Casdoor

aid: casdoor
name: Casdoor
description: Casdoor is an open-source, AI-first identity and access management (IAM) and MCP gateway authentication server
  with a web UI. Built in Go (Beego) with a React frontend, Casdoor supports OAuth 2.0, OIDC, SAML 2.0, CAS, LDAP, Kerberos/SPNEGO,
  WebAuthn / Passkeys, TOTP / MFA, SCIM 2.0 provisioning, social login, multi-tenant organizations, role-based access control,
  and an MCP Gateway plus A2A Protocol for agent-to-agent communication. The platform exposes a RESTful API documented via
  Swagger and ships SDKs for Go, Java, Python, Node.js, C#, C++, PHP, Ruby, JavaScript, Lua, and Haskell. Released under the
  Apache License 2.0.
type: Index
accessModel:
  pricing: freemium
  onboarding: self-serve
  trial: false
  try_now: true
  public: false
  label: Freemium · Self-serve signup
  confidence: high
  source:
  - plans
  - authentication
  generated: '2026-07-22'
  method: derived
image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/icons/casdoor.png
tags:
- Authentication
- Authorization
- IAM
- Identity
- LDAP
- MCP
- MFA
- OAuth
- OIDC
- Open Source
- Passkeys
- SAML
- SCIM
- Single Sign-On
- SSO
- WebAuthn
url: https://raw.githubusercontent.com/api-evangelist/casdoor/refs/heads/main/apis.yml
created: '2026-03-25'
modified: '2026-05-19'
specificationVersion: '0.19'
apis:
- aid: casdoor:casdoor-rest-api
  name: Casdoor REST API
  description: The Casdoor REST API provides programmatic access to the IAM platform's core resources including users, organizations,
    applications, roles, groups, permissions, identity providers, tokens, sessions, certificates, adapters, syncers, webhooks,
    products, payments, MFA enrollments, and enforcers. The API follows RESTful conventions with JSON payloads and is documented
    via a hosted Swagger UI.
  humanURL: https://casdoor.ai/docs/basic/api
  baseURL: https://door.casdoor.com
  tags:
  - Applications
  - IAM
  - Organizations
  - REST
  - Roles
  - Sessions
  - Tokens
  - Users
  properties:
  - type: Documentation
    url: https://casdoor.ai/docs/basic/api
  - type: Swagger
    url: https://door.casdoor.com/swagger/
  - type: GitHubRepository
    url: https://github.com/casdoor/casdoor
  - type: Authentication
    url: https://casdoor.ai/docs/basic/core-concepts
- aid: casdoor:casdoor-oauth-oidc
  name: Casdoor OAuth 2.0 / OIDC Provider
  description: Casdoor implements an OAuth 2.0 authorization server and OpenID Connect identity provider, exposing the standard
    authorization, token, userinfo, revocation, introspection, JWKS, and OIDC discovery endpoints used by web, mobile, native,
    and machine-to-machine clients to obtain ID tokens and access tokens.
  humanURL: https://casdoor.ai/docs/how-to-connect/oauth
  tags:
  - Authentication
  - JWT
  - OAuth
  - OIDC
  - SSO
  - Tokens
  properties:
  - type: Documentation
    url: https://casdoor.ai/docs/how-to-connect/oauth
  - type: Discovery
    url: https://door.casdoor.com/.well-known/openid-configuration
  - type: Specification
    url: https://datatracker.ietf.org/doc/html/rfc6749
- aid: casdoor:casdoor-saml
  name: Casdoor SAML 2.0 Identity Provider
  description: SAML 2.0 identity provider endpoints in Casdoor that issue SAML assertions to enterprise service providers,
    supporting SSO scenarios for legacy and enterprise SaaS applications via standard SAML metadata, ACS, and SLO bindings.
