--- bezeichner: "io.github.darrenjrobinson/entra-scim-mcp" art: "mcp_server" slug: "io-github-darrenjrobinson-entra-scim-mcp" paketkoordinate: "npm:entra-scim-mcp" status: "aktiv" homepage: "https://github.com/darrenjrobinson/entra-scim-mcp#readme" erhebungsstand: "2026-10-11T01:17:01.851Z" namensraum: "io.github.darrenjrobinson" registerseite: "https://tracevero.com/mcp/io-github-darrenjrobinson-entra-scim-mcp" abgerufen_am: "2026-10-11" zugangsdaten_erforderlich: false ausfuehrungsort: "lokal" dateisystem_pfadargument: false quelloffen_einsehbar: true roh_beschreibung: "Microsoft Entra SCIM 2.0 Provisioning API: user and group lifecycle, with a local mock." version: "0.3.0" roh_umgebungsvariablen: "ENTRA_TENANT_ID, ENTRA_CLIENT_ID, ENTRA_CLIENT_SECRET, ENTRA_CLIENT_CERT_PATH, ENTRA_CLIENT_CERT_PASSWORD, ENTRA_SCIM_BASE_URL, ENTRA_SCIM_STATIC_TOKEN, ENTRA_SCIM_DRY_RUN" roh_geheime_pflichtvariablen: "" roh_transportarten: "stdio" roh_pfadargumente: "" roh_repository_url: "https://github.com/darrenjrobinson/entra-scim-mcp" roh_paketquellen: "npm" roh_geheime_pflichtkopfzeilen: "" roh_pfad_umgebungsvariablen: "" roh_remote_adressen: "" roh_remote_hosts: "" roh_statusmeldung: "" roh_veroeffentlicht_am: "2026-09-30" roh_aktualisiert_am: "2026-09-30" roh_schemafassung: "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json" roh_bereitstellungsform: "paket" roh_repository_quelle: "github" roh_repository_unterordner: "" roh_paketbezeichner: "entra-scim-mcp" roh_paketversionen: "0.3.0" roh_laufzeithinweise: "" roh_umgebungsformate: "" roh_umgebungsbeschreibungen: "ENTRA_CLIENT_CERT_PASSWORD=Password for the PEM, if it is encrypted. · ENTRA_CLIENT_CERT_PATH=Path to a PEM holding the certificate and its private key. Set exactly one of ENTRA_CLIENT_SECRET or ENTRA_CLIENT_CERT_PATH. · ENTRA_CLIENT_ID=App registration (client) GUID. Required to authenticate against a live tenant; not needed for ENTRA_SCIM_DRY_RUN or ENTRA_SCIM_STATIC_TOKEN. · ENTRA_CLIENT_SECRET=Client secret value. For a live tenant set exactly one of ENTRA_CLIENT_SECRET or ENTRA_CLIENT_CERT_PATH; a certificate is preferred for anything long-lived. · ENTRA_SCIM_BASE_URL=Override the SCIM base URL (default https://graph.microsoft.com/rp/scim). Point it at the bundled mock to try the tools without a tenant. · ENTRA_SCIM_DRY_RUN=Set to 1 to run every client-side validation and return the request that would have been sent, without sending it or acquiring a token. · ENTRA_SCIM_STATIC_TOKEN=Use a fixed bearer token instead of Azure AD. Refuses any microsoft.com/microsoft.us host and requires ENTRA_SCIM_BASE_URL; intended for the local mock only. · ENTRA_TENANT_ID=Directory (tenant) GUID. Required to authenticate against a live tenant; not needed for ENTRA_SCIM_DRY_RUN or ENTRA_SCIM_STATIC_TOKEN, which supply their own placeholder." roh_symbolformate: "" roh_verbindungswege: "{\"packages\":[{\"registryType\":\"npm\",\"identifier\":\"entra-scim-mcp\",\"version\":\"0.3.0\",\"transport\":\"stdio\",\"environment\":[{\"name\":\"ENTRA_TENANT_ID\",\"description\":\"Directory (tenant) GUID. Required to authenticate against a live tenant; not needed for ENTRA_SCIM_DRY_RUN or ENTRA_SCIM_STATIC_TOKEN, which supply their own placeholder.\",\"required\":false,\"secret\":false},{\"name\":\"ENTRA_CLIENT_ID\",\"description\":\"App registration (client) GUID. Required to authenticate against a live tenant; not needed for ENTRA_SCIM_DRY_RUN or ENTRA_SCIM_STATIC_TOKEN.\",\"required\":false,\"secret\":false},{\"name\":\"ENTRA_CLIENT_SECRET\",\"description\":\"Client secret value. For a live tenant set exactly one of ENTRA_CLIENT_SECRET or ENTRA_CLIENT_CERT_PATH; a certificate is preferred for anything long-lived.\",\"required\":false,\"secret\":true},{\"name\":\"ENTRA_CLIENT_CERT_PATH\",\"description\":\"Path to a PEM holding the certificate and its private key. Set exactly one of ENTRA_CLIENT_SECRET or ENTRA_CLIENT_CERT_PATH.