theAuth
Open-source auth for AI agents and humans. Agent identity with scoped permissions and delegation chains, an MCP OAuth 2.1 server, passkeys, SSO and SCIM. TypeScript and Go SDKs.

theAuth is open-source authentication and authorization built for the AI-native era. It handles identity for both humans and AI agents, with scoped permissions, delegation chains with depth limits, and an audit trail for every action. It ships an MCP OAuth 2.1 server, passkeys, enterprise SSO (SAML/OIDC), and SCIM provisioning, and runs on edge runtimes (Cloudflare, Deno, Bun).
theauth-go is the companion Go SDK for non-JS stacks: sessions, magic links, WebAuthn/passkeys, TOTP, SAML, and SCIM, backed by Postgres, MySQL, or in-memory storage.
Related Projects
AskVerdict AI
AI-powered verdict engine with multi-agent debate that cross-examines every question so you can decide with confidence.
KavachOS
Original name of theAuth. Archived, now theAuth.
Claude Code Marketplace
Community-driven marketplace of specialized Claude Code agents covering the full SDLC -- code review, security scanning, deployment automation, and more.