Best MCP Identity and Access Management Tools 2026

Okta is the best MCP identity and access management tool for enterprises standardizing Claude connectors today, but only if Okta is already a budget line. A 250-seat Starter deployment lists at $18,000 a year, almost twice a planning case of $9,375 in manual connector approvals, so the business case is central revocation and policy control, not fewer login clicks.

The Short Answer

There is no single MCP identity product that does every identity job. The identity provider proves who the user is. An OAuth authorization server issues a scoped token. A policy engine decides whether that user or agent may call a specific tool. A credential vault protects the secret an MCP server may need downstream. Buying one layer and assuming it covers the other three is the most expensive mistake in this category.

For an enterprise that already uses Okta and wants centrally governed Claude connectors, Okta is the first shortlist. For a software company shipping its own MCP server, WorkOS is the strongest general starting point because AuthKit supplies the OAuth 2.1 authorization-server layer while Connect can preserve an existing login system. Descope is the deeper agent-identity option, Scalekit is the leaner cost play, and Permit.io or Cerbos become relevant when the hard problem is the decision made after login.

Prices and product details below were verified against nine vendors' live product and pricing pages on 24 October 2026. The ranking compares documented capabilities and current economics. It does not claim that every product was deployed in a production environment during this review.

At a Glance

The starting-price column separates a platform entry tier from an MCP deployment quote. Permit.io’s current pricing lists Community and Enterprise but does not establish a public gateway price or an OAuth/consent entitlement boundary. 1Password stays ninth: its new personal-agent sign-in service expands the supporting role, while company MCP servers still need their own identity and tool-permission controls.

Dated Changes

October 22, 2026: Registration and Personal-Agent Sign-In

Since October 22, 2026, Okta explicitly lists AI Agent Registration with Client ID Metadata Document (CIMD), MCP Server Registration with Dynamic Client Registration (DCR), the Okta Integration Network MCP Server Catalog, and Multi-MCP Custom Auth Servers as generally available. Existing Okta customers can reduce manual agent registration and repeated server setup. The same day, 1Password announced 1Password for Agents: users approve a login and 1Password fills the credential without showing it to the agent. The services address different buyers: enterprise MCP governance at Okta, supported personal-agent sign-ins at 1Password. Okta remains the existing-enterprise pick; 1Password remains the supporting credential pick.

August 24, 2026: Enterprise-Managed Claude Authorization

On 24 August 2026, Anthropic marked Enterprise-managed authorization as generally available. An administrator can authorize a supported MCP connector once, then users inherit access through identity-provider groups and roles on first login. The same enterprise authorization can carry across Claude chat, Claude Code, and Cowork.

The current Claude setup guide lists Datadog, Notion, Slack, Asana, Atlassian, Canva, Figma, Granola, Linear, and Supabase. Okta remains the only identity provider it names at launch. The launch announcement lists Exa, Miro, and Zoom as coming soon; do not count those as supported connectors.

That changes the business case. The old workflow asked every employee to approve every connector and left revocation scattered across client and server relationships. The MCP Enterprise-Managed Authorization extension makes the enterprise identity provider the authority. It uses an Identity Assertion JWT Authorization Grant, or ID-JAG, which is an identity assertion the MCP client exchanges at the MCP authorization server for an access token. In plain English, the enterprise signs who the user is, the authorization server issues a token the MCP server trusts, and revocation can begin centrally at the identity provider.

Anthropic’s launch blog still contains an older beta instruction, but its current setup guide explicitly confirms general availability for Team and Enterprise plans. It also clarifies the revocation boundary: existing sessions end when the connector’s access token expires or is revoked. Confirm connector support, tenant entitlement, and token lifetime before promising immediate offboarding.

The Consequence Is a Control Budget, Not a Convenience Budget

Consider a planning case with 250 employees, 6 connectors, 5 minutes per individual connector approval, and a $75 loaded hourly labor rate. That is 125 hours and $9,375 of one-time onboarding work. Okta Starter for the same 250 employees lists at $6 per user per month, or $18,000 per year, before any unpublished AI or MCP add-on.

