10 open-source repos for AI agent login and permissions, from Keycloak to Casbin
victor_explore · x · 2026-10-15
A curated list of 10 GitHub projects handling login and permissions for AI agents (star counts as of Oct 2026):
- Keycloak (37K stars, Apache 2.0): self-hosted full login server, now usable as the login server for MCP servers (MCP spec support still experimental).
- Better Auth (30K stars, MIT): TypeScript auth library whose plugins turn your app into a login server for MCP clients, issuing short-lived, scoped agent credentials.
- Casbin (20K stars): lightweight Apache library answering one question — can this user or agent do this action?
- Ory Hydra (18K stars): OAuth/OIDC server issuing the limited tokens agents use to act on a user's behalf.
- SpiceDB (7K stars): Zanzibar-style permissions database.
- Also covered: OpenFGA (permissions server with an MCP tools guide), agentgateway (AI-native MCP/A2A proxy), Cerbos (policy checks before tool calls), Agent Vault (proxy holds keys so agents never see them), and Cloudflare Workers OAuth Provider (adds OAuth login to remote MCP servers).
The takeaway: mature open-source infrastructure now covers identity and least-privilege for the agent era.
More from coding & agent
- awesome-llm-apps hits 142k stars with 100+ open-source AI agents, skills and RAG apps — Saboo_Shubham_ · 2026-10-15
- Dev Builds a 'Video Prompt Director' App on Eazo to Turn Rough Ideas Into Polished Video Prompts — alifcoder · 2026-10-15
- Dev builds a working animated Excalidraw with Gemini 4 Argon, plans to open-source it — Saboo_Shubham_ · 2026-10-15
- Layering Claude Skills over deterministic Makefiles for complex AI-automated workflows — bradneuberg · 2026-10-15
- Coding on a Walk: Dev Uses AirPods Voice to Run Codex Sessions, Ship Apps and Answer Email Hands-Free — nickbaumann_ · 2026-10-15
- Sentry founder denies removing telemetry options 'for enterprise dollars': everything is opt-in — zeeg · 2026-10-15