Identity Service
AGNTCY Identity Service serves as the central hub for managing and verifying digital identities for your Agentic Services.
What is Identity Service?
Identity Service is a Model Context Protocol (MCP) server that allows AI assistants like Claude, Cursor, and VS Code to agntcy identity service serves as the central hub for managing and verifying digital identities for your agentic services.
AGNTCY Identity Service serves as the central hub for managing and verifying digital identities for your Agentic Services.
This server falls under the Security category on MCPgee, the world's largest MCP server directory with 33,000+ servers.
Features
- AGNTCY Identity Service serves as the central hub for managi
Use Cases
Maintainer
Works with
Installation
Manual Installation
npx identity-serviceConfiguration
Configuration Details
claude_desktop_config.json
Performance
Response Metrics
Resource Usage
How to Set Up and Use Identity Service
AGNTCY Identity Service is an MCP server that acts as a central hub for managing and verifying digital identities for agentic AI services, implementing W3C Verifiable Credentials and Task-Based Access Control (TBAC) policies. It enables AI agents to register unique identities, verify authenticity of existing credentials, and define fine-grained permission policies — all through a Docker-based deployment with OIDC provider integration. Organizations building multi-agent systems use it to establish trusted identity and authorization infrastructure that agents can query through the MCP protocol.
Prerequisites
- Docker Desktop or Docker Engine v27 or newer with Docker Compose v2.35+
- An OIDC provider (the repository includes a local Hydra OIDC provider for development)
- OIDC application credentials: client ID, issuer URL, and login URL
- An MCP-compatible client such as Claude Desktop
- Make (optional, for convenience commands)
Clone the repository
Clone the AGNTCY Identity Service repository to your local machine.
git clone https://github.com/agntcy/identity-service.git
cd identity-serviceSet up a local OIDC provider (development)
For local development, the repository includes a Hydra OIDC provider setup script. Source this script to configure the local identity provider.
. ./demo/scripts/setup_hydra_oidcConfigure OIDC environment variables
Set the required OIDC configuration variables. These point the Identity Service to your OIDC provider for authentication. Register http://localhost:5500 as a redirect URI in your OIDC provider.
export OIDC_ISSUER_URL="https://your-oidc-provider.example.com"
export OIDC_CLIENT_ID="your_client_id"
export OIDC_LOGIN_URL="https://your-oidc-provider.example.com/oauth2/auth"
export OIDC_CLIENT_ID_CLAIM_NAME="cid"Launch the Identity Service
Start all service components using the launch script or make command. This starts the backend APIs (REST on port 4000, gRPC on port 4001) and the frontend UI on port 5500.
./deployments/scripts/launch.sh
# or: make startConfigure your MCP client
Add the Identity Service MCP endpoint to your Claude Desktop configuration. The service exposes MCP functionality through its backend API.
Identity Service Examples
Client configuration
Claude Desktop configuration for the AGNTCY Identity Service MCP server running locally via Docker.
{
"mcpServers": {
"identity-service": {
"command": "npx",
"args": ["identity-service"],
"env": {
"OIDC_ISSUER_URL": "https://your-oidc-provider.example.com",
"OIDC_CLIENT_ID": "your_client_id",
"OIDC_LOGIN_URL": "https://your-oidc-provider.example.com/oauth2/auth",
"OIDC_CLIENT_ID_CLAIM_NAME": "cid"
}
}
}
}Prompts to try
Use these prompts to manage agent identities and access control policies through the Identity Service.
- "Register a new agentic service with name 'DataProcessingAgent' and description 'Processes customer data'"
- "Verify the identity credential for agent ID 'agent-abc-123'"
- "List all registered agentic services in the identity registry"
- "Define a TBAC policy allowing 'DataProcessingAgent' to access the 'read-customer-records' task"
- "Check what permissions are granted to agent 'ReportGeneratorAgent'"Troubleshooting Identity Service
Docker Compose fails to start with version compatibility errors
Ensure Docker Engine is v27 or newer and Docker Compose is v2.35 or newer. Run `docker --version` and `docker compose version` to verify. Upgrade Docker Desktop to the latest version if needed.
OIDC authentication fails with redirect_uri_mismatch error
Register http://localhost:5500 as an allowed redirect URI in your OIDC provider's application settings. For the local Hydra provider, the setup script handles this automatically when sourced correctly.
Backend API is not reachable at localhost:4000
Check that all Docker containers started successfully with `docker compose ps`. If any container exited, review the logs with `docker compose logs` to identify configuration issues.
Frequently Asked Questions about Identity Service
What is Identity Service?
Identity Service is a Model Context Protocol (MCP) server that agntcy identity service serves as the central hub for managing and verifying digital identities for your agentic services. It connects AI assistants to external tools and data sources through a standardized interface.
How do I install Identity Service?
Follow the installation instructions on the Identity Service GitHub repository. Clone the repo, install dependencies, and add the server config to your AI client.
Which AI clients work with Identity Service?
Identity Service works with all major MCP-compatible AI clients including Claude Desktop, Claude Code, Cursor, VS Code (GitHub Copilot), Windsurf, and Cline.
Is Identity Service free to use?
Yes, Identity Service is open source and available under the Apache-2.0 license. You can use it freely in both personal and commercial projects.
Identity Service Alternatives — Similar Security Servers
Looking for alternatives to Identity Service? Here are other popular security servers you can use with Claude, Cursor, and VS Code.
Casdoor
★ 13.6kAn open-source Agent-first Identity and Access Management (IAM) /LLM MCP & agent gateway and auth server with web UI supporting OpenClaw, MCP, OAuth, OIDC, SAML, CAS, LDAP, SCIM, WebAuthn, TOTP, MFA, Face ID, Google Workspace, Azure AD
ghidraMCP
★ 9.0kAn Model Context Protocol server that enables LLMs to autonomously reverse engineer applications by exposing Ghidra's decompilation and analysis tools. It allows AI agents to list code structures, rename methods, and analyze binaries directly through
HexStrike AI
★ 8.9kHexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug bounty automation, and security research. Seamlessly b
IDA Pro MCP
★ 8.7kEnables AI-assisted reverse engineering in IDA Pro by providing tools to analyze binaries, decompile functions, manage comments, search patterns, and interact with the IDA database through natural language.
Anthropic Cybersecurity Skills
★ 6.6k754 structured cybersecurity skills for AI agents · Mapped to 5 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND & NIST AI RMF · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platform
Hooker
★ 5.1k🔥🔥 hooker is a Frida-based reverse engineering toolkit for Android. It offers a user-friendly CLI, universal scripts, auto hook generation, memory roaming to detect activities/services, one-click SOCKS5 proxy setup, Frida JustTrustMe, and BoringSSL u
Browse More Security MCP Servers
Explore all security servers available in the MCPgee directory. Each server includes setup guides for Claude, Cursor, and VS Code.
Set Up Identity Service in Your Editor
Choose your AI client for step-by-step setup instructions.
Quick Config Preview
Add this to your claude_desktop_config.json or .cursor/mcp.json
Ready to use Identity Service?
Browse our complete directory of 33,000+ MCP servers, read setup guides for your editor, and start building with the Model Context Protocol.