Skip to content

casdoor

MCP Security & Auth

An open-source AI-first Identity and Access Management (IAM) /AI MCP & agent gateway and auth server with web UI supporting MCP, A2A, OAuth 2.1, OIDC, SAML, CAS, LDAP, SCIM, WebAuthn, TOTP, MFA, Face ID, Google Workspace, Azure AD

Track releases GitHub Website
Go Latest v2.395.0 · 3mo ago Security brief →

Features

  • Supports MCP, OAuth 2.0/OIDC, SAML, CAS, LDAP, SCIM, WebAuthn, TOTP and MFA
  • Provides a modern web UI for managing users, organizations, applications and providers
  • Integrates with Google Workspace, Azure AD and other external identity sources

Recent releases

View all 58 releases →
v2.395.0 Mixed
Notable features
  • Add local OpenClaw transcript sync for session logs
Full changelog

2.395.0 (2026-04-07)

Bug Fixes

  • fix authz permission for well-known OAuth endpoints (#5372) (e9c2ec0)

Features

  • add local OpenClaw transcript sync for session logs (#5370) (2a8ac57)
View release on GitHub
v2.394.0 New feature
Notable features
  • LoginPage captcha rule check now applied to SendCodeInput.js component
Full changelog

2.394.0 (2026-04-06)

Features

  • apply loginPage captcha rule check to SendCodeInput.js (#5369) (31ce151)
View release on GitHub
v2.393.0 Bug fix

Filter validation was tightened to prevent incorrect passes, improving reliability of access decisions.

View release on GitHub
v2.391.0 New feature
Notable features
  • Provider-based entry viewers for SELinux logs
Full changelog

2.391.0 (2026-04-05)

Features

  • add provider-based entry viewers for SELinux logs (#5364) (c7ad205)
View release on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

About

Stars
13,938
Forks
1,738
Languages
Go CSS HTML
View on GitHub Homepage Live demo Documentation

Install & Platforms

Install via
docker docker-compose go

Community & Support

Discord

Similar tools

aashari/mcp-server-aws-sso
UPinar/contrastapi
Pantheon-Security/chrome-mcp-secure
jagmarques/asqav-mcp
jnMetaCode/shellward

Beta — feedback welcome: [email protected]