Beyondidentity MCP Server
@beyondidentity/mcp
npm
v0.2.0
Source verified
Published by gobeyondidentity — publish provenance cryptographically ties this package to that repository. That is proof of origin, not an official vendor package.
MCP server for the Beyond Identity public APIs
The grade answers one question — how safe is this server for you to adopt — so it is computed in two auditable stages. Nothing below is an opinion or an LLM's guess; every line is a real term the deterministic engine applied, and the same input always yields the same number.
1. Threat score — 100 − 0 = 100. What the published surface and source actually contain:
The deterministic scan raised no scored threat in the surface it inspected — the threat score stayed at 100. Capability observations and advisory notes are recorded but never lower it.
2. Client adoption risk — 100 − 0 = 100. Three small, subtract-only factors that reflect your risk in adopting it — a clean scan proves less on a powerful, unverified or barely-inspectable package, so the grade says so plainly:
✓ No adoption-risk deductions — minimal blast radius, verified enough, and fully inspected.
Capability observations and info notes are shown under Findings but never scored.
Open any row's finding below for the file, line and evidence behind a deduction.
Findings 0
Tools 120
Each tool and what it can reach — statically extracted from the published source.
add_group_membersno sensitive capabilityadd_group_usersno sensitive capabilityadd_groups_to_sso_configno sensitive capabilityadd_identities_to_sso_configno sensitive capabilityadd_role_membersno sensitive capabilityadd_role_scopesno sensitive capabilityapplication_id_to_sso_config_idno sensitive capabilitybatch_delete_identitiesno sensitive capabilitycreate_applicationno sensitive capabilitycreate_authenticator_configno sensitive capability
Show 110 more tools ↓
create_batch_credential_binding_jobno sensitive capabilitycreate_binding_jobno sensitive capabilitycreate_credential_binding_jobno sensitive capabilitycreate_groupno sensitive capabilitycreate_identityno sensitive capabilitycreate_identity_providerno sensitive capabilitycreate_realmno sensitive capabilitycreate_resource_serverno sensitive capabilitycreate_roleno sensitive capabilitycreate_sso_configno sensitive capabilitycreate_themeno sensitive capabilitycreate_userno sensitive capabilitydelete_applicationno sensitive capabilitydelete_authenticator_configno sensitive capabilitydelete_groupno sensitive capabilitydelete_group_membersno sensitive capabilitydelete_group_usersno sensitive capabilitydelete_groups_from_sso_configno sensitive capabilitydelete_identities_from_sso_configno sensitive capabilitydelete_identityno sensitive capabilitydelete_identity_providerno sensitive capabilitydelete_passkeyno sensitive capabilitydelete_realmno sensitive capabilitydelete_resource_serverno sensitive capabilitydelete_roleno sensitive capabilitydelete_role_membersno sensitive capabilitydelete_role_scopesno sensitive capabilitydelete_sso_configno sensitive capabilitydelete_userno sensitive capabilityget_active_themeno sensitive capabilityget_applicationno sensitive capabilityget_authenticator_configno sensitive capabilityget_batch_credential_binding_jobno sensitive capabilityget_binding_jobno sensitive capabilityget_credentialno sensitive capabilityget_credential_binding_jobno sensitive capabilityget_flow_type_configno sensitive capabilityget_groupno sensitive capabilityget_groupsno sensitive capabilityget_identityno sensitive capabilityget_identity_providerno sensitive capabilityget_realmno sensitive capabilityget_resource_serverno sensitive capabilityget_roleno sensitive capabilityget_service_provider_configno sensitive capabilityget_sso_configno sensitive capabilityget_tenantno sensitive capabilityget_themeno sensitive capabilityget_userno sensitive capabilitylist_applicationsno sensitive capabilitylist_authenticator_configsno sensitive capabilitylist_batch_credential_binding_job_resultsno sensitive capabilitylist_credential_binding_jobsno sensitive capabilitylist_credentialsno sensitive capabilitylist_group_membersno sensitive capabilitylist_group_rolesno sensitive