The arithmetic makes the decision sharper. Buying Okta solely to save those approval minutes does not pay back in this scenario. Using an Okta estate that already exists can be compelling because the incremental identity cost may be small and the gain is central provisioning, policy inheritance, and revocation. A new Okta purchase needs a risk case: fewer orphaned grants, faster termination control, cleaner audit ownership, or a broader workforce identity program.

How These Tools Were Picked

The field was narrowed using six criteria:

1. MCP-specific proof: the vendor had to document an MCP authorization, token, policy, or credential workflow on a first-party page.
2. Layer clarity: the product's real job had to be explicit: identity provider, OAuth server, policy engine, gateway, or vault.
3. Revocation path: a buyer needed to know where access ends when a user, agent, token, or credential is removed.
4. Tool-level control: scope, policy, consent, or resource context had to reach beyond a simple successful login.
5. Auditability: the product needed a credible record of identity, token, policy, or credential events.
6. Public economics: every public tier, material limit, overage, and trial term had to be readable from the live pricing page.

Generic IAM vendors were cut when their current material did not prove an MCP-specific workflow. Open-source components were kept only when their layer and operating burden were clear. 1Password stays a supporting pick because company credential custody and personal-agent sign-in approval do not replace an MCP server’s authorization and tool-policy layer.

This matters because identity and MCP security overlap without being identical. A broader MCP security platform may add discovery, traffic inspection, observability, and runtime enforcement. The products below are ranked for the narrower question of who or what gets access, what token carries that access, what policy limits it, and where credentials live.

1. Okta: Best for Enterprise-Managed Claude Connectors

Okta is the best current choice for enterprises that already run Okta Workforce Identity and want centrally managed Claude connectors.

Okta documents registration, configuration, validation, and lifecycle management for third-party MCP servers, with authorization through standard OAuth flows. Its custom authorization servers support Cross App Access and ID-JAG token exchange, while an external authorization server can use Security Token Service token exchange. That alignment matters because Anthropic currently names Okta as the launch identity provider for generally available Enterprise-managed authorization.

The October release reduces setup work: CIMD registers an agent from its hosted metadata; DCR handles upstream client registration; the catalog validates server reachability and credentials. Multi-MCP Custom Auth Servers share an authorization server and policy while retaining separate audiences and scopes for each MCP server. These are the capabilities Okta explicitly marks generally available in its October 22 announcement.

The wall is price and entitlement clarity. Workforce Identity has a $1,500 annual contract minimum, and the live pricing page does not publish a separate dollar figure for AI identity or MCP-specific add-ons. A company buying Okta from scratch for MCP alone is likely overbuying; a company already paying for Okta may be turning on a natural extension of its control plane.

Best for: Enterprises already using Okta that need group-based provisioning and central revocation for Claude connectors.
Standout: Enterprise-managed Claude access plus generally available CIMD registration, DCR server registration, an MCP catalog, and shared multi-server authorization policy.
Pricing: Starter $6 per user per month, Core Essentials $14 per user per month, Essentials $17 per user per month, Professional custom, and Enterprise custom, all billed annually. The annual contract minimum is $1,500. AI identity and MCP add-on pricing is not separately public. Okta pricing.
Free trial: 30 days.

A Practical Okta Rollout

1. 1

   Confirm the actual entitlement

   Ask Anthropic and Okta to confirm that the target Claude tenant, connector, and required authorization capability are enabled. The current Claude setup guide states general availability for Team and Enterprise plans; Okta’s workforce suite price alone does not confirm the AI-agent entitlement.

2. 2

   Choose the token-exchange path

   Use an Okta custom authorization server when Cross App Access or ID-JAG is the intended path. If the MCP server uses an external authorization server, design around the documented Security Token Service exchange rather than passing a long-lived credential through the client.

3. 3

   Map access to existing groups

   Start with one connector and two identity-provider groups: an allowed operating group and a denied control group. Keep tool scopes narrower than the application role so a successful login does not imply access to every MCP action.

4. 4

   Test all three user surfaces

   Validate the same account in Claude chat, Claude Code, and Cowork. Then remove the account from the allowed group and verify when access ends, including already-issued tokens and existing sessions.

