Casdoor
Not yet source-checkedOpen-source IAM and SSO for users and AI agents: OAuth 2.0, OIDC, SAML, CAS, LDAP, SCIM, WebAuthn and MFA, plus a built-in MCP server and OAuth 2.1 for MCP.
Machine-drafted from the vendor's site · not yet source-checkedProfile updated Link checked Pricing captured How we rate
In short
Casdoor is an open-source IAM and SSO platform for humans and AI agents. It features a built-in MCP server, OAuth 2.1, and enterprise-grade security protocols.
Teams and developers who need enterprise-grade identity management for both human users and AI agents, specifically those utilizing MCP-compatible tools.
Users who do not require identity management or SSO capabilities for AI agents or enterprise applications.
Casdoor is an open-source, AI-native Identity and Access Management (IAM) and Single Sign-On (SSO) platform designed for the AI Agent era. It provides enterprise-grade authentication and authorization, supporting over 100 identity providers including OAuth 2.0, OIDC, SAML, CAS, LDAP, WebAuthn, and MFA. A key feature is its built-in MCP server with Streamable HTTP, which allows AI agents to manage users, applications, and permissions through natural language using OAuth 2.1 for agents with Dynamic Client Registration and per-tool permissions. The platform includes OpenClaw for LLM agent protection, collecting OpenTelemetry traces, metrics, and logs to create a full audit trail of agent activities. Casdoor also functions as a SaaS management platform, handling billing, plans, pricing tiers, and payment providers. It features a modern architecture with clean frontend-backend separation and horizontal scalability, and is part of the CNCF Landscape with OpenSSF Best Practices Passing status.
The page documents Casdoor as an open-source IAM platform with a native MCP server and OAuth 2.1 support for AI agents. It highlights features like OpenClaw for agent auditing and SaaS billing management. The text confirms the product is free and open source, part of the CNCF Landscape, and supports numerous identity protocols. The page does not specify specific pricing costs for the SaaS tier, only that it supports billing and payment providers. It also does not list specific system requirements for self-hosting beyond the mention of horizontal scalability.
— The AI Tool Bible editorial team
Pros
- ✅ Built-in MCP server with Streamable HTTP
- ✅ OAuth 2.1 for agents with Dynamic Client Registration
- ✅ Supports over 100 identity providers
- ✅ OpenClaw Security Guardrails for LLM agents
- ✅ Full SaaS billing and subscription management
- ✅ OpenSSF Best Practices Passing
Cons
- ⚠️ Requires configuration for MCP clients like Claude Desktop or Cursor
- ⚠️ OpenClaw requires pointing at a Casdoor instance to view traces
- ⚠️ SaaS billing features require defining plans and pricing tiers
Pricing (captured )
| Tier | Monthly | Key features |
|---|---|---|
| Casdoor Cloud | $29/month |
|
Prices change; we show the grid as captured on Oct 21, 2026. Check current pricing on the vendor's site →
Facts
- Platforms
- web, api
- API available
- Yes
- Open source
- Yes
- Earliest Wayback capture
- 2026-04-19 (earliest archived capture of the site, not a launch date)
Where this tool sits
Use cases
Frequently asked
- Is Casdoor free to use?
- Yes, Casdoor is free and open source. The SaaS Management Platform includes full SaaS billing features like plans, pricing tiers, and payment providers, but the core identity management is open source.
- How does Casdoor support AI agents?
- It includes a built-in MCP server with Streamable HTTP, allowing agents to manage users and permissions via natural language. It uses OAuth 2.1 with Dynamic Client Registration and per-tool permissions for secure agent access.
- What authentication protocols does Casdoor support?
- Casdoor supports over 100 identity providers, including OAuth 2.0, OIDC, SAML, CAS, LDAP, WebAuthn, and MFA. It is designed for enterprise-grade authentication and authorization for both human users and AI agents.
- Does Casdoor offer security features for LLM agents?
- Yes, it features OpenClaw for LLM agent protection. This collects OpenTelemetry traces, metrics, and logs to create a full audit trail of agent activities, ensuring security and compliance for AI operations.
- Can Casdoor handle SaaS billing and management?
- Yes, Casdoor functions as a SaaS management platform. It handles billing, plans, pricing tiers, and payment providers, making it suitable for teams needing both identity management and SaaS operational tools.