\",\"required\":false,\"secret\":false},{\"name\":\"ENTRA_CLIENT_CERT_PASSWORD\",\"description\":\"Password for the PEM, if it is encrypted.\",\"required\":false,\"secret\":true},{\"name\":\"ENTRA_SCIM_BASE_URL\",\"description\":\"Override the SCIM base URL (default https://graph.microsoft.com/rp/scim). Point it at the bundled mock to try the tools without a tenant.\",\"required\":false,\"secret\":false},{\"name\":\"ENTRA_SCIM_STATIC_TOKEN\",\"description\":\"Use a fixed bearer token instead of Azure AD. Refuses any microsoft.com/microsoft.us host and requires ENTRA_SCIM_BASE_URL; intended for the local mock only.\",\"required\":false,\"secret\":true},{\"name\":\"ENTRA_SCIM_DRY_RUN\",\"description\":\"Set to 1 to run every client-side validation and return the request that would have been sent, without sending it or acquiring a token.\",\"required\":false,\"secret\":false}],\"additional_arguments_declared\":false}],\"remotes\":[]}" --- # Microsoft Entra SCIM ## Measured values | Property | Value | Source | Collected on | Level of trust | Raw declaration | | --- | --- | --- | --- | --- | --- | | Required secrets declared | false | MCP-Register | 2026-08-26T01:17:02.201Z | abgeleitet | roh_geheime_pflichtvariablen: ; roh_geheime_pflichtkopfzeilen: | | Execution location | lokal | MCP-Register | 2026-08-26T01:17:02.201Z | abgeleitet | roh_transportarten: stdio | | Path argument present | false | MCP-Register | 2026-08-26T01:17:02.201Z | abgeleitet | roh_pfadargumente: ; roh_pfad_umgebungsvariablen: | | Repository URL listed | true | MCP-Register | 2026-08-26T01:17:02.201Z | abgeleitet | roh_repository_url: https://github.com/darrenjrobinson/entra-scim-mcp | | Description (raw) | Microsoft Entra SCIM 2.0 Provisioning API: user and group lifecycle, with a local mock. | MCP-Register | 2026-08-26T16:45:01.514Z | selbstauskunft | | | Declared version | 0.3.0 | MCP-Register | 2026-10-01T01:17:01.643Z | selbstauskunft | | | Environment variables (raw) | ENTRA_TENANT_ID, ENTRA_CLIENT_ID, ENTRA_CLIENT_SECRET, ENTRA_CLIENT_CERT_PATH, ENTRA_CLIENT_CERT_PASSWORD, ENTRA_SCIM_BASE_URL, ENTRA_SCIM_STATIC_TOKEN, ENTRA_SCIM_DRY_RUN | MCP-Register | 2026-08-26T01:17:02.201Z | selbstauskunft | | | Required secret variables (raw) | | MCP-Register | 2026-08-26T01:17:02.201Z | selbstauskunft | | | Transports (raw) | stdio | MCP-Register | 2026-08-26T01:17:02.201Z | selbstauskunft | | | Path arguments (raw) | | MCP-Register | 2026-08-26T01:17:02.201Z | selbstauskunft | | | Repository (raw) | https://github.com/darrenjrobinson/entra-scim-mcp | MCP-Register | 2026-08-26T01:17:02.201Z | selbstauskunft | | | Package registries (raw) | npm | MCP-Register | 2026-08-26T01:17:02.201Z | selbstauskunft | | | Required secret headers (raw) | | MCP-Register | 2026-08-26T01:17:02.201Z | selbstauskunft | | | Path environment variables (raw) | | MCP-Register | 2026-08-26T01:17:02.201Z | selbstauskunft | | | Remote URLs (raw) | | MCP-Register | 2026-08-26T01:17:02.201Z | selbstauskunft | | | Remote hosts (raw) | | MCP-Register | 2026-08-26T01:17:02.201Z | selbstauskunft | | | Registry status message (raw) | | MCP-Register | 2026-08-26T01:17:02.201Z | selbstauskunft | | | First listed in the registry (raw) | 2026-09-30 | MCP-Register | 2026-10-01T01:17:01.643Z | selbstauskunft | | | Last changed in the registry (raw) | 2026-09-30 | MCP-Register | 2026-10-01T01:17:01.643Z | selbstauskunft | | | Schema version of the raw record (raw) | https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json | MCP-Register | 2026-08-26T01:17:02.201Z | selbstauskunft | | | Delivery form (raw) | paket | MCP-Register | 2026-08-26T01:17:02.201Z | selbstauskunft | | | Repository platform (raw) | github | MCP-Register | 2026-08-26T01:17:02.201Z | selbstauskunft | | | Repository subfolder (raw) | | MCP-Register | 2026-08-26T01:17:02.201Z | selbstauskunft | | | Package identifiers (raw) | entra-scim-mcp | MCP-Register | 2026-08-26T01:17:02.201Z | selbstauskunft | | | Package versions (raw) | 0.3.0 | MCP-Register | 2026-10-01T01:17:01.643Z | selbstauskunft | | | Runtime hints (raw) | | MCP-Register | 2026-08-26T01:17:02.201Z | selbstauskunft | | | Environment variable formats (raw) | | MCP-Register | 2026-08-26T01:17:02.201Z | selbstauskunft | | | Environment variable descriptions (raw) | ENTRA_CLIENT_CERT_PASSWORD=Password for the PEM, if it is encrypted. · ENTRA_CLIENT_CERT_PATH=Path to a PEM holding the certificate and its private key. Set exactly one of ENTRA_CLIENT_SECRET or ENTRA_CLIENT_CERT_PATH. · ENTRA_CLIENT_ID=App registration (client) GUID. Required to authenticate against a live tenant; not needed for ENTRA_SCIM_DRY_RUN or ENTRA_SCIM_STATIC_TOKEN. · ENTRA_CLIENT_SECRET=Client secret value. For a live tenant set exactly one of ENTRA_CLIENT_SECRET or ENTRA_CLIENT_CERT_PATH; a certificate is preferred for anything long-lived. · ENTRA_SCIM_BASE_URL=Override the SCIM base URL (default https://graph.microsoft.com/rp/scim). Point it at the bundled mock to try the tools without a tenant. · ENTRA_SCIM_DRY_RUN=Set to 1 to run every client-side validation and return the request that would have been sent, without sending it or acquiring a token. · ENTRA_SCIM_STATIC_TOKEN=Use a fixed bearer token instead of Azure AD. Refuses any microsoft.com/microsoft.us host and requires ENTRA_SCIM_BASE_URL; intended for the local mock only. · ENTRA_TENANT_ID=Directory (tenant) GUID. Required to authenticate against a live tenant; not needed for ENTRA_SCIM_DRY_RUN or ENTRA_SCIM_STATIC_TOKEN, which supply their own placeholder. | MCP-Register | 2026-08-26T01:17:02.201Z | selbstauskunft | | | Icon formats (raw) | | MCP-Register | 2026-08-26T01:17:02.201Z | selbstauskunft | | | Connection paths (source structure) | {"packages":[{"registryType":"npm","identifier":"entra-scim-mcp","version":"0.3.0","transport":"stdio","environment":[{"name":"ENTRA_TENANT_ID","description":"Directory (tenant) GUID. Required to authenticate against a live tenant; not needed for ENTRA_SCIM_DRY_RUN or ENTRA_SCIM_STATIC_TOKEN, which supply their own placeholder.","required":false,"secret":false},{"name":"ENTRA_CLIENT_ID","description":"App registration (client) GUID. Required to authenticate against a live tenant; not needed for ENTRA_SCIM_DRY_RUN or ENTRA_SCIM_STATIC_TOKEN.","required":false,"secret":false},{"name":"ENTRA_CLIENT_SECRET","description":"Client secret value. For a live tenant set exactly one of ENTRA_CLIENT_SECRET or ENTRA_CLIENT_CERT_PATH; a certificate is preferred for anything long-lived.","required":false,"secret":true},{"name":"ENTRA_CLIENT_CERT_PATH","description":"Path to a PEM holding the certificate and its private key. Set exactly one of ENTRA_CLIENT_SECRET or ENTRA_CLIENT_CERT_PATH.","required":false,"secret":false},{"name":"ENTRA_CLIENT_CERT_PASSWORD","description":"Password for the PEM, if it is encrypted.","required":false,"secret":true},{"name":"ENTRA_SCIM_BASE_URL","description":"Override the SCIM base URL (default https://graph.microsoft.com/rp/scim). Point it at the bundled mock to try the tools without a tenant.","required":false,"secret":false},{"name":"ENTRA_SCIM_STATIC_TOKEN","description":"Use a fixed bearer token instead of Azure AD. Refuses any microsoft.com/microsoft.us host and requires ENTRA_SCIM_BASE_URL; intended for the local mock only.","required":false,"secret":true},{"name":"ENTRA_SCIM_DRY_RUN","description":"Set to 1 to run every client-side validation and return the request that would have been sent, without sending it or acquiring a token.","required":false,"secret":false}],"additional_arguments_declared":false}],"remotes":[]} | MCP-Register | 2026-10-01T01:17:01.643Z | selbstauskunft | | ## Links - Namespace: [[namensraum/io-github-darrenjrobinson|io.github.darrenjrobinson]] --- - Registry page: - Retrieved on: 2026-10-11