in plain language: orgs, users, SSO, Directory Sync, and AuthKit.
- Published by the vendor
- Remote server, no local install
- Active in the last 30 days
★ 45Last active Oct 19, 2026Remote (HTTP)Claude Code, VS Code, Cursor, Windsurf
AFreshness: A–Security: not graded yet
Agent skills 28 tagged
- 1access-review
devops-skills
Conduct periodic access reviews and certifications.
- Largest repository here (48,428 stars)
- Active in the last 30 days
- Open source (MIT)
★ 48.4KLast active Oct 24, 2026Claude Code, Claude apps, Codex, Cursor +6
AFreshness: A–Security: not graded yet - 2lark-shared
larksuite
Use for lark-cli setup/auth tasks: auth login/status/logout, user vs bot identity, business-domain permissions (--domain, including all/docs/drive), missing…
- Repository has 17.8K stars
- Active in the last 30 days
- Open source (MIT)
★ 17.8KLast active Oct 13, 2026Claude Code, Claude apps, Codex, Cursor +6
AFreshness: A–Security: not graded yet - 3
Configuring Cognito Federation for Webiny projects — federated sign-in via external identity providers (Google, Facebook, Apple, Amazon, OIDC/Entra ID) while…
- Repository has 8K stars
- Active in the last 30 days
★ 8KLast active Oct 20, 2026Claude Code, Claude apps, Codex, Cursor +6
AFreshness: A–Security: not graded yet - 4turnstile-spin
cloudflareOfficial
Set up, repair, or migrate to Cloudflare Turnstile bot verification in an existing frontend and backend, including server-side Siteverify.
- Published by the vendor
- Repository has 3.2K stars
- Active in the last 30 days
★ 3.2KLast active Oct 12, 2026Claude Code, Claude apps, Codex, Cursor +6
AFreshness: A–Security: not graded yet - 5protected-vercel-deployments
vercel-labsOfficial
Access and test Vercel deployments protected by Vercel Authentication, SSO, or Deployment Protection with agent-browser.
- Published by the vendor
- Repository has 44.5K stars
- Active in the last 30 days
★ 44.5KLast active Oct 22, 2026Claude Code, Claude apps, Codex, Cursor +6
AFreshness: A–Security: not graded yet
Plugins 10 tagged
- 1
See what is left on your Claude Code and Codex subscription accounts (Pro, Max, Plus…), get told which one to use when one runs low, and switch from the…
- Active in the last 30 days
- Open source (MIT)
★ 6Last active Oct 23, 2026VS Code, Cursor, Windsurf, VSCodium
AFreshness: A–Security: not graded yet - 2
Browse and resume Claude Code sessions, track usage and 5-hour/weekly limits, switch accounts, and manage MCP servers, skills, hooks, agents, plugins, file…
- Active in the last 30 days
- Open source (Apache-2.0)
★ 32Last active Oct 12, 2026VS Code, Cursor, Windsurf, VSCodium
AFreshness: A–Security: not graded yet - 3
Ginexys Core ExtensionGinexys
Authentication, IPC routing and Copilot language model tools shared by the Ginexys VS Code extension suite (Table Formatter, Document Workbench, Schema Editor).
- Active in the last 30 days
- Open source (MIT)
★ 6Last active Oct 22, 2026VS Code, Cursor, Windsurf, VSCodium
AFreshness: A–Security: not graded yet - 4
Antigravity AgentMonchiLin
Manage your Antigravity accounts directly from VS Code
- Most GitHub stars here (676)
- Open source (MIT)
★ 676Last active Feb 7, 2026VS Code, Cursor, Windsurf, VSCodium
DFreshness: D–Security: not graded yet
Agent frameworks 5 tagged
- 1metorial
metorial
Open-source access layer that connects AI agents to 1200+ integrations with shared auth, permissions and audit logs.
- 3.4K GitHub stars
- Active in the last 30 days
- For TypeScript and JavaScript
★ 3.4K↓ 236/wkLast active Oct 22, 2026
AFreshness: A–Security: not graded yet - 2attestix
VibeTensor
Python toolkit for signed identities, verifiable credentials and delegated authority for AI agents, with MCP and REST interfaces.
- Active in the last 30 days
- Open source (Apache-2.0)
- For Python and JavaScript
★ 839↓ 161/wkLast active Oct 12, 2026
AFreshness: A–Security: not graded yet - 3agent-governance-toolkit
microsoft
Policy enforcement, identity, sandboxing and reliability tooling for autonomous AI agents, installable with one pip command.
- Most GitHub stars here (6,461)
- Most weekly downloads here (28.3K)
- Active in the last 30 days
★ 6.5K↓ 28.3K/wkLast active Oct 23, 2026
AFreshness: A–Security: not graded yet - 4standards-sdk
hashgraph-online
TypeScript SDK with reference implementations of Hashgraph Consensus Standards and a Registry Broker client.
- 1.3K GitHub stars
- Active in the last 30 days
- Open source (Apache-2.0)
★ 1.3K↓ 40/wkLast active Oct 19, 2026
AFreshness: A–Security: not graded yet
Search agent frameworks for identity and access → All harnesses & sdks
AI agents 38 tagged
- 1OpenInstinct
Merit-Systems
Self-hosted personal assistant you text over iMessage; it can drive a cloud browser for tasks such as bookings and purchases.
- Most GitHub stars here (472)
- Active in the last 30 days
- Open source (MIT)
★ 472Last active Oct 5, 2026
AFreshness: A–Security: not graded yet - 2AAAA-Nexus
Atomadic Tech
Agent Control Plane - 146+ endpoints for AI agent security, trust, reputation, escrow, SLA enforcement, formal verification, compliance, discovery, and x402…
CFreshness: C–Security: not graded yet - 3Agent Reputation
Agent Reputation
Agent Reputation runs the Complaint Bureau: a registry of complaints about paid agent transactions, where entry requires a signature from one of the two…
CFreshness: C–Security: not graded yet - 4MolTrust Trust Registry
CryptoKRI GmbH
Production trust infrastructure for autonomous AI agents.
CFreshness: C–Security: not graded yet - 5DEUSPROOF
DEUSPROOF
Open registry for AI agents that arrive on their own — no account, no key, no human needed.
CFreshness: C–Security: not graded yet
Questions
- What are the top tools for identity and access?
- By listing rank, the top MCP server is OpenWork MCP Gateway, the top agent skill is access-review and the top AI agent is OpenInstinct. Rank weighs adoption, freshness, documentation and publisher identity; money never changes it.
- How many tools does the catalog list for identity and access?
- 130 listings are tagged for it: 49 MCP servers, 28 agent skills, 10 plugins, 5 agent frameworks and 38 AI agents. Tags come from an automated enrichment pass over the top-ranked listings, so tools outside that pass are not counted.
- Which AI apps do the MCP servers work with?
- Of the 49 MCP servers, 48 list Claude Code, 48 list Cursor and 48 list VS Code as a supported host. Open a listing for its install command and the other hosts it names.
- Which of these are published by the vendor itself?
- 17 of the 130 are published by the vendor behind the product, including turnstile-spin, cloudflare-one and protected-vercel-deployments.
130 listings are tagged for this use case; the lists above show the top entries.