--- title: "MCP auth providers: vendor list | Agent MCP Directory" description: "Auth providers: 9 MCP vendors read on 5 November 2026, each with dated facts, prices and standards. Two checks on each domain." canonical: https://agentmcpdirectory.com/vendors/by-type/auth-provider site: "Agent MCP Directory" last_updated: 2026-11-05 section: "Vendors" --- # MCP auth providers: vendor list | Agent MCP Directory > Auth providers: 9 MCP vendors read on 5 November 2026, each with dated facts, prices and standards. Two checks on each domain. Source: https://agentmcpdirectory.com/vendors/by-type/auth-provider Site: Agent MCP Directory Last reviewed: 2026-11-05 # Auth providers Vendors that sign agents and users in and issue the tokens a remote MCP server checks. 9 vendors typed here by main layer, each read on its own pages on 5 November 2026 and listed A to Z: Auth0, Better Auth, Clerk, Descope, Keycard, Logto, Scalekit, Stytch and WorkOS. Of these, 9 state at least one standard on the pages read, and 9 publish a price for at least one product. Other layers they also cover: gateway or proxy (2) and connector platform (1). ## Auth providers | Vendor | Type | What it does for this layer | Standards stated | Pricing | Ora score | Cloudflare scan | Last read | | --- | --- | --- | --- | --- | --- | --- | --- | | Auth0 | auth provider | Auth0's Auth for MCP acts as the OAuth 2.1 authorization server for remote MCP servers, with CIMD and DCR client registration, on-behalf-of token exchange and Token Vault for third-party APIs. | 3 supported, 1 partial MCP | per monthly active user, AI Agents add-on as of 2026-11-05 | 74 (B) scanned 2026-11-05 | 27 L1 Basic Web Presence, 2026-11-05 | 2026-11-05 | | Better Auth | auth provider | Better Auth is an open-source TypeScript authentication framework whose MCP plugin turns the app into an OAuth authorization server and protected resource for MCP clients, including the 2026-07-28 profile with CIMD. | 3 supported MCP | open source as of 2026-11-05 | 66 (C) scanned 2026-09-16 | 7 L0 Not Ready, 2026-11-05 | 2026-11-05 | | Clerk | auth provider | Clerk runs an OAuth server inside the customer's app that MCP servers built on Next.js or Express can use, with CIMD, DCR fallback and consent screens, and ships its own MCP server, CLI and agent skills. | 4 supported MCP, Agent Skills, CLIs | per retained user as of 2026-11-05 | 90 (A) scanned 2026-11-05 | 87 L5 Agent-Native, 2026-11-05 | 2026-11-05 | | Descope | auth provider | Descope acts as the authorization server for MCP servers: it publishes discovery metadata, registers clients by CIMD or DCR, runs login and consent, issues tokens and stores downstream credentials in a Connections vault. | 3 supported MCP | monthly base plus usage as of 2026-11-05 | 74 (B) scanned 2026-10-20 | 53 L4 Agent-Integrated, 2026-11-05 | 2026-11-05 | | Keycard | auth provider also gateway or proxy | Keycard gives each agent its own identity and issues scoped, just-in-time credentials at runtime, and puts MCP servers behind a unified access gateway with per-tool policy and an audit log. | 2 supported MCP, A2A | per transaction as of 2026-11-05 | 65 (C) scanned 2026-08-23 | 20 L1 Basic Web Presence, 2026-11-05 | 2026-11-05 | | Logto | auth provider | Logto is an open-source identity platform whose MCP guide makes Logto the authorization server for an MCP server through the mcp-auth library and MCP SDK v2, with the server registered as an API resource. | 1 supported MCP | monthly plus token usage as of 2026-11-05 | no cached score | 20 L1 Basic Web Presence, 2026-11-05 | 2026-11-05 | | Scalekit | auth provider also gateway or proxy, connector platform | Scalekit is an OAuth 2.1 authorization server for MCP servers with DCR and CIMD, and also sells AgentKit, an MCP gateway with 600+ connectors and virtual MCP servers scoped by agent role. | 3 supported MCP | per tool call as of 2026-11-05 | 74 (B) scanned 2026-10-10 | 20 L1 Basic Web Presence, 2026-11-05 | 2026-11-05 | | Stytch | auth provider | Stytch Connected Apps turns an app into the OAuth authorization server for its remote MCP server, treating each MCP client as a Connected App that asks for consent through the authorization code grant. | 2 supported MCP | free tier then usage as of 2026-11-05 | 63 (C) scanned 2026-08-31 | 20 L1 Basic Web Presence, 2026-11-05 | 2026-11-05 | | WorkOS | auth provider | WorkOS AuthKit is a spec-compatible OAuth authorization server for MCP servers, built on WorkOS Connect, with CIMD and optional DCR client registration and resource indicators. | 4 supported MCP | per MAU above 1 million, per connection as of 2026-11-05 | 86 (A) scanned 2026-11-04 | 40 L1 Basic Web Presence, 2026-11-05 | 2026-11-05 | ## Typed elsewhere, also covering this layer Auth providers - [Arcade](https://agentmcpdirectory.com/vendors/arcade/) - [AWS](https://agentmcpdirectory.com/vendors/aws-agentcore/) - [Cloudflare](https://agentmcpdirectory.com/vendors/cloudflare/) - [Nango](https://agentmcpdirectory.com/vendors/nango/) - [Pomerium](https://agentmcpdirectory.com/vendors/pomerium/) ## The other layers Layers - [Hosts and runtimes](https://agentmcpdirectory.com/vendors/by-type/host/) 10 - [Registries and directories](https://agentmcpdirectory.com/vendors/by-type/registry/) 8 - [Gateways and proxies](https://agentmcpdirectory.com/vendors/by-type/gateway/) 13 - [Auth providers](https://agentmcpdirectory.com/vendors/by-type/auth-provider/) 9 - [Security scanners](https://agentmcpdirectory.com/vendors/by-type/security-scanner/) 6 - [SDKs and frameworks](https://agentmcpdirectory.com/vendors/by-type/sdk-or-framework/) 8 - [Connector platforms](https://agentmcpdirectory.com/vendors/by-type/connector-platform/) 10 Edition 4 November 2026 Method [How rows are verified](https://agentmcpdirectory.com/method/) Data [CSV and JSON](https://agentmcpdirectory.com/data/) Markdown [This page as markdown](https://agentmcpdirectory.com/vendors/by-type/auth-provider/index.md) ## Sources - [Auth0 home](https://auth0.com/ai/docs/mcp/overview), read 5 November 2026 - [MCP plugin - Better Auth docs](https://www.better-auth.com/docs/plugins/mcp), read 5 November 2026 - [Clerk home](https://clerk.com/), read 5 November 2026 - [MCP Authorization - Descope Documentation](https://docs.descope.com/mcp), read 5 November 2026 - [Keycard home](https://www.keycard.ai/), read 5 November 2026 - [Logto home](https://logto.io/), read 5 November 2026 - [Auth for MCP Servers: Drop-in OAuth 2.1 | Scalekit](https://www.scalekit.com/mcp-auth), read 5 November 2026 - [Stytch - A better way to build auth](https://stytch.com/), read 5 November 2026 - [Secure auth for MCP servers - WorkOS](https://workos.com/mcp), read 5 November 2026 Last reviewed 5 November 2026