Verdict: Pick Okta when it is already the enterprise identity authority and Claude connector governance is the immediate job. Skip it for a greenfield MCP product that needs an authorization server without a full workforce identity purchase.

2. WorkOS: Best for Shipping a Production MCP Server

WorkOS is the best general-purpose choice for a software company building an MCP server that needs standards-based authorization without replacing its existing login stack.

AuthKit acts as an OAuth 2.1-compatible authorization server for an MCP application, while the developer still builds the tools and resource endpoints. WorkOS Connect can add the OAuth flow as standalone middleware while preserving an existing user system. That separation is useful when the product already knows who its users are but does not want to own discovery, consent, token issuance, and enterprise federation alone.

The wall is that "free AuthKit" does not mean the whole enterprise identity bill is free. AuthKit is $0 through 1 million monthly active users, yet SSO and Directory Sync connections, audit-log delivery, retained events, and a custom domain each have their own price. There is also no separate published MCP surcharge, so a serious estimate has to model those adjacent line items.

Best for: SaaS teams shipping a production MCP server while preserving an existing authentication system.
Standout: AuthKit for a full OAuth 2.1 authorization-server layer, plus Connect for a middleware path.
Pricing: Pay as you go or custom Annual Credits. AuthKit is $0 through 1 million monthly active users, then $2,500 per month for each additional 1 million. SSO and Directory Sync connections cost $125 each for 1 to 15, $100 each for 16 to 30, $80 each for 31 to 50, and $65 each for 51 to 100. Audit Logs cost $125 per month per SIEM connection plus $99 per month per million retained events. A custom domain is $99 per month. No MCP-specific surcharge is published. WorkOS pricing.
Free trial: Free staging, with no credit card required until production.

Verdict: Pick WorkOS when the product team wants to ship OAuth correctly and keep its present user system. Skip it when the central problem is fine-grained tool authorization after the token has already been issued.

3. Descope: Best for Agent Identity and Bring-Your-Own Auth

Descope is the strongest all-in-one agent-identity candidate for teams that need MCP OAuth, credential handling, per-tool scopes, policy, and an option to keep a homegrown identity system.

Agentic Identity Hub documents OAuth 2.1 and PKCE, Dynamic Client Registration and CIMD client registration, per-agent and per-tool scopes, credential storage and refresh, policy controls, and SIEM-exportable action logs. Bring Your Own Auth lets Descope remain the MCP authorization server while federating an existing identity provider. Its 50-plus connection templates also reduce the amount of bespoke credential plumbing around downstream services.

The wall appears in the tier boundary. Fine-grained authorization and external audit connectors begin on Growth at $799 per month billed annually, not on Free Forever or Pro. The lower tiers can prove identity and token flows, but the controls that make a larger agent rollout governable may move the buyer directly to Growth.

Best for: Agent products that need a broad identity control plane while keeping an existing IdP or login system.
Standout: MCP OAuth plus credential storage, per-tool scopes, policy, logs, and Bring Your Own Auth in one product family.
Pricing: Free Forever $0, Pro from $249 per month billed annually, Growth from $799 per month billed annually, and Enterprise custom. Free Forever includes 7,500 MAUs, 10 active tenants, 3 SSO connections, 1 federated OIDC app, 10,000 M2M exchanges, 2,000 monthly active consents, and 2,000 monthly active tokens. Pro includes 10,000 MAUs, 35 tenants, 5 SSO connections, 2 federated apps, 50,000 M2M exchanges, 5,000 monthly active consents, and 5,000 monthly active tokens. Growth includes 25,000 MAUs, 100 tenants, 10 SSO connections, unlimited federated apps, 100,000 M2M exchanges, 10,000 monthly active consents, and 10,000 monthly active tokens. Overage is $0.05 per MAU, $1 per tenant, $50 per SSO connection, $2 per 1,000 M2M exchanges, $0.05 per monthly active consent, and $0.05 per monthly active token. Descope pricing.
Free trial: A free plan rather than a timed trial. Eligible startups can receive Pro free for one year.

Verdict: Pick Descope when agent identity is becoming a product capability, not a one-server integration. Skip it when the only missing piece is basic authorization-server plumbing and the policy layer already exists elsewhere.

