The control plane for agentic AI.
Authentication, credential management, and governance for AI agents — self-hosted, cloud-hosted, or hybrid. Your infrastructure, your rules.
What's missing from agent infrastructure.
No Agent Identity
Agents share static API keys. There's no way to know which agent did what, no way to scope access per-agent, and no way to revoke one without breaking all of them.
Credentials Are Unmanaged
Tokens scattered across env files and config maps. Can't rotate without downtime. Can't audit who has access. Every leaked secret is a full compromise.
Regulated Industries Are Locked Out
Banks, hospitals, and defense contractors cannot route agent authorization through cloud services they don't control. Their only option today: don't deploy agents at all.
AuthPlane. The authorization server for MCP.
Open source under AGPL-3.0. One Go binary that deploys anywhere — from your laptop to a Kubernetes cluster. Implements the complete MCP authorization specification (2025-11-25), including full OAuth 2.1.
From solo developer to regulated enterprise.
Solo Developer
Local SQLite. Zero setup. Full OAuth 2.1 in 5 minutes. No cloud account, no subscription.
docker run -p 8080:8080 authplane/authserver Platform Team
PostgreSQL HA. OIDC federation to your IdP. Token Vault manages GitHub, Slack, Linear credentials per-user.
placeholder Regulated Enterprise
Air-gapped. Vault Transit encryption. Unified audit trail. The only self-hosted MCP control plane for finance, healthcare, and defense.
placeholder Where AuthPlane sits in your architecture.
One self-hosted control plane
for MCP authorization.
AGPL-3.0 open source.
EE & Cloud options.
The control plane for agentic AI.
Like Twilio for communications. Like Stripe for payments. AuthPlane for agents.
Authenticate
Standards-based auth flows for every agent interaction. Full OAuth 2.1 with PKCE, dynamic client registration, and token exchange built in.
Manage Credentials
Encrypted token vault stores upstream credentials per-user, per-agent. Rotate, scope, and revoke without touching a single env file.
Prove Identity
Cryptographic proof binds tokens to the agent that requested them. DPoP prevents token theft and replay attacks at the protocol level.
Govern
Unified audit trail across every agent, every tool call, every credential. Know who accessed what, when, and why — before compliance asks.
Deep dives & war stories.
OAuth 2.1 + PKCE Is the Only Right Way to Secure MCP
The MCP authorization spec mandates OAuth 2.1 with mandatory PKCE for a reason. Here's exactly why every alternative falls apart.
Read article →What We Saw When Teams Shipped MCP Without Auth
Four real attack patterns we observed in unprotected MCP deployments: token replay, log scraping, scope escalation, and zero audit trail.
Read article →Reading RFC 9728 So You Don't Have To
Protected Resource Metadata is the mechanism MCP agents use to discover authorization servers. Full walkthrough of the spec.
Read article →Take control of Agentic AI.
Deploy AuthPlane in 5 minutes. Self-hosted. Open source. No credit card required.