A side-by-side look at the Agent Security Scanner MCP and Authentik MCP Server MCP servers: transport, auth, tools, quality signals, and the config to install either one in Claude, Cursor, Windsurf or VS Code.
Verdict: choose Agent Security Scanner MCP for security work as a local process; choose Authentik MCP Server for security as a local process. You can also run both side by side in one mcpServers block.
scan_security, fix_security, record_security_outcome.AUTHENTIK_URL, AUTHENTIK_TOKEN.authentik_admin_system_info, authentik_admin_version, authentik_admin_settings_get.Rows where the two servers differ are marked.
| Spec | ||
|---|---|---|
| Category | Security | Security |
| Quality signal | 68/100 · Great | 56/100 · Good |
| Install command | Confirmed | Confirmed |
| Transport | Local subprocess (stdio) | Local subprocess (stdio) |
| Auth | Not declared | Not declared |
| Pricing | Not declared | Not declared |
| Required env vars | None listed | AUTHENTIK_URLAUTHENTIK_TOKEN |
| Verified owner | Community listing | Community listing |
| GitHub stars | 124 | 14 |
| Directory activity | 1 views 0 installs 0 upvotes | 1 views 0 installs 0 upvotes |
| Tools | 23 | 80 |
| Full listing | View Agent Security Scanner MCP | View Authentik MCP Server |
scan_securityScan a file for security vulnerabilities. Use verbosity='minimal' for counts only (~50 tokens), 'compact' (default) for actionable info (~200 tokens), 'full' for complete metadata.fix_securityScan a file and return fixes. Use verbosity='minimal' for summary only, 'compact' (default) for fix list, 'full' for complete fixed file content.record_security_outcomeRecord aggregate remediation outcomes after reviewing scanner findings. Sends counts only; never sends code, findings, paths, or rule IDs.list_security_rulesList all available security fix templates and their descriptionscheck_packageCheck if a package name is legitimate or potentially hallucinated (AI-invented)scan_packagesScan code for package imports and check for hallucinated (AI-invented) packages. Use verbosity='minimal' for counts, 'compact' (default) for flagged packages, 'full' for all details.list_package_statsList statistics about loaded package lists for hallucination detectionscan_agent_promptScan a prompt for malicious intent. Returns BLOCK/WARN/LOG/ALLOW. Use verbosity='minimal' for action only, 'compact' (default) for findings, 'full' for audit details.scan_git_diffScan git diff for new security vulnerabilities. Only reports issues on changed lines. Use for PR reviews.scan_projectScan an entire directory for security vulnerabilities with .gitignore support and security grading. Use verbosity='minimal' for grade + counts, 'compact' (default) for top issues, 'full' for all details.scan_agent_actionPre-execution security check for agent actions (bash, file_write, file_read, http_request, file_delete, cron, process_spawn, git, docker). Returns ALLOW/WARN/BLOCK.scan_mcp_serverScan an MCP server's source code for security vulnerabilities: overly broad permissions, missing input validation, data exfiltration, insecure patterns. Returns grade (A-F) and recommendations.authentik_admin_system_infoGet system information including HTTP host, runtime environment, server time, and embedded outpost statusauthentik_admin_versionGet Authentik version information including current version and build hashauthentik_admin_settings_getGet current system settingsauthentik_admin_settings_updateUpdate system settings (partial update)authentik_admin_appsList installed Django applications in the Authentik instanceauthentik_admin_modelsList all data models available in the Authentik instanceauthentik_admin_version_historyList Authentik version history entriesauthentik_admin_system_task_triggerTrigger all system tasks (e.g., cleanup, cache clear)authentik_authenticators_listList all authenticator devices across all types for the current userauthentik_authenticators_admin_by_type_listList authenticator devices of a specific type (admin view)authentik_authenticators_admin_by_type_getGet a single authenticator device by type and ID (admin view)authentik_authenticators_admin_by_type_deleteDelete an authenticator device by type and ID (admin view)Paste either block (or both) into your client config, e.g. claude_desktop_config.json or ~/.cursor/mcp.json. We only show a config when the install command is confirmed.
{
"mcpServers": {
"agent-security-scanner-mcp": {
"command": "npx",
"args": [
"-y",
"agent-security-scanner-mcp"
]
}
}
}
{
"mcpServers": {
"authentik-mcp-server": {
"command": "npx",
"args": [
"-y",
"@samik081/mcp-authentik"
],
"env": {
"AUTHENTIK_URL": "YOUR_AUTHENTIK_URL_HERE",
"AUTHENTIK_TOKEN": "YOUR_AUTHENTIK_TOKEN_HERE"
}
}
}
}