4. Auth0: Best for Existing Auth0 Deployments

Auth0 is the most natural MCP identity choice for teams already standardized on Auth0 and needing resource-scoped tokens, on-behalf-of exchange, and downstream credential management.

Auth for MCP implements OAuth 2.1 and OpenID Connect with sign-in, standards-based discovery and registration, and resource-scoped tokens. On-Behalf-Of Token Exchange turns an MCP client token into a short-lived internal API token scoped to the user and resource. Token Vault handles issuance, storage, rotation, and revocation for third-party API tokens used by the MCP server.

The wall is packaging. Auth for MCP appears in the live comparison, but the entry price is not a complete machine-identity estimate. Free and Essentials include a machine-to-machine allowance; additional M2M capacity is offered on Professional and Enterprise. Confirm token-exchange and Token Vault entitlements for the intended architecture.

Best for: Products already using Auth0 that need to extend identity into MCP and downstream APIs.
Standout: On-Behalf-Of Token Exchange and Token Vault connect the user session to internal and third-party resources.
Pricing: Free $0 with up to 25,000 MAUs. At the B2C monthly 500-MAU selector, Essentials is $35 per month and Professional $240; Enterprise is custom. The comparison lists 1,000 M2M authentications on Free and Essentials and 5,000 on Professional and Enterprise, with M2M add-ons on the latter two. These are base platform prices, not a quote for every AI entitlement. Auth0 pricing.
Free trial: 22 days, then automatic conversion to Free.

Verdict: Pick Auth0 when MCP is an extension of an Auth0 identity architecture. Skip it when the organization has no Auth0 footprint and wants a narrowly scoped, easy-to-price MCP authorization service.

5. Scalekit: Best Low-Cost MCP Auth

Scalekit is the best price-led choice for a team that needs an MCP OAuth layer and wants to keep its existing login system, provided it compares the correct package.

Scalekit’s MCP Auth handles OAuth 2.1, consent, token lifecycle, and refresh while your existing system authenticates the user. Its client registry supports dynamic, CIMD, and pre-registered clients; scopes and token lifetimes are managed per MCP server. That is a practical fit for exposing a SaaS product to agent clients. Downstream credential connections belong to the separate AgentKit offering, so do not assume its vault features are included in an MCP Auth quote.

The wall is package selection. SaaSKit Growth includes branded MCP Auth, while BYOA Growth, the option for keeping an existing auth stack, lists MCP auth as a separate paid add-on. Customization is now included on Growth. The Free plan still requires an upgrade beyond its allowances, but the pricing page conflicts on whether that upgrade is automatic or a hard stop; confirm the behavior before relying on it.

Best for: Startups and product teams that want MCP OAuth with clear enterprise-connection pricing.
Standout: SaaSKit Growth includes MCP Auth; BYOA adds it to an existing identity stack without migrating users.
Pricing: SaaSKit Free is $0 with 25,000 MAUs, 25 organizations, and 1 SSO plus 1 SCIM connection. SaaSKit Growth is $99 per month with MCP Auth, customization, 100,000 MAUs, and 100 organizations; overages are $0.05 per MAU and $1 per organization. After the first free connection of each type, SSO and SCIM each cost $60 per connection for 2 to 15, $45 for 16 to 30, $35 for 31 to 50, and $30 for 51 to 100. BYOA Growth is $99 per month plus a $99 MCP auth add-on, or $198 before connection charges. Enterprise is custom. Scalekit Auth for SaaS pricing.
Free trial: Development, QA, UAT, and staging environments are free.

Verdict: Pick Scalekit when connection count dominates the decision and its SaaSKit or BYOA package fits the architecture. Skip it when a very large MAU allowance or a broader enterprise identity ecosystem matters more.

6. Stytch: Best for B2B SaaS Already on Stytch

Stytch is the cleanest choice for a B2B SaaS product that already models customers as organizations and wants MCP clients to behave like Connected Apps.

