English Français العربية

AgentAuth

Official registry Security

Identity and auth for AI agents: credentials, tokens, delegations, and permission checks.

Source code

Install

Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).

PYPI package agentauth-mcp-server
Claude Code 
claude mcp add agentauth -e 'AGENTAUTH_URL=<AGENTAUTH_URL>' -e 'AGENTAUTH_API_KEY=<your agentauth_api_key>' -- uvx agentauth-mcp-server==0.1.1
JSON configuration (Claude Desktop, Cursor, VS Code) 
{
    "mcpServers": {
        "agentauth": {
            "command": "uvx",
            "args": [
                "agentauth-mcp-server==0.1.1"
            ],
            "env": {
                "AGENTAUTH_URL": "<AGENTAUTH_URL>",
                "AGENTAUTH_API_KEY": "<your agentauth_api_key>"
            }
        }
    }
}

Environment variables

  • AGENTAUTH_URL required Base URL of the AgentAuth service (e.g. https://agentauth.radi.pro or http://localhost:8000 for self-hosted)
  • AGENTAUTH_API_KEY secret Default API key for the authenticate tool. Optional — can also be passed per call.

Frequently asked questions

What is AgentAuth?

Identity and auth for AI agents: credentials, tokens, delegations, and permission checks.

How do I install AgentAuth?

It runs on your machine. In Claude Code: claude mcp add agentauth -e 'AGENTAUTH_URL=<AGENTAUTH_URL>' -e 'AGENTAUTH_API_KEY=<your agentauth_api_key>' -- uvx agentauth-mcp-server==0.1.1. For other clients, paste the JSON configuration from this page into their MCP settings.

Does AgentAuth need an API key?

Yes. It expects AGENTAUTH_URL, AGENTAUTH_API_KEY, which you set in its configuration.

Is AgentAuth open source?

Its code is public on GitHub, but the repository does not declare a standard license.

Who maintains AgentAuth?

It is published by radi-totev. AI.tn lists it but does not maintain or endorse it.

From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.