> ## Documentation Index
> Fetch the complete documentation index at: https://context7.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Authentication and Access Control

This guide covers the authentication mechanisms and access controls available in Context7, including API key handling and enterprise identity features.

## API Key Security

* API keys use cryptographic random generation
* Keys are hashed and encrypted in our database
* Keys can be rotated at any time from your dashboard
* Rate limiting prevents abuse and unauthorized access

## Enterprise SSO

**Single Sign-On (SSO) is available for Enterprise plans.**

### Supported SSO Providers

* SAML 2.0
* OAuth 2.0
* OpenID Connect (OIDC)

### Enterprise Features

* Centralized user management
* Teamspace access controls
* Audit logs for compliance
* Custom authentication policies

### Setup Guides

For step-by-step configuration on self-hosted deployments, see:

* [Microsoft Entra ID (SSO)](https://context7.com/docs/enterprise/security/entra-sso.md) — wire up Entra ID sign-in for an On-Premise instance
* [OIDC SSO](https://context7.com/docs/enterprise/security/oidc-sso.md) — sign in to an On-Premise instance with any OpenID Connect provider
* [SAML 2.0 SSO](https://context7.com/docs/enterprise/security/saml-sso.md) — sign in to an On-Premise instance with Okta, ADFS, Ping, Keycloak or any SAML 2.0 provider
* [Microsoft Entra ID](https://context7.com/docs/enterprise/enterprise-managed-auth/entra.md) — proxy the Context7 MCP server through Azure APIM with Entra authentication

Contact our sales team at [context7.com/contact](https://context7.com/contact) for Enterprise plan details.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.