Stytch uses the authorization-code grant, provides an OAuth consent component, hosts authorization-server metadata, and issues access and refresh tokens. Your MCP server hosts protected-resource metadata and validates the token’s audience and scopes. Dynamic Client Registration is supported after you enable it in the dashboard. The model is familiar to a SaaS builder: an MCP client becomes another connected application, with an explicit consent and token lifecycle rather than a special API-key exception.

The wall is public forecasting beyond the included tier. The static pricing page publishes add-on rates for branding, SSO or SCIM connections, and fraud fingerprints, but additional MAU and M2M rates sit behind an interactive calculator. That makes the free tier easy to understand and a high-volume production estimate less transparent.

Best for: B2B SaaS products already using Stytch organizations and authentication.
Standout: MCP clients map directly to Stytch Connected Apps with consent, metadata, scopes, and token lifecycle.
Pricing: Pay as you go starts at $0, and Enterprise is custom. The free included usage covers 10,000 monthly active users and AI agents, unlimited organizations, 5 SSO or SCIM connections, and 1,000 M2M tokens. Branding and email customization cost $99. Each additional SSO or SCIM connection costs $125. Fraud prevention costs $0.005 per fingerprint after 10,000 included fingerprints. Additional MAU and M2M rates require the interactive calculator. Stytch pricing.
Free trial: A free usage tier rather than a timed trial.

Verdict: Pick Stytch when MCP is one more connected-app surface in an existing Stytch B2B product. Skip it when a public, line-by-line high-volume estimate is required before a sales conversation.

7. Permit.io: Best Drop-In Proxy With Tool Policy

Permit.io is the best drop-in option when login already works but every MCP tool call needs an explicit authorization decision, consent record, and audit trail.

Permit MCP Gateway connects an existing identity provider, handles OAuth 2.1 sessions and token exchange, and checks tool calls against role-based, attribute-based, or relationship-based policy. Those three policy models answer progressively richer questions: what role the caller has, what attributes surround the request, and what relationship the caller has to the resource. The gateway also provides consent screens, provisions agent identities, and records the decision chain.

The wall is pricing and entitlement clarity. The current pricing page lists Community and a custom Enterprise tier, but no public Pro gateway price or OAuth-proxy/consent boundary. Confirm the gateway’s commercial terms separately. The gateway page places human approval for high-risk calls and private deployment on Enterprise; its IGA/PAM connectors for shadow MCP remain on the roadmap.

Best for: Teams with an existing IdP that need a policy-enforcing proxy in front of MCP servers.
Standout: OAuth session handling and fine-grained tool policy in the same gateway.
Pricing: Community is free with 1,000 MAUs, 20 tenants, 3 environments, and 14-day logs. Enterprise pricing is custom, with unlimited MAUs, tenants, and environments and 28-day extensible logs. Request a gateway entitlement and deployment quote; the public page does not price that configuration. Permit.io pricing.
Free trial: Community is free; the gateway offers a hosted evaluation path. Confirm its limits with Permit.io.

Verdict: Pick Permit.io when the missing control is "may this identity perform this tool action now?" Skip it when the application still lacks a reliable identity and token-issuance layer upstream.

8. Cerbos: Best for Externalized Policy as Code

Cerbos is the best policy-as-code choice for a team that wants MCP authorization decisions expressed outside application code and deployed across services.

Cerbos evaluates user, agent, request, and resource context, then returns an allow or deny decision and preserves an audit trail. The vendor states sub-millisecond policy-decision latency. This is useful when the same rule must govern several MCP servers, such as permitting a finance agent to read invoices for its own business unit but not to approve payment.

The wall is categorical, not just commercial: Cerbos is not an identity provider and not an OAuth authorization server. It belongs after identity and token validation. A team that selects Cerbos still needs a trustworthy subject, a token flow, and possibly a credential vault; what Cerbos replaces is scattered authorization logic, not the rest of the identity stack.

Best for: Engineering teams that want centrally managed, auditable authorization policy across multiple MCP servers.
Standout: Context-aware policy decisions with a stated sub-millisecond evaluation time.
Pricing: Open source is free forever. Cerbos Hub Proof of Concept is $0 per month, Development starts at $25 per month, Production starts at $933 per month, and Enterprise is custom. Proof of Concept includes 100 monthly active principals and 1 week of unified audit logs. Development includes the first 100 principals and 3 months of logs. Production includes the first 5,000 principals and 1 year of logs. Cerbos pricing.
Free trial: 3 months on Development.

