# Casdoor

**Canonical:** https://apis.io/providers/casdoor/  
**Website:** https://casdoor.org  
**APIs profiled:** 15

Casdoor is an open-source, AI-first identity and access management (IAM) and MCP gateway authentication server with a web UI. Built in Go (Beego) with a React frontend, Casdoor supports OAuth 2.0, OIDC, SAML 2.0, CAS, LDAP, Kerberos/SPNEGO, WebAuthn / Passkeys, TOTP / MFA, SCIM 2.0 provisioning, social login, multi-tenant organizations, role-based access control, and an MCP Gateway plus A2A Protocol for agent-to-agent communication. The platform exposes a RESTful API documented via Swagger and ships SDKs for Go, Java, Python, Node.js, C#, C++, PHP, Ruby, JavaScript, Lua, and Haskell. Released under the Apache License 2.0.

## Kin Score — 35.0 / 100 (thin)

Scored 2026-08-20 under rubric 0.12.0. Trend: flat (+0.0 from 35.0).

| Facet | Score |
|---|---|
| Discoverability | 64.8 |
| Contract Quality | 51.7 |
| Governance | 0.0 |
| Contract Governance | 0.0 |
| Operational Transparency | 36.8 |
| Developer Ergonomics | 38.1 |
| Commercial Clarity | 15.8 |
| Access Clarity | 15.8 |

## Agent readiness — 33.2 (agent-aware)

| Dimension | Value |
|---|---|
| Spec Presence | yes |
| Agentic Access | derived |
| Reversibility Documented | no |
| MCP Server | documented |
| Auth Clarity | yes |
| Idempotency | no |
| Error Semantics | no |
| OpenAPI Examples | no |
| Rate Limit Signal | documented |
| Event Surface Described | no |
| Agent Skills | no |
| Well Known Catalog | no |
| Consent Identity | no |
| Agent Card | no |
| Dry Run Mode | no |

## Access

Freemium · Self-serve signup — onboarding: self-serve, pricing: freemium, trial: no (confidence: high).

## APIs (15)

- **Casdoor REST API** — The Casdoor REST API provides programmatic access to the IAM platform's core resources including users, organizations, applications, roles, groups, permissions, identity provide...
- **Casdoor OAuth 2.0 / OIDC Provider** — Casdoor implements an OAuth 2.0 authorization server and OpenID Connect identity provider, exposing the standard authorization, token, userinfo, revocation, introspection, JWKS,...
- **Casdoor SAML 2.0 Identity Provider** — SAML 2.0 identity provider endpoints in Casdoor that issue SAML assertions to enterprise service providers, supporting SSO scenarios for legacy and enterprise SaaS applications ...
- **Casdoor CAS Server** — Casdoor exposes a CAS (Central Authentication Service) server compatible with CAS protocol versions 1.0, 2.0, and 3.0, providing single sign-on to applications that integrate vi...
- **Casdoor LDAP Server** — Casdoor provides an LDAP server interface so that legacy applications and infrastructure components requiring LDAP authentication can bind against Casdoor users and groups, and ...
- **Casdoor SCIM 2.0 API** — SCIM 2.0 (System for Cross-domain Identity Management) endpoints for automated user and group provisioning between Casdoor and downstream identity-aware systems.
- **Casdoor MCP Gateway** — Casdoor's MCP (Model Context Protocol) gateway and A2A (Agent-to-Agent) protocol surface, designed to broker authentication and authorization for AI agents and MCP-aware tooling...
- **Casdoor Webhooks** — Outbound webhook events that notify external systems of identity events such as user signup, login, logout, profile changes, password resets, and MFA enrollments.
- **Casdoor Applications API** — OAuth/OIDC client applications
- **Casdoor Authentication API** — Login, callback, and device authorization
- **Casdoor OIDC API** — OpenID Connect discovery and JWKS endpoints
- **Casdoor Organizations API** — Multi-tenant organization management
- **Casdoor Permissions API** — Casbin policy enforcement
- **Casdoor Roles API** — Role-based access control
- **Casdoor Users API** — User CRUD and credential operations

## MCP servers (1)

- **MCP Server**

## Agentic access (1)

- **Casdoor Agentic Access** — 24 operations · 13 acting

## Security (2)

- **Casdoor Authentication** — http · 2 schemes
- **Casdoor Domain Security** — TLSv1.3 · HSTS · DNSSEC

## Plans (1)

- **Casdoor Plans Pricing**

## Use cases (10)

- **Single Sign-On**
- **Customer Identity (CIAM)**
- **Workforce Identity**
- **Passwordless Login**
- **Multi-Factor Authentication**
- **Enterprise SSO via SAML**
- **API Authorization**
- **Identity Provider for AI Agents**
- **User Provisioning Automation**
- **Self-Hosted Auth Server**

## Tags

Authentication, Authorization, IAM, Identity, LDAP, MCP, MFA, OIDC, Open-Source, Passkeys, SAML, SCIM, Single Sign-On, SSO, WebAuthn

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/providers/casdoor/). Scores are computed from the provider's own public artifacts under a published rubric.