Back to timeline

Thu, October 1508:15Open SourceAPI & pricingMCP & SkillsOpen sourceAPI & pricing guide

Casdoor open-source identity platform hits GitHub trending with agent-first IAM positioning

Decision Brief

What changedCasdoor, an open-source, self-hosted, agent-oriented identity and access management platform, has appeared on the GitHub trending list, supporting OAuth 2.0, OIDC, SAML, CAS, LDAP, SCIM, WebAuthn, and MFA, with new MCP gateway and A2A capabilities.
Why it mattersFor teams building their own identity infrastructure, Casdoor folds MCP gateway and A2A communication into the same user directory and Casbin policy system, meaning credentialing and permissioning LLM agents no longer requires a separate account system.
Who should careOpen-source model users, Agent builders
Affected stackMCP
Builder actionCheck whether your existing MCP servers are affected
Source confidenceHigh · Official release / blog / repo

Casdoor is an open-source, self-hosted identity and access management (IAM) platform that doubles as a single sign-on and authentication server, with a built-in web console. It supports OAuth 2.0, OIDC, SAML 2.0, CAS, LDAP, SCIM 2.0, WebAuthn, TOTP/MFA, and MCP, and integrates with identity sources such as Google Workspace, Microsoft Entra ID, and GitHub. The backend uses Go with the Beego framework and exposes a REST API; the frontend is React 18 with shadcn/ui and Tailwind CSS, built with Vite, while the legacy Ant Design console is no longer built or shipped. Databases are supported via XORM, including MySQL, PostgreSQL, SQLite, and SQL Server, with Redis required for caching in multi-replica deployments. On the AI and agent side, Casdoor offers an MCP gateway that can expose Model Context Protocol servers and control access to them, while also supporting agent-to-agent (A2A) communication. Authorization is based on the Casbin policy model, supporting ACL, RBAC, ABAC, and custom models. For teams that need to issue credentials and control tool and resource access for their own agents or LLM applications, this design removes the cost of maintaining a separate agent-specific authorization service alongside an existing account system; applications that already have OAuth/OIDC clients can delegate login directly to Casdoor.

Summary basis: full article readCompiled from the source scope noted above; the original remains authoritative.

Sources

  • Skill Radar(GitHub 趋势)

    Trending hands-on MCP servers, agent skills, and AI-coding tools discovered from GitHub search momentum.

  • GitHub:casdoor/casdoor

Related intel

留言

登入后即可留言,和其他 builder 交换实测心得。

还没有留言,抢头香。