# Authelia

**Canonical:** https://apis.io/providers/authelia/  
**Website:** https://www.authelia.com  
**APIs profiled:** 3

Authelia is an open source authentication and authorization server providing multi-factor authentication and single sign-on for applications behind a reverse proxy. It supports OpenID Connect 1.0, OAuth 2.0, TOTP, WebAuthn, and Duo Push as authentication methods. Authelia exposes a REST API documented with an OpenAPI specification and integrates with nginx, Traefik, Caddy, and other reverse proxies.

## Kin Score — 32.7 / 100 (thin)

Scored 2026-08-20 under rubric 0.12.0. Trend: flat (+0.0 from 32.7).

| Facet | Score |
|---|---|
| Discoverability | 74.1 |
| Contract Quality | 48.6 |
| Governance | 0.0 |
| Contract Governance | 0.0 |
| Operational Transparency | 36.8 |
| Developer Ergonomics | 26.2 |
| Commercial Clarity | 15.8 |
| Access Clarity | 15.8 |

## Agent readiness — 29.1 (agent-aware)

| Dimension | Value |
|---|---|
| Spec Presence | yes |
| Agentic Access | derived |
| Reversibility Documented | no |
| MCP Server | no |
| Auth Clarity | yes |
| Idempotency | no |
| Error Semantics | no |
| OpenAPI Examples | no |
| Rate Limit Signal | documented |
| Event Surface Described | no |
| Agent Skills | no |
| Well Known Catalog | no |
| Consent Identity | no |
| Agent Card | no |
| Dry Run Mode | no |

## Access

Freemium · Self-serve signup — onboarding: self-serve, pricing: freemium, trial: no (confidence: high).

## APIs (3)

- **Authelia OpenID Connect 1.0 Provider** — Authelia acts as an OpenID Certified OpenID Connect 1.0 Provider supporting Authorization Code, Implicit, and Hybrid flows with PKCE, PAR, and various token endpoint authenticat...
- **Authelia Discovery API** — Well-known discovery endpoints.
- **Authelia OIDC API** — OpenID Connect 1.0 / OAuth 2.0 provider endpoints.

## Agentic access (1)

- **Authelia Agentic Access** — 12 operations · 7 acting

## Security (2)

- **Authelia Authentication** — http/oauth2 · 3 schemes
- **Authelia Domain Security** — TLSv1.3 · HSTS · DNSSEC · DMARC

## Plans (1)

- **Authelia Plans Pricing**

## Use cases (4)

- **Self-Hosted SSO** — Deploy a self-hosted SSO solution for internal web applications and services without relying on cloud identity providers.
- **Homelab Security** — Protect self-hosted homelab applications with MFA and access control without exposing them to the internet unprotected.
- **Small Business Identity** — Provide centralized authentication for small business web applications using LDAP and access control policies.
- **OIDC Provider** — Act as an OpenID Connect provider for applications requiring OAuth 2.0 and OIDC-based authentication flows.

## Tags

Authentication, Authorization, LDAP, MFA, Open-Source, OpenID Connect, Self-Hosted, SSO

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/providers/authelia/). Scores are computed from the provider's own public artifacts under a published rubric.