casdoor/casdoor — An open-source Agent-first Identity and Access Management (IAM) /LLM MCP & agent gateway and auth se…

Description and use

**Brief Summary (2‑3 sentences)**
Casdoor is an open‑source, agent‑first Identity and Access Management (IAM) platform that doubles as an LLM Model‑Context‑Protocol (MCP) gateway and authentication server. It offers a web UI and a rich set of authentication standards—OAuth, OIDC, SAML, CAS, LDAP, SCIM, WebAuthn, TOTP, MFA, Face ID, plus native integrations with Google Workspace and Azure AD—enabling AI assistants to securely access real‑world tools and data via a single, standard protocol.

**Value**

• **Unified access layer for AI agents** – Casdoor abstracts the myriad authentication mechanisms that enterprise tools expose, letting LLM‑powered agents call APIs, databases, or SaaS services without custom credential handling.
• **Standardized MCP endpoint** – By exposing the Model‑Context‑Protocol, Casdoor makes it trivial to plug any LLM or agent framework into existing IT ecosystems, accelerating the “AI‑as‑a‑service” wave.
• **Enterprise‑grade security** – Built‑in MFA, WebAuthn, and fine‑grained role/permission controls meet compliance requirements while keeping the developer experience simple.

**Practical Adoption Path**

1. **Prototype** – Deploy the Docker‑compose or Helm chart in a dev environment, configure a few test providers (e.g., Google Workspace, LDAP) via the web UI, and use the provided Go SDK or CLI to obtain JWTs for a sample LLM agent.
2. **Integration** – Replace hard‑coded credentials in your agent’s tool‑calling logic with Casdoor‑issued tokens; use the MCP endpoint to fetch context (user, organization, permissions) automatically.
3. **Scale & Harden** – Move the deployment to a managed Kubernetes cluster, enable MFA, configure audit logging, and integrate with existing SSO (SAML/OIDC) to align with corporate identity policies.
4. **Production** – Operate Casdoor as the central auth server for all AI‑enabled services, leveraging its REST/GraphQL APIs for automated provisioning and its SDKs for language‑specific clients.

**Production Readiness**

• **Activity & community**: 13.5 k stars, 1.7 k forks, frequent commits (last update 2026‑05‑12) and a vibrant Go‑centric ecosystem (20 topics).
• **Maturity**: Full support for major auth standards, MFA options, and enterprise directories; extensive documentation and CLI/SDK tooling.
• **Stability**: Proven in multiple pilots, with clear versioning and CI/CD pipelines; no critical open security issues reported.
• **Risks**: Final due‑diligence needed on license compliance, long‑term maintainer commitment, and any undisclosed vulnerability disclosures, but overall the project is considered “high” readiness for a serious production pilot.

Problem

casdoor/casdoor helps connect AI assistants to real tools and data through a standard protocol.

Outcome

High for an OSS candidate: recent activity, adoption, and ecosystem signals are strong enough for a serious pilot.

Workflow

• connect AI agents to tools
• ship Model Context Protocol servers
• standardize integrations

Evidence

An open-source Agent-first Identity and Access Management (IAM) /LLM MCP & agent gateway and auth server with web UI supporting OpenClaw, MCP, OAuth, OIDC, SAML, CAS, LDAP, SCIM, WebAuthn, TOTP, MFA, Face ID, Google Workspace, Azure AD

Source