Casdoor
Open-source IAM with native MCP server and AI agent authentication.
Casdoor is one of the first open-source IAM platforms to natively integrate MCP for AI agent authentication, making it a forward-looking choice for enterprises adopting AI agents. Its combination of traditional SSO, SaaS billing, and LLM observability via OpenClaw is compelling, though the documentation could be more extensive for new users.
- Enterprises adopting AI agents needing identity and access management
- Teams building SaaS platforms with integrated billing and auth
- Developers needing a scalable, open-source IAM with MCP support
- Organizations requiring LLM observability and agent audit trails
- Users seeking a fully managed, closed-source IAM with no self-hosting
- Organizations that do not need AI agent authentication or MCP
- Projects requiring no-code or low-code configuration for complex workflows
We scan live Reddit threads, YouTube comments, X posts, G2 reviews and other communities — and hand you an honest verdict in under a minute.
- Honest verdict, not marketing
- Real pros & cons from real users
- Attributed quotes with receipts
3 free scans · no card needed
In short
Casdoor — Open-source IAM with native MCP server and AI agent authentication. Best for Enterprises adopting AI agents needing identity and access management, Teams building SaaS platforms with integrated billing and auth, Developers needing a scalable, open-source IAM with MCP support. Free to use.
What's new in Casdoor
Checked 14 days agoAcross the latest 1 update: 1 news mention.
Viability Score
How likely is Casdoor to still be operational in 12 months? Based on 4 signals — momentum (how recently it shipped), wrapper dependency, revenue model, and web presence.
Last calculated: July 2026
How we score →Key Features
- Built-in MCP server for AI agent authentication and management
- OAuth 2.1 with Dynamic Client Registration and per-tool permissions
- Agent-to-agent secure authentication
- Support for OAuth 2.0, OIDC, SAML, CAS, LDAP, SCIM, WebAuthn, TOTP, MFA, Face ID
- 100+ identity providers (Google Workspace, Azure AD, etc.)
- OpenClaw agent for LLM observability (traces, metrics, logs via OTLP)
- SaaS management with plans, pricing tiers, and payment providers
- Web UI for managing users, applications, and permissions
- Horizontal scalability for high concurrency
- Clean frontend-backend separation
- Single Sign-On (SSO) for multiple applications
- User authentication workflows and login customization
About Casdoor
Casdoor is an open-source, AI-native Identity and Access Management (IAM) and Single Sign-On (SSO) platform designed for the AI agent era. It provides a built-in MCP (Model Context Protocol) server that lets AI agents manage users, applications, and permissions through natural language, with fine-grained, scope-based authorization for every tool call. The platform supports OAuth 2.1 for AI agents, including Dynamic Client Registration and per-tool permissions, enabling secure agent-to-agent authentication. Casdoor is built for teams and enterprises that need a comprehensive authentication and authorization solution. It offers an intuitive console for managing auth and authorization, with a clean frontend-backend separation that enables horizontal scalability for high concurrency. It also functions as a SaaS management platform, supporting billing plans, pricing tiers, and payment providers. The platform integrates with over 100 identity providers, including social networks and enterprise identity systems, and supports protocols such as OAuth 2.0, OIDC, SAML, CAS, LDAP, WebAuthn, and MFA. Additionally, Casdoor includes OpenClaw, an agent that collects OpenTelemetry traces, metrics, and logs from LLM applications, providing a full audit trail of agent activity. What makes Casdoor different is its agent-first approach, combining traditional IAM with AI agent authentication and observability. It is part of the CNCF Cloud Native Landscape, under Security & Compliance, and is designed for the AI era, making it a unique choice for organizations adopting AI agents.
Behind the Verdict
Casdoor fills a genuine gap: most IAM platforms predate the AI agent wave and offer no native agent authentication. By embedding an MCP server directly into the identity layer, Casdoor lets AI tools like Claude Desktop or Cursor manage users and permissions conversationally — a feature no other open-source IAM has. For teams already working with MCP-compatible clients, this is a clear advantage. The platform also covers traditional ground well: OAuth 2.0, OIDC, SAML, LDAP, WebAuthn, MFA, and 100+ identity providers. The SaaS management module (billing plans, payment providers) adds value for those building multi-tenant apps. The OpenClaw observability agent is a nice bonus for LLM deployments. However, Casdoor is not for everyone. If you don't need AI agent authentication or MCP, simpler IAM solutions like Keycloak or Authelia may suffice. The self-hosted nature means you assume operational burden — no managed cloud version exists currently. Documentation, while improving, still lags behind more mature projects. Integration depth varies: while 100+ providers are supported, some may require custom configuration. Scaling for very high concurrency (e.g., millions of users) may need careful deployment planning due to its Go-based backend. Compared to Auth0 or Okta, Casdoor offers more control but less hand-holding. For startups wanting to avoid vendor lock-in with a modern IAM that speaks the agent language, Casdoor is worth a serious look. We'd caution against using it solely for traditional IAM when more battle-tested alternatives exist — leverage its agent-native features to justify the switch.
Researching Casdoor? Get your full AI stack in 60 seconds.
Free, no signup — tell us your goal and get tools matched to your budget & existing stack.
Use Cases
- Deploy Casdoor as your central IAM for web applications with SSO, MFA, and 100+ identity providers.
- Integrate Casdoor's MCP server with Claude Desktop or Cursor to manage users and permissions via natural language.
- Use OpenClaw to collect and audit traces, metrics, and logs from your LLM applications in Casdoor.
- Set up a SaaS billing system with Casdoor's plans, pricing tiers, and payment providers.
- Enable face authentication SSO for enhanced user experience and security across multiple apps.
Limitations
- Casdoor is open-source and self-hosted, requiring technical expertise to deploy and maintain.
- The MCP server and AI agent features are relatively new, so documentation and community resources may be less mature than traditional IAM solutions.
- No pricing tiers are listed, suggesting the core platform is free, but enterprise support or managed offerings may require contacting the team.
Integrations
Resources & Guides
Official links
Featured Head-to-Head Comparisons
Popular in Security & Privacy
Temporal AI
Durable execution platform for building reliable AI agents and workflows.
Spider Cloud
Fast web crawling, scraping & search API for AI agents
Frequently Asked Questions
Best-of guides
Used Casdoor? Help shape our editorial sentiment research.