01
delegation Delegation without a paper trail
One agent acts for another on a user's behalf. Without delegation built into the token itself, you lose track of who authorized what, and your audit log can't prove it after the fact.
Open source · For the Model Context Protocol
Production-grade MCP auth in 10 minutes
AuthPlane is an open-source OAuth 2.1 authorization server built for the Model Context Protocol, MCP, one Go binary, deployed on your own infrastructure
Spec-compliant.·Self-hosted.·Self-contained.
click — one binary, six parts
The problem
Agentic workflows span services in ways a single login never anticipated
An agent calls a tool, that tool calls another agent, and three hops later, the token has to prove who authorized it, most auth stacks were never built for that kind of chain
02
critical-path SaaS auth sitting in your critical path
You already use Okta, Entra ID, Google Workspace, or Auth0. If your MCP auth runs through someone else's cloud anyway, every token request depends on their uptime, their rate limits, and their pricing. Your identity data and upstream secrets leave your perimeter the moment that auth runs in their cloud.
03
seams Stitched-together libraries that break at the seams
Audience binding, scope enforcement, refresh rotation, DPoP, discovery: each one has to be exact, or your resource servers fail closed and you're debugging a 401 with no clear cause.
Solution
AuthPlane, the authorization server for MCP
Open source under AGPL-3.0, one Go binary that deploys anywhere from your laptop to a Kubernetes cluster, implements the complete MCP authorization specification (2025-11-25), including full OAuth 2.1
AI Agents
Claude
Cursor
VS Code
AuthPlane Auth Server
OAuth 2.1 DPoP PKCE
Validating tokens
MCP Servers
GitHub Protected
Linear Protected
Slack Protected
Under the hood
Where AuthPlane sits in your architecture
Layer: CLIENT Claude, Cursor, VS Code, Custom Agents
AUTHPLANE
One self-hosted control plane for MCP authorization. AGPL-3.0 open source. EE & Cloud on the roadmap.
Auth Server
OAuth 2.1 · JWT + JWKS · DPoP · Audit
OSS
Token Vault
Upstream credentials · Encrypted at rest · RFC 8693 vending
Built in
Identity & Federation
OIDC IdPs · XAA / ID-JAG · Agent identity chains
Built in Layer: MCP SERVERS AWS, GCP, GitHub, Salesforce, Slack, Jira, ServiceNow
Quickstart
From zero to running in three steps
No account required
STEP 01
Run the binary
One docker run brings up the OAuth endpoints and Admin UI.
$docker run -p 9000:9000 -p 9001:9001 \
-e AUTHPLANE_ADMIN_API_KEY=$(openssl rand -hex 32) \
-e AUTHPLANE_SESSION_SECRET=$(openssl rand -hex 32) \
-e AUTHPLANE_DPOP_ENABLED=true \
-v authserver-data:/data \
authplane/authserver:latest serve
✓ OAuth :9000 · Admin :9001/admin/ui/
STEP 02
Run your MCP server
Install the SDK and start your server with auth wired.
$pip install authplane-mcp
$python server.py
INFO: Uvicorn running on :8080
✓ MCP server live · bearer auth wired
# TypeScript and Go in the docs
STEP 03
Ship it
Move to PostgreSQL and deploy with Helm.
$helm install authplane \
oci://ghcr.io/authplane/charts/authplane \
--version 0.1.0 \
-f values-production.yaml
# values-production.yaml sets: issuer, secrets, postgres password
NAME: authplane · STATUS: deployed
✓ Postgres wired · secrets stored in Kubernetes
Who deploys AuthPlane
From solo developer to regulated enterprise
Solo Developer
Local SQLite. Zero setup. Full OAuth 2.1 in 10 minutes. No cloud account, no subscription.
$ docker run -p 9000:9000 -p 9001:9001 \
-e AUTHPLANE_ADMIN_API_KEY=$(openssl rand -hex 32) \
-e AUTHPLANE_SESSION_SECRET=$(openssl rand -hex 32) \
-e AUTHPLANE_DPOP_ENABLED=true \
-v authserver-data:/data \
authplane/authserver:latest serve
Platform Team
PostgreSQL HA. OIDC federation to your IdP. Token Vault manages GitHub, Slack, Linear credentials per-user.
View pricing →Regulated Enterprise
Air-gapped. Vault Transit encryption. Unified audit trail. A self-hosted MCP control plane for finance, healthcare, and defense.
Schedule a call →FAQ
Questions teams ask before they deploy
AuthPlane is an open-source, self-hosted OAuth 2.1 authorization server purpose-built for MCP servers. It handles token issuance, refresh, revocation, federation to your IdP, and agent delegation, deployed as a single Go binary on your own infrastructure.
Per the MCP Authorization spec, agents authenticate with OAuth 2.1 and mandatory PKCE, using short-lived, audience-bound tokens rather than static API keys. AuthPlane issues those tokens, carries agent identity and the delegation chain in each one, and lets your MCP server validate them locally against its JWKS via our SDKs.
No. It federates to Google Workspace, Okta, Entra ID, Auth0, or any OIDC-compliant provider. You keep your IdP for authenticating humans, and AuthPlane handles agent identity and token issuance.
You can, but every token then depends on their uptime, rate limits, and pricing, and your identity data and upstream secrets leave your perimeter. AuthPlane gives you the same spec-compliant issuance without putting a vendor on your critical path, making it viable for regulated and air-gapped environments.
Keycloak is a general-purpose identity provider built primarily for human SSO, and, according to its own compliance table, it only partially supports the two latest MCP Authorization spec versions: it doesn't implement Resource Indicators (RFC 8707), the mechanism MCP requires to bind a token to a specific server's audience. Its token exchange (RFC 8693) also covers impersonation, but not the delegation semantics a multi-agent chain needs to prove who authorized what. AuthPlane is purpose-built for MCP and agent delegation and ships as a single Go binary rather than a general-purpose IdP retrofitted for agents.
One docker run brings up the OAuth 2.1 endpoints and the Admin UI. Most teams have a runnable example registered within ten minutes.
Yes. Every release is validated against Claude Desktop and MCP Inspector.
Latest updates
What's new in AuthPlane
Recent releases and posts, freshest first, full changelog and blog linked below
AuthPlane vs Auth0: Self-Hosted MCP Auth vs the Managed Incumbent
Auth0's Auth for MCP reached GA in May 2026. AuthPlane is the self-hosted, open-source alternative. A fair comparison on hosting, agent identity, and data residency.
Read the postYour MCP server needs an authorization layer.
This is it
free · open source · one docker run