  humanURL: https://casdoor.ai/docs/how-to-connect/saml
  tags:
  - Enterprise SSO
  - Federation
  - SAML
  - SSO
  properties:
  - type: Documentation
    url: https://casdoor.ai/docs/how-to-connect/saml
  - type: Specification
    url: http://docs.oasis-open.org/security/saml/v2.0/
- aid: casdoor:casdoor-cas
  name: Casdoor CAS Server
  description: Casdoor exposes a CAS (Central Authentication Service) server compatible with CAS protocol versions 1.0, 2.0,
    and 3.0, providing single sign-on to applications that integrate via the CAS ticket-validation flow.
  humanURL: https://casdoor.ai/docs/how-to-connect/cas
  tags:
  - Authentication
  - CAS
  - SSO
  properties:
  - type: Documentation
    url: https://casdoor.ai/docs/how-to-connect/cas
- aid: casdoor:casdoor-ldap
  name: Casdoor LDAP Server
  description: Casdoor provides an LDAP server interface so that legacy applications and infrastructure components requiring
    LDAP authentication can bind against Casdoor users and groups, and a sync engine that imports users from external LDAP
    directories.
  humanURL: https://casdoor.ai/docs/ldap/overview
  tags:
  - Directory
  - LDAP
  - Sync
  properties:
  - type: Documentation
    url: https://casdoor.ai/docs/ldap/overview
- aid: casdoor:casdoor-scim
  name: Casdoor SCIM 2.0 API
  description: SCIM 2.0 (System for Cross-domain Identity Management) endpoints for automated user and group provisioning
    between Casdoor and downstream identity-aware systems.
  humanURL: https://casdoor.ai/docs/scim/overview
  tags:
  - Identity
  - Provisioning
  - SCIM
  properties:
  - type: Documentation
    url: https://casdoor.ai/docs/scim/overview
  - type: Specification
    url: https://datatracker.ietf.org/doc/html/rfc7644
- aid: casdoor:casdoor-mcp-gateway
  name: Casdoor MCP Gateway
  description: Casdoor's MCP (Model Context Protocol) gateway and A2A (Agent-to-Agent) protocol surface, designed to broker
    authentication and authorization for AI agents and MCP-aware tooling using Casdoor as the identity provider.
  humanURL: https://casdoor.ai/docs/mcp/overview
  tags:
  - A2A
  - Agents
  - AI
  - MCP
  properties:
  - type: Documentation
    url: https://casdoor.ai/docs/mcp/overview
- aid: casdoor:casdoor-webhooks
  name: Casdoor Webhooks
  description: Outbound webhook events that notify external systems of identity events such as user signup, login, logout,
    profile changes, password resets, and MFA enrollments.
  humanURL: https://casdoor.ai/docs/integration/webhook
  tags:
  - Events
  - Integration
  - Webhooks
  properties:
  - type: Documentation
    url: https://casdoor.ai/docs/integration/webhook
- aid: casdoor:casdoor-applications-api
  name: Casdoor Applications API
  description: OAuth/OIDC client applications
  humanURL: https://casdoor.ai/docs/basic/api
  baseURL: https://door.casdoor.com
  tags:
  - Applications
  properties:
  - type: OpenAPI
    url: openapi/casdoor-applications-api-openapi.yml
- aid: casdoor:casdoor-authentication-api
  name: Casdoor Authentication API
  description: Login, callback, and device authorization
  humanURL: https://casdoor.ai/docs/basic/api
  baseURL: https://door.casdoor.com
  tags:
  - Authentication
  properties:
  - type: OpenAPI
    url: openapi/casdoor-authentication-api-openapi.yml
- aid: casdoor:casdoor-oidc-api
  name: Casdoor OIDC API
  description: OpenID Connect discovery and JWKS endpoints
  humanURL: https://casdoor.ai/docs/basic/api
  baseURL: https://door.casdoor.com
  tags:
  - OIDC
  properties:
  - type: OpenAPI
    url: openapi/casdoor-oidc-api-openapi.yml
- aid: casdoor:casdoor-organizations-api
  name: Casdoor Organizations API