Verdict: Pick Cerbos when authorization logic is the bottleneck and the identity layer is already sound. Skip it when the project still needs an IdP or OAuth server and the team expects one product to supply both.

9. 1Password: Best Supporting Credential Custody

1Password remains a supporting pick for company MCP credentials and now also offers approved sign-ins for personal agents through 1Password for Agents. Those are different access paths, with different eligibility.

For a personal agent booking travel or using a web service, 1Password for Agents lets the agent request a login, the person approve or deny it on their own device, and 1Password fill the password or one-time code directly into the destination. The agent does not receive the credential or gain access to the whole vault. After sign-in, what it can see or do depends on the agent and website; approving a login is not a per-tool company policy.

The October 22 announcement says this is included at no additional cost for Individual and Family accounts on 1Password.com. Accounts on 1Password.eu and 1Password.ca are not currently supported. Rollouts vary by partner, and the product page still offers a waitlist for integrations. That is personal-agent eligibility, not a blanket entitlement for company MCP servers or every business account.

For company MCP servers, the separate Runlayer integration remains the relevant credential-custody example. Runlayer stores an op:// reference, fetches the live secret at connection time, and uses it transiently in the proxy rather than persisting the raw value. SHA-256 comparisons detect changed credentials, and fetch and rotation events are logged. This picks up a rotation already made in the vault; coordinated automatic rotation is described as future work.

The wall is the access decision after sign-in. Neither hiding a password from a personal agent nor resolving a company API key establishes which MCP tool and resource the agent may use. Keep the company’s IdP, OAuth flow, and policy enforcement where the application requires them.

Best for: Personal-agent users who want approved sign-ins without exposing passwords, and companies that need runtime custody of MCP credentials.
Standout: Personal sign-in approval through 1Password for Agents; separate op:// secret references for company MCP proxies.
Pricing: Agents adds no charge to eligible personal plans. Regular annual-billing prices are Individual $3.99 per month and Families $5.99; eligible new direct customers see first-year promotions of $2.99 and $4.49 with annual billing. Personal pricing. For company vaults, Business is $8.99 per user per month annually. Teams Starter Pack pricing is inconsistent: the card says $2.49 per user with a 10-user minimum, while the FAQ quotes $24.95 per month for 10 and $4.99 per additional seat, up to 20 total. Confirm the quote. Business pricing. These password-manager prices do not quote the complete Runlayer deployment.
Free trial: 14 days for the personal and business password-manager plans.

Verdict: Pick 1Password for approved personal-agent sign-ins or as a vault beside a company MCP identity stack. The new launch broadens credential protection; it does not turn this supporting slot into a replacement for enterprise MCP authorization.

The Five Layers That Must Fit Together

The ranking only becomes useful when each product is placed in the correct layer. One vendor may cover several layers, but the jobs remain distinct:

• IdP: proves the human or workload identity and owns group membership and offboarding.
• OAuth: issues a token to a specific MCP client for a specific protected resource and scope.
• Policy: decides whether the authenticated subject may perform the requested tool action against the requested resource.
• Vault: protects any downstream secret that cannot be replaced by delegated OAuth.
• MCP server: exposes the tools and resources, validates the token, and enforces the final decision.

Revocation completes the loop. If the IdP removes the user but a server accepts a long-lived token forever, central offboarding is theater. If OAuth issues a narrow token but the MCP server never checks resource context, the token is only a coarse gate. If policy is precise but a raw downstream API key sits in agent context, the last mile remains exposed.

That is why Okta, WorkOS, Permit.io, Cerbos, and 1Password are not interchangeable competitors. In a mature deployment they could be parts of the same architecture. The buying question is which missing layer deserves a vendor and which layers the product team can operate safely itself.

Who Should Pick What

Pick Okta if Okta already owns workforce identity and the immediate move is governed access to supported Claude connectors. The choice flips away from Okta when a new workforce identity contract is required solely for MCP.

