A reference implementation of a Kerberized MCP server that enables single sign-on authentication against FreeIPA for development environments, allowing developers to authenticate using existing Kerberos tickets without passwords or API keys. The system supports multi-OS deployments, authorization via directory groups, and delegation to downstream services while maintaining detailed audit logs of all actions.