ActiveDirectory_MCPServer by abhid: safety score
D 51 Provisional Not reviewed Not tested read-only mode
ActiveDirectory_MCPServer by abhid is a community MCP server for Active Directory with 17 read, 5 write and 8 destructive tools. It has a read-only mode and needs a scoped token; its provisional OpsMCP grade is D (51%), last checked 16 Oct 2026.
Production-ready MCP server for Active Directory, domain auth, RBAC, 36 tools, audit logging, named API keys, and a Tailwind web UI
Access partly scored. 3 of 4 factors scored.
Can it change or delete things?
Yes. The extracted tools include at least one destructive tool, so it can change or delete things.
| Tool | Class |
|---|---|
ad_add_user_to_group Add a user to a group | admin |
from the name (add) | Write |
ad_audit_user_activity Get recent activity and changes for a user | readonly |
from the description (get) | Read |
ad_create_computer Create a computer account | admin |
from the name (create) | Write |
ad_create_group Create a new security or distribution group | admin |
from the name (create) | Write |
ad_create_ou Create a new organizational unit | admin |
from the name (create) | Write |
ad_create_user Create a new user account | admin |
from the name (create) | Write |
ad_delete_computer Delete a computer account | admin |
from the name (delete) | Destructive |
ad_delete_group Delete a group | admin |
from the name (delete) | Destructive |
ad_delete_ou Delete an organizational unit | admin |
from the name (delete) | Destructive |
ad_delete_user Delete a user account | admin |
from the name (delete) | Destructive |
ad_get_computer Get computer details | readonly |
from the name (get) | Read |
ad_get_domain_info Get domain, forest, and DC information | readonly |
from the name (get) | Read |
ad_get_group Get group details | readonly |
from the name (get) | Read |
ad_get_group_members List members of a group | readonly |
from the name (get) | Read |
ad_get_locked_accounts List all currently locked-out accounts | readonly |
from the name (get) | Read |
ad_get_ou Get OU details and contents | readonly |
from the name (get) | Read |
ad_get_ou_structure Get the full OU tree | readonly |
from the name (get) | Read |
ad_get_password_policy Get domain password policy | readonly |
from the name (get) | Read |
ad_get_privileged_accounts List members of privileged groups | readonly |
from the name (get) | Read |
ad_get_user Get full user details and attributes | readonly |
from the name (get) | Read |
ad_get_user_memberships List all groups a user belongs to | readonly |
from the name (get) | Read |
ad_list_computers List all computer accounts | readonly |
from the name (list) | Read |
ad_list_groups List all groups with member counts | readonly |
from the name (list) | Read |
ad_remove_user_from_group Remove a user from a group | admin |
from the name (remove) | Destructive |
ad_reset_password Reset a user's password (requires LDAPS) | helpdesk |
from the name (reset) | Destructive |
ad_search Execute a raw LDAP filter query | admin |
from the name (search) | Read |
ad_search_users Search users by name, email, or username | readonly |
from the name (search) | Read |
full everything, including delete operations (default) |
from the description (delete) | Destructive |
readonly get / list / search / test — no writes of any kind |
from the description (get) | Read |
readwrite read + create / modify / enable / disable / unlock / reset — **no deletes** |
from the description (reset) | Destructive |
Score
51 of 100 points (51%). A factor that was not scored counts as 0 of its full weight.
| Factor | Points | Full weight | Status |
|---|---|---|---|
| Tool capability | 29 | 35 | Scored |
| Access | 10 | 25 | Partly scored |
| Maintenance | 7 | 20 | Scored |
| Publisher | 5 | 20 | Scored |
Tool capability
17 read, 5 write, 8 destructive.
The repository mentions a read-only mode. View the repository.
Access
| Part | Value | Points | Where this came from |
|---|---|---|---|
| Scope | Scoped token | 10 of 10 | Matched scoped wording: RBAC |
| Where it runs | unknown | unknown | unknown |
| Credentials | unknown | unknown | unknown |
Least privilege: Matched scoped wording: RBAC Source in the repository.
Maintenance
| Part | Value | Points |
|---|---|---|
| Last commit | 107 days | 4 of 8 |
| Releases | no releases | 0 of 6 |
| Issues | no issues filed | 3 of 6 |
Publisher
| Part | Value | Points | Where this came from |
|---|---|---|---|
| Who publishes it | Individual | 3 of 8 | GitHub owner type is User (abhid). |
| Registry listing | Not listed | 2 of 5 | No latest registry entry from search='activedirectory_mcpserver' had repository github.com/abhid/activedirectory_mcpserver. |
| License | No key required | 0 of 4 | GitHub reports no license. |
| Stars | 1 | 0 of 2 | 1 GitHub stars. |
| Repository age | 107 days | 0 of 1 | Repository created 2026-07-01T20:28:50Z. |
What this score does not cover
This score is not a code audit and it is not a human review. It has not been hands-on tested. Nothing on this page is a certification.
Access needed
Environment variables: unknown. The registry entry does not list any.
Maintenance
- Archived
- no
- Last commit
- 1 Jul 2026 · 8f1abdb
- Latest release
- no releases
- Issues
- 0 open · 0 closed
- Stars
- 1
- License
- none published
- Repository created
- 1 Jul 2026
npm and PyPI
- npm
- No npm package in the registry entry.
- PyPI
- No PyPI package in the registry entry.
- Maintainers
- unknown
Install
Install command: unknown. No package command was in the registry entry, and no install block was found in the README.
Other Active Directory servers
- activedirectorymcp by alpadalar
- Skills-MCP-Active-Directory by DevSkillsIT
- active-directory-mcp-server-by-cdata by CDataSoftware
- adds-mcp by Chiefff-Kiefff
Badge
Sources for this listing
github:priority-seed