Update Protect your MCP Server with Pocket ID in just a few minutes.
GitHub

Pocket ID

The most user-friendly OpenID Connect Certified™ and OAuth 2.0 provider that lets users sign in to your applications with passkeys.

13.4k+
Active Instances
13.1m
Docker Pulls
9k
GitHub Stars
100
Contributors
OIDC Certified Badge

Loved by the community

What self-hosters are saying about Pocket ID

Built for more than login

Secure AI tools, your homelab, and custom applications with one simple identity provider.

AI agents and MCP servers

Use Pocket ID as the OAuth provider for AI applications and remote MCP servers. Users approve access with their passkey, while scoped tokens limit which tools and data each client can reach.

One login for your homelab

Connect dashboards, media servers, admin tools, and everything else you self-host to one passwordless sign-in. Use groups to decide who can access each service.

Protect applications and APIs

Add passkey sign-in to OIDC applications and issue scoped access tokens for your own APIs. Each token is limited to the intended API and allowed actions.

Key Features

Everything you need for modern authentication in one simple package

Passwordless Authentication

Pocket ID only supports passwordless authentication, which is easier and more secure than signing in with a password.

Passwordless Authentication

Group-based Access Control

Choose which user groups may access each application so only authorized users can sign in.

Group-based Access Control

LDAP Integration

Sync your users and groups from your LDAP server to Pocket ID.

LDAP Integration

REST API

Use the documented administrative API to build integrations, automate user management, and manage Pocket ID programmatically.

REST API

API Resource Indicators

Request access tokens for a specific API with the OAuth 2.0 resource parameter and grant only the scopes that API exposes.

API Resource Indicators
Sign in from another device

Scan a QR code and approve the request on another device that has your passkey.

25 Languages

The community has translated Pocket ID into over 10 languages. More translations are always welcome!

SCIM Provisioning

Automatically provision and deprovision users and groups in connected applications.

Audit Logs

Comprehensive audit logs for important events, both global and per user.

Metadata-based OAuth Clients

Connect compatible clients through a hosted metadata document instead of registering and maintaining each client manually.

Self-Hosted

Complete control over your authentication infrastructure with self-hosting.

Ready to get started?

Deploy Pocket ID today and start providing secure, passwordless authentication to your users.