Ldap MCP Server
LDAP directory entries accessible via MCP for searching, retrieving, and modifying data.
Data last scanned today · Reviewed today
Overview
This server bridges LDAP directory infrastructure to the Model Context Protocol, allowing AI agents to perform standard LDAP operations. It supports deep interactions with directories like OpenLDAP and Active Directory by providing specific tools for searching with scope selection, fetching entries by distinguished name, and managing directory data. The server architecture includes a robust LDAP client wrapper that handles connection pooling, StartTLS upgrades, and automatic reconnections. Developers can run the server in a secure read-only mode or enable full read-write capabilities to allow AI models to perform record modification tasks.
Our verdict
With a security score of 31/100, this tool is classified as high-risk. The repository lacks a defined license, leaving legal usage terms unclear, and it has not been editorially reviewed. Additionally, the project is community-maintained rather than vendor-backed, which increases concerns regarding ongoing support. While it includes an optional read-only mode to restrict destructive operations, users should exercise extreme caution before deploying this in environments where directory data integrity is critical.
- Supports read-only mode to prevent directory modifications.
- Zero direct dependencies minimize supply-chain surface area.
- Implements LDAP connection pooling and automatic reconnection logic.
- Includes built-in support for StartTLS and LDAPS protocols.
- No detected license makes usage terms legally ambiguous.
- High-risk security score due to lack of editorial oversight.
- Community-maintained project with no official vendor support.
- Repository has not received updates in over nine months.
Tools
| Tool | Description | Risk |
|---|---|---|
| search_entries | Execute LDAP searches with paging, scope selection, alias dereferencing, and size limits. | low |
| get_entry | Fetch a single entry by distinguished name. | low |
| add_entry | Create new entries (requires -read-write). | medium |
| modify_entry | Apply attribute modifications (requires -read-write). | medium |
| delete_entry | Delete entries (requires -read-write). | high |
Compatibility
| Client | Local | Docker | Remote | Read-only |
|---|---|---|---|---|
| Claude Desktop | ||||
| Cursor | ||||
| VS Code | ||||
| Windsurf | ||||
| ChatGPT |
Frequently asked questions
›How can I prevent MCP clients from modifying my LDAP directory?
The server operates in read-only mode by default. To enable add, modify, and delete operations, you must explicitly provide the -read-write flag.
›What transport protocol does this MCP server require?
The MCP client must be capable of speaking the SSE transport, such as the Claude Desktop application.
›Can I use this server with secure LDAP connections?
Yes, the server supports LDAPS endpoints and StartTLS upgrades via the -starttls flag when using ldap:// URLs.
›How do I handle self-signed certificates when connecting to LDAP?
You can use the -insecure flag to skip TLS certificate verification, which is useful for testing environments.
›Is it possible to provide the bind password via environment variables?
Yes, you can provide the password using the LDAP_BIND_PASSWORD environment variable instead of the -bind-password flag.
›What is the default port for the MCP server and can it be changed?
The server listens on port 8080 by default, which can be overridden using the MCP_PORT environment variable or the -addr flag.
Badge
Maintain this server? Add the live badge to your README.