Ross ROSS = Recommend OSS · open-source software intelligence for agents

casdoor/casdoor

An open-source Agent-first Identity and Access Management (IAM) /LLM MCP & agent gateway and auth server with web UI supporting OpenClaw, MCP, OAuth, OIDC, SAML, CAS, LDAP, SCIM, WebAuthn, TOTP, MFA, Face ID, Google Workspace, Azure AD observed · 2026-08-28

github.com/casdoor/casdoor · homepage · Go · Apache-2.0 (permissive) observed · 2026-08-28

Health v2 · maintenance only

95/100

  • Activity 99
  • Release rhythm 87
  • Longevity 100
How is this computed?

round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-09-03. Adoption (stars, forks) is never an input.

  • gap_med: 0.0
  • age_days: 2141
  • days_rel: 8
  • days_push: 8
  • n_releases_24m: 971

Full methodology

Adoption not part of the score

14276 stars · 1788 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

Casdoor is an open-source, self-hosted Identity and Access Management (IAM) and single sign-on (SSO) platform with a web UI, written in Go. It supports OAuth 2.0/2.1, OIDC, SAML, CAS, LDAP, SCIM, WebAuthn, TOTP/MFA, and includes a built-in MCP server and gateway for AI agent authentication and management.

Use cases

  • add single sign-on to my apps with oauth and oidc
  • self-host an identity provider with mfa and webauthn support
  • let AI agents manage users and permissions via MCP
  • authenticate AI agents with OAuth 2.1 dynamic client registration
  • connect my app to Google Workspace or Azure AD for login
  • add subscription billing and paid plans to my SaaS
  • centralize SAML and CAS login for legacy applications

When to choose

  • you need a self-hosted SSO/IAM server with broad protocol support (OAuth, OIDC, SAML, CAS, LDAP, SCIM)
  • you want a web-based admin console and multi-tenant organization management
  • you need MCP/AI-agent authentication and an MCP gateway alongside traditional IAM
  • you want built-in MFA, WebAuthn/passkeys, and social login providers

When to avoid

  • you only need a lightweight embedded auth library inside a single app rather than a standalone server
  • you require a fully managed identity service with vendor SLAs
  • you need a minimal OAuth server without a web UI or extra IAM features

Facets

application · maturity active

auth authorization mcp api-gateway web-framework self-hosted security monitoring security large-language-models web-development self-hosted developer-tools windows self-hosted go sso oauth oidc saml ldap scim webauthn mfa totp single-sign-on identity-provider mcp-server agent-auth casbin saas-billing authentication ai-agents linux macos docker web-server

10 sources

Member repositories

RepositoryRoleHealth v2
casdoor/casdoormain95

For agents

markdown · JSON · MCP: product_card(name="casdoor/casdoor")

Data as of 2026-08-30T08:39:29.467469+00:00 · Report a problem