capabilitylist_group_usersno sensitive capabilitylist_groupsno sensitive capabilitylist_groups_for_sso_configno sensitive capabilitylist_identitiesno sensitive capabilitylist_identities_for_sso_configno sensitive capabilitylist_identity_groupsno sensitive capabilitylist_identity_providersno sensitive capabilitylist_identity_rolesno sensitive capabilitylist_passkey_tagsno sensitive capabilitylist_passkeysno sensitive capabilitylist_realmsno sensitive capabilitylist_resource_serversno sensitive capabilitylist_resource_typesno sensitive capabilitylist_role_membersno sensitive capabilitylist_role_scopesno sensitive capabilitylist_rolesno sensitive capabilitylist_schemasno sensitive capabilitylist_sso_configsno sensitive capabilitylist_sso_configs_for_groupno sensitive capabilitylist_sso_configs_for_identityno sensitive capabilitylist_tokensno sensitive capabilitylist_user_groupsno sensitive capabilitylist_usersno sensitive capabilityretire_tenant_issuerno sensitive capabilityrevoke_credentialno sensitive capabilityrevoke_tokenno sensitive capabilityscim_create_groupno sensitive capabilityscim_create_userno sensitive capabilityscim_delete_groupno sensitive capabilityscim_delete_userno sensitive capabilityscim_get_groupno sensitive capabilityscim_get_userno sensitive capabilityscim_list_groupsno sensitive capabilityscim_list_usersno sensitive capabilityscim_replace_userno sensitive capabilityscim_update_groupno sensitive capabilityscim_update_userno sensitive capabilitysearch_toolsno sensitive capabilityset_credential_binding_job_revokedno sensitive capabilityset_passkey_tagsno sensitive capabilitytest_sso_configno sensitive capabilityupdate_applicationno sensitive capabilityupdate_authenticator_configno sensitive capabilityupdate_flow_type_configno sensitive capabilityupdate_groupno sensitive capabilityupdate_identityno sensitive capabilityupdate_identity_providerno sensitive capabilityupdate_realmno sensitive capabilityupdate_resource_serverno sensitive capabilityupdate_roleno sensitive capabilityupdate_sso_configno sensitive capabilityupdate_tenantno sensitive capabilityupdate_themeno sensitive capabilityupdate_userno sensitive capability
What this scan could not see
- Tools were statically extracted from the published source (120 recovered), not enumerated from a running server. Tool-poisoning, Unicode-smuggling, capability and toxic-flow analysis ran on this inferred surface, but a mis-parsed registration could be missed or mis-attributed, so tool-derived findings are capped below “confirmed”. To grade the real runtime surface, scan the running server: --command "npx -y <package>".
Versions 1
Scan history per published version. The engine is deterministic — the same version always yields the same score, so a changed score means the package itself changed.
| Version | Score | Findings | Engine | Scanned |
|---|---|---|---|---|
v0.2.0 latest |
A 100/100 | 0 | 1.13.0 | 2026-09-07 |
Embed this score
Show this server's live Trust Score in your README, docs or website. The badge is served straight from the registry and updates automatically after every rescan — no API key needed. It links back to this page, so anyone who sees the grade can also read the findings behind it instead of taking a number on faith.
Verify this score yourself
The score above is reproducible: the same package version always yields the same result. Run it locally or over the free API — no account, no LLM, fully deterministic.
npx mcptrustchecker scan @beyondidentity/mcp --onlineMore in Security & Testing
The Stripe Agent Toolkit enables popular agent frameworks including LangChain and Vercel's AI SDK to integrate with Stripe APIs through function calling.
MCP (Model Context Protocol) server for AgentGate. Enables Claude and other MCP-compatible AI assistants to request approvals.
Scan any website for AI agent readiness, payment protocols, and discovery endpoints
MCP server for aigently security guardrails — reads static catalog-data JSON, zero API dependency
Governed threat modeling, code threat verification, traceability & compliance, as MCP tools.
Governed threat modeling, code threat verification, traceability & compliance, as MCP tools.