  description: Multi-tenant organization management
  humanURL: https://casdoor.ai/docs/basic/api
  baseURL: https://door.casdoor.com
  tags:
  - Organizations
  properties:
  - type: OpenAPI
    url: openapi/casdoor-organizations-api-openapi.yml
- aid: casdoor:casdoor-permissions-api
  name: Casdoor Permissions API
  description: Casbin policy enforcement
  humanURL: https://casdoor.ai/docs/basic/api
  baseURL: https://door.casdoor.com
  tags:
  - Permissions
  properties:
  - type: OpenAPI
    url: openapi/casdoor-permissions-api-openapi.yml
- aid: casdoor:casdoor-roles-api
  name: Casdoor Roles API
  description: Role-based access control
  humanURL: https://casdoor.ai/docs/basic/api
  baseURL: https://door.casdoor.com
  tags:
  - Roles
  properties:
  - type: OpenAPI
    url: openapi/casdoor-roles-api-openapi.yml
- aid: casdoor:casdoor-users-api
  name: Casdoor Users API
  description: User CRUD and credential operations
  humanURL: https://casdoor.ai/docs/basic/api
  baseURL: https://door.casdoor.com
  tags:
  - Users
  properties:
  - type: OpenAPI
    url: openapi/casdoor-users-api-openapi.yml
common:
- type: AgenticAccess
  url: agentic-access/casdoor-agentic-access.yml
- type: DomainSecurity
  url: security/casdoor-domain-security.yml
- type: Authentication
  url: authentication/casdoor-authentication.yml
- type: Website
  url: https://casdoor.org
- type: Documentation
  url: https://casdoor.ai/docs/overview
- type: GettingStarted
  url: https://casdoor.ai/docs/basic/server-installation
- type: Authentication
  url: https://casdoor.ai/docs/basic/core-concepts
- type: Swagger
  url: https://door.casdoor.com/swagger/
- type: GitHub
  url: https://github.com/casdoor/casdoor
- type: GitHubOrganization
  url: https://github.com/casdoor
- type: SourceCode
  url: https://github.com/casdoor/casdoor
- type: IssueTracker
  url: https://github.com/casdoor/casdoor/issues
- type: Blog
  url: https://casdoor.org/blog
- type: Community
  url: https://casdoor.ai/docs/community/forum
- type: Discord
  url: https://discord.gg/5rPsrAzK7S
- type: License
  url: https://github.com/casdoor/casdoor/blob/master/LICENSE
- type: DockerHub
  url: https://hub.docker.com/r/casbin/casdoor
- type: Demo
  url: https://door.casdoor.com
- type: PrivacyPolicy
  url: https://casdoor.org/privacy
- type: Pricing
  url: https://casdoor.com/pricing
- name: Features
  type: Features
  data:
  - name: OAuth 2.0 Server
  - name: OIDC Provider
  - name: SAML 2.0 IdP
  - name: CAS Server
  - name: LDAP Server
  - name: SCIM 2.0 Provisioning
  - name: WebAuthn / Passkeys
  - name: TOTP MFA
  - name: Face ID Biometrics
  - name: Social Login
  - name: RBAC
  - name: ABAC
  - name: ACL
  - name: Multi-Tenancy
  - name: Organizations
  - name: Audit Logs
  - name: Webhooks
  - name: Identity Provider Federation
  - name: MCP Gateway
  - name: A2A Protocol
  - name: Self-Hosted
  - name: Apache 2.0 License
- name: UseCases
  type: UseCases
  data:
  - name: Single Sign-On
  - name: Customer Identity (CIAM)
  - name: Workforce Identity
  - name: Passwordless Login
  - name: Multi-Factor Authentication
  - name: Enterprise SSO via SAML
  - name: API Authorization
  - name: Identity Provider for AI Agents
  - name: User Provisioning Automation
  - name: Self-Hosted Auth Server
- name: Integrations
  type: Integrations
  data:
  - name: GitHub
  - name: Google
  - name: Azure AD
  - name: WeChat
  - name: QQ
  - name: MySQL
  - name: PostgreSQL
  - name: SQL Server
  - name: Redis
  - name: Beego
  - name: React
  - name: Casbin
- name: MCP Server
  url: https://github.com/casdoor/public-mcp-server-registry
  type: MCPServer
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com