Casdoor
The facts below are what the maker publishes about Casdoor, checked and dated. Our editors have not written about it yet.
The facts
Each one read from Casdoor's own pages, with the date it was checked.
What it does
- AI agent authentication
- Its MCP authentication supports OAuth 2.1, Dynamic Client Registration, and per-tool permissions.checked 30 Sep 2026
- AI agent support
- Casdoor includes an MCP server for AI agents to manage users, applications, and permissions with fine-grained, scope-based authorization.checked 29 Sep 2026
- API
- The public REST API supports the Casdoor frontend, SDKs, and customer applications or scripts.checked 30 Sep 2026
- Audience and use
- Casdoor says it powers authentication for hundreds of projects, from Fortune 500 companies to startups.checked 29 Sep 2026
- Audit and observability
- Permission audit entries can record non-GET API calls, and OpenClaw can send agent traces to Casdoor over OTLP.checked 30 Sep 2026
- Authentication features
- It supports phone and email verification codes, password recovery, customizable registration and login pages, and access-log auditing.checked 29 Sep 2026
- Authorization
- Its authorization management supports ACL, RBAC, ABAC, and RESTful access control models through Casbin.checked 29 Sep 2026
- Cloud integrations
- It integrates with Alibaba Cloud, Tencent Cloud, and Qiniu Cloud for image CDN and cloud storage.checked 29 Sep 2026
- Database support
- Documented database options include MySQL, MariaDB, PostgreSQL, CockroachDB, SQL Server, Oracle, SQLite 3, and TiDB.checked 30 Sep 2026
- Deployment
- Casdoor provides prebuilt binaries for Linux, macOS, and Windows and supports self-hosted deployment.checked 30 Sep 2026
- Identity providers
- Casdoor says it supports more than 100 identity providers, including social and enterprise sign-in options.checked 30 Sep 2026
- Integrations
- Provider connectors cover OAuth, email, SMS, storage, payments, CAPTCHA, identity verification, MFA, and logging.checked 30 Sep 2026
- MCP security
- Casdoor supports PKCE, audience-restricted tokens, configurable consent screens, and custom scopes for MCP authorization.checked 30 Sep 2026
- MFA
- Documented second-factor options include SMS, email, TOTP authenticator apps, and RADIUS.checked 30 Sep 2026
- Pricing capability
- Casdoor's pricing documentation describes configurable plans and prices, but does not state a purchase price for Casdoor itself.checked 29 Sep 2026
- Product
- Casdoor is an open-source identity and access management platform with a built-in MCP server.checked 30 Sep 2026
- Protocols
- It supports OAuth 2.0, OIDC, SAML, CAS, LDAP, WebAuthn, and MFA.checked 30 Sep 2026
- Purpose
- Casdoor is an open-source identity and access management and single sign-on platform supporting OAuth 2.0, OIDC, SAML, CAS, LDAP, SCIM, WebAuthn, TOTP, MFA, RADIUS, and Kerberos.checked 29 Sep 2026
- SDKs and API
- Casdoor provides a RESTful API and SDK integrations for languages including C++, C#, Go, Java, JavaScript, Lua, PHP, Ruby, Haskell, and Python.checked 29 Sep 2026
- Security
- Casdoor supports MFA methods including SMS codes, email codes, TOTP authenticator apps, and RADIUS authentication.checked 29 Sep 2026
- Support
- The site links to Discord, Stack Overflow, and Google Groups for community support.checked 30 Sep 2026
Where it runs
- Browser extension
- The documentation includes a Chrome extension integration guide.checked 29 Sep 2026
Money
- SaaS billing
- It includes tools to manage products, plans, pricing, subscriptions, payments, and transactions.checked 30 Sep 2026
Alternatives to Casdoor
- 1
Authgear
Free planOpen sourceAndroidiOSWebAPI8.5$50 usage-based - 2
Ory
Free planOpen sourceWebAPILinuxmacOS8.4From $770 a year - 3
FusionAuth
Free planAndroidiOSWebAPI8.3From $162 a month - 4
Google Cloud Identity
Free planAndroidiOSWebAPI8.3Free plan - 5
Descope
Free planAndroidiOSWebAPI7.6$249 usage-based - 6
Okta Customer Identity Cloud
Free planAndroidiOSWebAPI7.6From $35 a month