Infrastructure & DevOps
casdoor
Source: casdoor/casdoor · ★ 13738 · Go
Last updated 2026-06-05 · benchmark measured 2026-10-26 — deterministic & reproducible
An open-source Agent-first Identity and Access Management (IAM) /LLM MCP & agent gateway and auth server with web UI supporting OpenClaw, MCP, OAuth, OIDC, SAML, CAS, LDAP, SCIM, WebAuthn, TOTP, MFA, Face ID, Google Workspace, Azure AD
casdoor at a glance
Casdoor is an open-source identity and access management (IAM) platform that provides authentication, authorization, and AI-agent identity tools for developers and enterprises building applications and AI agents.
Good for
- Adding login and user management to an app using OAuth 2.0, OIDC, SAML, CAS, LDAP, WebAuthn, MFA, or 100+ identity providers
- Letting AI agents (like Claude Desktop, Cursor, Windsurf, or VS Code + GitHub Copilot) authenticate and manage users/permissions through a built-in MCP server
- Recording an audit trail of what AI agents and LLM tool calls actually did at runtime using OpenClaw
- Managing SaaS billing, plans, pricing tiers, and payment providers alongside identity management
Questions people ask
Is casdoor free to use?
Yes, Casdoor is free and open source.
What authentication protocols and providers does casdoor support?
It supports OAuth 2.0, OIDC, SAML, CAS, LDAP, WebAuthn, MFA, and over 100 identity providers, and its architecture also supports custom authentication plugins.
Can AI agents use casdoor to authenticate or manage the system?
Yes, Casdoor includes a built-in MCP server with Streamable HTTP so AI agents can manage users, applications, and permissions in natural language, using OAuth 2.1 with Dynamic Client Registration and per-tool permissions. It works with Claude Desktop, Cursor, Windsurf, VS Code + GitHub Copilot, and any MCP-compatible client.
Can casdoor track what my AI agents are doing?
Yes, the OpenClaw agent collects OpenTelemetry traces, metrics, and logs from LLM applications and pushes them to Casdoor over OTLP, recording every tool call and agent-to-agent interaction as a structured entry viewable in the UI.
Does casdoor handle billing or subscriptions?
Yes, it includes a SaaS management platform for handling plans, pricing tiers, payment providers, products, and subscriptions.
Written by Legit.Show from casdoor.ai on 2026-09-30. It does not change the score.
Are you the maker of casdoor? Claim this listing. It is free, takes a meta tag, a DNS record or GitHub admin rights, and never changes the score.
Launched something? Add your product, free.
To cite this score: legit.show/s/gh-casdoor-casdoor/2026-10-26. That address never changes; this page moves with every re-measure.
Legit.Show scored casdoor 45/100 on 2026-10-26, measured across all 7 frames from its public surface. legit.show/s/gh-casdoor-casdoor/2026-10-26
Is casdoor production-ready?
Legit.Show scores casdoor 45 out of 100 — the simple average of its 7 measured frames. Legit.Show ran its deterministic 7-Frame production-readiness benchmark on casdoor (public-surface assessment), measured from the public surface with no LLM in the scoring path. Its strongest frame is Reliability; its weakest is Privacy. Every frame it averages is published with its evidence on the Legit.Show listing.
The 7 Frames
- Performance — 37/100
- Accessibility — 86/100
- Security — 25/100How this compares across the catalogue: The Web Security Baseline
- Privacy — 0/100How this compares across the catalogue: The Privacy Gap
- Reliability — 92/100
- Standards — 38/100
- Discoverability — 40/100
What we measured
- No Content-Security-Policy and no HSTS.
- Served over HTTPS with a valid certificate.
- Real Lighthouse performance run — 330 ms to first byte.
- Returns a proper 404 for unknown routes.
- 0 of 0 sampled routes reachable.
- No privacy policy found.
- Sets cookies / loads scripts with no consent prompt.
- Discoverable: structured data, sitemap.
Sources and updates
- Description
- Taken from casdoor.ai's own website on 2026-06-05.
- Operator
- Casdoor contributors, as named in casdoor.ai's terms, privacy page or footer.
- Code
- github.com/casdoor/casdoor.
- Benchmark
- Measured by Legit.Show from the live site, the way any visitor sees it — with no access to its code or accounts. Same method for every product, and no AI decides the score. Last checked 2026-10-26.
Put together from public information, without casdoor's involvement. If anything here is wrong, tell us and a person will check it.
Visit casdoor → · Alternatives to casdoor → · How this was measured →