Pick WorkOS if a SaaS team is exposing its own MCP server and needs an OAuth 2.1 authorization server without replacing the current login system. The choice flips to Descope when agent identity, credential templates, consent metering, and policy controls need to live in one broader platform.

Pick Descope if the product is becoming an agent platform and Bring Your Own Auth prevents a disruptive identity migration. The choice flips to Scalekit when the deployment is smaller, price clarity matters more, and the appropriate SaaSKit or BYOA package covers the job.

Pick Auth0 or Stytch when one already owns the product's identity model. Existing architecture is a feature: migrations create risk, duplicate user stores, and confusing revocation ownership. A greenfield buyer should compare them with WorkOS, Descope, and Scalekit based on the layer still missing.

Pick Permit.io when the system needs an OAuth-aware gateway that can enforce role, attribute, or relationship policy on every tool call. Pick Cerbos when token validation already exists and policy-as-code is the only missing control. Permit.io packages more of the proxy path; Cerbos keeps the authorization decision layer more explicit.

Pick 1Password for approved personal-agent sign-ins, or as the company credential-custody layer when a downstream API still requires a stored secret. The personal launch does not replace the company’s MCP authorization server or tool-policy checks.

The Cost Math That Flips the Choice

Public starting prices are useful only when the unit matches the architecture. Okta charges per workforce user. WorkOS and Scalekit can charge around enterprise connections as well as user volume. Descope meters MAUs, tenants, SSO, M2M exchanges, consents, and active tokens. Permit.io and Cerbos attach material value to policy and audit tiers. A one-number ranking would hide the unit that drives the bill.

Case 1: A 250-Person Company Standardizing Claude

Okta Starter lists at $6 per user per month. For 250 seats, that is $1,500 per month and $18,000 per year. The earlier planning case puts individual approvals at 125 hours and $9,375 once.

The rule is simple. If the company already pays for Okta, measure the incremental authorization add-on, implementation, and connector cost against the benefit of central revocation and audit ownership. If the company does not use Okta, do not pretend the $18,000 annual identity purchase is an approval-automation project. It is a workforce security program and must be justified as one.

Case 2: A SaaS Product With 10 Enterprise Connections

Ten WorkOS SSO connections cost $125 each at the published 1-to-15 tier, or $1,250 per month. Scalekit SaaSKit Growth is $99 per month and includes the first connection; 9 more at $60 each produce a $639 monthly case. The listed difference is $611 per month and $7,332 per year. If you preserve an existing auth stack using BYOA Growth and its $99 MCP add-on, the same case is $738 per month, saving $512 per month or $6,144 per year against WorkOS.

Scalekit wins that narrow connection-count case. WorkOS can win when AuthKit's $0 allowance through 1 million monthly active users matters, because SaaSKit Growth includes 100,000 MAUs before $0.05-per-user overage. The decision flips when the WorkOS user-volume advantage is worth more than the Scalekit connection-price advantage.

Case 3: Policy Becomes the Expensive Part

Cerbos Hub Development starts at $25 per month, and Hub Production starts at $933 per month with 5,000 monthly active principals and 1 year of logs. Its open-source policy decision point remains free, including for teams prepared to operate it themselves. Descope Growth starts at $799 per month billed annually and is the first listed tier with fine-grained authorization and external audit connectors. For Permit.io, obtain a quote for the intended gateway deployment; its public pages do not establish a fixed-price comparison.

These are different operating models. Permit.io packages a gateway and policy enforcement. Cerbos separates the open-source decision engine from paid Hub management. Descope Growth is a broad identity platform tier in which policy and external auditing arrive alongside larger identity allowances. Compare the operating model before comparing the dollar figure.

The Ones to Avoid

The weakest MCP identity choices are patterns, not necessarily bad companies. Avoid these three buying shortcuts.

Raw API Keys as the Primary Identity System

A static API key can identify an application, but it does not naturally carry a human identity, a consent event, a narrow delegated scope, or a clean group-based offboarding path. If a legacy API still requires one, keep it in a vault such as 1Password or a vendor credential store and place an OAuth and policy decision in front of it. Do not give the raw key to the model or treat possession of the key as permission for every tool action.

