scalekit-auth-stack

---

Setting up auth for B2B and AI apps is complex. Between auth flows, SSO providers, SCIM provisioning, MCP auth, and securing AI agents, most developers spend weeks on auth instead of shipping features with confidence.

This plugin adds the complete Scalekit auth stack to your projects — whether that's a B2B app, AI agent, or MCP server — directly from Claude Code.

---

Installation

# Start Claude REPL
claude

# Add Scalekit Auth Stack marketplace
/plugin marketplace add scalekit-inc/claude-code-authstack

# Run the plugins wizard
/plugin

---

Available Plugins

Plugin	Description
Dryrun	Validate auth and provisioning flows before deployment. Test your configuration against real identity providers without touching production.
MCP Auth	Add OAuth 2.1 authorization to Model Context Protocol servers. Guides you through token handling, refresh flows, and scope management.
Modular SSO	Integrate enterprise SSO providers (Okta, JumpCloud, Entra ID, etc.). Support 20+ identity providers without writing SAML parsers.
Modular SCIM	Enable user provisioning and directory sync. Let customers provision users automatically from their identity provider.
Full Stack Auth	Complete authentication setup for web applications. End-to-end auth including login pages, session management, and protected routes.
Agent Auth	Secure authentication for AI agents and services. OAuth flows designed for AI agents with token persistence and refresh logic.

---

Quick Start

After installing the marketplace, choose a plugin based on your use case:

For MCP Servers

/plugin install mcp-auth

Use this to secure your MCP servers with OAuth 2.1 authorization.

For Enterprise SSO

/plugin install modular-sso

Use this to add SAML/OIDC SSO with providers like Okta, JumpCloud, or Entra ID.

For AI Agents

/plugin install agent-auth

Use this to add authentication for AI agents that act on behalf of users.

For User Provisioning

/plugin install modular-scim

Use this to enable SCIM directory sync for automatic user provisioning.

---

Repository Structure

.
├── plugins/
│   ├── dryrun/           # Validate auth flows before deployment
│   ├── mcp-auth/         # OAuth 2.1 for MCP servers
│   ├── modular-sso/      # Enterprise SSO integration
│   ├── modular-scim/     # SCIM provisioning
│   ├── full-stack-auth/  # Complete web app auth
│   └── agent-auth/       # AI agent authentication
├── images/               # Documentation images
├── AGENTS.md             # Contribution guidelines
└── LICENSE               # MIT License

---

Prerequisites

• Scalekit account with client_id and client_secret
• Claude Code installed and configured
• Project where you want to add authentication

---

Helpful Links

Documentation

• Scalekit Documentation — Complete guides and API reference
• SSO Quickstart — Implement enterprise SSO
• MCP Auth Guide — Secure MCP servers
• Agent Auth Guide — Authentication for AI agents

Resources

• Admin Portal — Manage your Scalekit account
• API Reference — Complete API documentation
• Code Examples — Ready-to-use snippets

---

Contributing

Contributions are welcome! Please see AGENTS.md for contribution guidelines.

1. Fork this repository
2. Create a branch — git checkout -b feature/my-plugin
3. Make your changes following the plugin structure in AGENTS.md
4. Test locally
5. Open a Pull Request

---

License

This project is licensed under the MIT license. See the LICENSE file for more information.