Authorizer is an open-source, self-hosted identity platform for authentication, authorization, SSO, SCIM, MFA, passkeys, and permission-aware AI workflows.
Authorizer is an open-source, self-hosted authentication and authorization platform for teams that want to run identity in their own infrastructure. The homepage positions it as a way to keep user records in your own database while handling login, access control, and related identity workflows in one service.
The product combines OAuth2 and OpenID Connect with SAML SSO, SCIM provisioning, MFA, passkeys, embedded OpenFGA-style fine-grained authorization, and permission-aware AI/RAG access control. It is presented as cloud-native software that can run in Docker, Kubernetes, Helm, and several managed deployment environments.
Provides authentication and session management with secure HTTP-only cookies, OAuth 2.0 authorization code flow, PKCE, JWT support, and multiple auth recipes such as social login, email and password, and magic link.
Supports role-based access control and relationship-based fine-grained authorization through an embedded OpenFGA engine, with check_permissions and list_permissions available in-process.
Includes multi-factor authentication and passkeys, with TOTP, email and SMS one-time codes, WebAuthn passkeys, and admin recovery options.
Offers enterprise identity features including per-organization SAML 2.0 and OIDC SSO, home-realm discovery, organization memberships, and SCIM 2.0 provisioning for users and groups.
Exposes GraphQL, REST, and gRPC APIs with SDKs for Go, Python, JavaScript, React, Vue, and Svelte, plus a built-in MCP server for AI agents and local tools.
Can be deployed with Docker, Kubernetes, Helm, and cloud platforms such as Railway, Heroku, and Render, and supports 13+ databases including SQL, NoSQL, and graph databases.
Add login, session handling, and account recovery to a web app while keeping identity data in your own infrastructure.
Support enterprise customers that need SAML or OIDC single sign-on, organization-scoped access, and SCIM-based user and group provisioning.
Enforce role-based and relationship-based permissions in products where access depends on both roles and object relationships.
Build AI assistants or RAG systems that filter retrieval by the user’s access rights before the model reads source data.
Run identity services in a cloud-native self-hosted setup using Docker or Kubernetes while exposing APIs and SDKs to multiple application layers.
The site presents Authorizer as an open-source, self-hosted auth platform that covers authentication, fine-grained authorization, and permission-aware AI. It includes OAuth2 and OIDC, SAML SSO, SCIM, passkeys, MFA, and an embedded OpenFGA engine.
The homepage says Authorizer can be deployed in Docker, Kubernetes, Helm, Railway, Heroku, and Render, with examples showing a Docker-based local setup. The product is positioned as something you run yourself on your own cloud or VPC.
The source describes open-source auth and says the product is Apache-2.0 licensed. The pricing page was not available, so no pricing model or paid plan details are confirmed beyond the self-hosted/open-source positioning.
The homepage mentions SDKs for Go, JavaScript/TypeScript, React, Python pre-release, and Vue and Svelte in beta, plus GraphQL, REST, and gRPC APIs. It also says there is a built-in universal login page and a React component for embedding login in apps.
Authorizer is shown with support for social login, email and password, magic link, roles and RBAC, relationship-based fine-grained authorization, multi-factor authentication, passkeys, enterprise SSO, organizations, SCIM provisioning, machine-to-machine auth, and permission-aware AI/RAG workflows.
ByteAsk is a terminal-first AI coding agent for C and C++ that edits repos and verifies changes with compilers, debuggers, sanitizers, and tests.
CreateOS Sandbox is an isolated compute environment for running code and agent workloads in Firecracker micro-VMs with private networking and SDK, CLI, or MCP control.
hob is an independent workspace for coding agents, with local control over sessions, terminals, history, routing, and follow-up work.
Ably Chat is a chat API platform for custom realtime chat apps, with rooms, typing indicators, presence, reactions, message updates and usage-based pricing.
MacSpoof is a macOS MAC address changer that lets you change or randomize your Wi‑Fi MAC to reconnect and limit device logging on public Wi‑Fi.
Manta AI is an autonomous web app testing tool that maps app behavior, catches regressions, and generates tests from a URL, no scripts or selectors needed.