A Generic IAM Vendor With No Documented MCP Path

Strong workforce identity does not automatically create MCP protected-resource metadata, client registration, consent, token exchange, tool scopes, or server validation. A generic IdP may still be the right authority, but demand a documented architecture for the MCP client and server before signing on the strength of a broad IAM feature list.

A Homegrown OAuth Proxy Without a Platform Reason

Owning an OAuth proxy means owning discovery, client registration, redirect validation, consent, token issuance, refresh, revocation, key rotation, audit logs, abuse controls, and every interoperability edge that arrives later. Build it when authorization is core intellectual property or a regulatory requirement makes vendor use impossible. Otherwise, the maintenance surface is larger than the first demo suggests.

The Monday Move

Do not begin with a nine-vendor request for proposal. Begin with one access path that matters, preferably a connector touching customer, financial, source-code, or operational data. The objective for Monday is to find the earliest broken layer and put a named owner on it.

1. 1

   Inventory the current path

   Write down the user or agent, MCP client, identity provider, authorization server, MCP server, downstream system, stored credential, and audit destination for one connector. Mark any box whose owner cannot explain how access is revoked.

2. 2

   Define one narrow permission

   Choose one tool and one resource boundary, such as read-only access to a single workspace. Separate successful login from permission to invoke that tool. This exposes whether the missing control is OAuth scope, application policy, or both.

3. 3

   Price the real unit

   Count workforce seats, MAUs, organizations, SSO or SCIM connections, M2M exchanges, consents, active tokens, policy principals, audit retention, and SIEM connections. Use only the units the shortlisted vendor actually charges.

4. 4

   Run the removal test

   Grant the permission, use it from the intended MCP client, remove the user or group, and verify that access ends at every relevant surface. Record the delay and the audit evidence. A rollout is not governed until removal works.

5. 5

   Expand by risk, not popularity

   After the first connector passes, add the next connector with the highest consequence of misuse. Reuse the identity and revocation pattern, but define fresh tool and resource scopes instead of copying blanket access.

The result should be a one-page control record, not a slide deck: who is authoritative, what token is issued, what policy is checked, where secrets live, how revocation works, what it costs at the next usage tier, and who responds when a check fails.

Frequently Asked Questions

Are there free MCP identity and access management tools?

Yes. WorkOS AuthKit is $0 through 1 million MAUs, while Descope, Auth0, Scalekit, Stytch, Permit.io, and Cerbos each have a $0 entry path. Read the feature boundary: Permit.io’s current public pricing does not establish Community gateway entitlements, Descope fine-grained authorization begins on Growth, and Cerbos offers both a free open-source PDP and paid Hub management. Scalekit’s MCP page advertises a free plan, but its priced SaaSKit and BYOA packages differ.

What are examples of MCP IAM tools?

Okta is an identity provider and enterprise authorization control plane. WorkOS, Descope, Auth0, Scalekit, and Stytch can supply MCP OAuth or connected-app authorization. Permit.io and Cerbos specialize in policy decisions, while 1Password protects downstream credentials and offers approved personal-agent sign-ins. They are examples of different layers, not nine interchangeable suites.

Is AWS IAM enough for MCP?

AWS IAM controls authentication, authorization, and permissions for AWS resources and AWS accounts. That can be sufficient for the AWS-resource side of a deliberately AWS-bound system, but it does not remove the need to design the MCP client authorization, consent, token, tool-policy, audit, and revocation path. If the server fronts non-AWS services or serves users from another enterprise IdP, treat AWS IAM as one layer rather than the complete answer.

What is the difference between cloud IAM and MCP IAM?

Cloud IAM governs identities and permissions around cloud accounts and resources. MCP IAM governs how a human or agent connects through an MCP client to an MCP server, which token represents that access, and which tools and downstream resources the session may use. The two meet when an MCP tool calls a cloud resource, but the cloud policy and the MCP session still need an explicit bridge.

Final Takeaways

Get the AI Business Workflow Audit Checklist

Use the AI Business Workflow Audit Checklist to map the identity, policy, secret, and ownership gaps in your next automation rollout.