Packages

A Role Based Access Control (RBAC) library

An Actix Web middleware for authenticating HTTP requests through a remote API. It validates Authorization headers or cookies and attaches user info to requests.

ProcMacro used by Reqt

Library with generic authorization routines.

Authorized struct's fields

Merge two authorized_keys files and write to stdout

Derive for authorized crate

Parse and manipulate OpenSSH `authorized_keys` files

CLI tool for authorizer

Print and format authors from ["name <email>"] lists

Scriptable network authentication cracker

Authentication and authorization gateway for web APIs. Validates credentials from multiple providers, enriches users with roles, and issues signed JWTs.

Shared authentication DTOs for the auth-o-tron ecosystem.

The Authress SDK for RUST - provides authorization as a service with fully compatible REST apis. Authentication / Authorization / User Identity Roles / Permissions / Policies

Passwordless auth service

A comprehensive authentication library for Rust

Framework-agnostic authentication and authorization for Rust, built on http + tower

Decentralized identity for developers — cryptographic commit signing with Git-native storage

Auths Witness Network protocol core: spend-anchor acceptance, duplicity proofs, threshold finalization, and freshness

Auths organization control-plane API server binary

Command-line interface for Auths decentralized identity system

Core cryptography and keychain integration for Auths

Cryptographic primitives for Auths: KERI key parsing and DID:key encoding

The single trust implementation behind Auths evidence bundles: spend re-derivation, chain resolution, anchored per-call/per-log verdicts, and offline-verifiable EvidenceBundle build + verify. Shared by the gateway CLI, the first-party tool servers, and every language binding.

Multi-device identity and attestation crate for Auths

SQLite-backed index for O(1) attestation lookups

Git client adapter for Auths - enables communication with Auths services over Git

HTTP client adapter for Auths - enables communication with Auths services over HTTP

Rekor transparency log adapter for Auths

Shared JWT claim types for the Auths identity system

KERI protocol types, SAID computation, and validation

Reusable per-tool-call enforcement for the bounded-agent MCP gateway: scope ⊆ parent, quantitative budget, expiry, revocation, plus signed per-call receipts. Harvested from the auths-mcp-server KERI-presentation core.

The bounded-agent MCP gateway: a real-MCP (rmcp) proxy that brokers each tools/call through auths-mcp-core's per-call gate, forwarding only on pass and emitting a signed receipt. Carries the `wrap` subcommand.

Reference MCP tool server with Auths-backed JWT and KERI-presentation authorization

OIDC port abstractions for Auths identity system

Embeddable LAN pairing daemon for Auths - HTTP server, rate limiting, mDNS discovery

Transport-agnostic pairing protocol for auths identity system

Policy expression engine for Auths - composable authorization logic

Portfolio 1 — accountability & dispute: the receipts/dispute-evidence MCP server, the non-custodial escrow MCP server, and the enterprise retainer HTTP API, all over the auths-evidence trust core.

Auths relying-party transport: agent-passport request authentication

SCIM 2.0 resource types and protocol logic for Auths agent provisioning

SCIM 2.0 provisioning server for Auths — directory lifecycle wired to KERI identity

Application services layer for Auths identity operations

Storage backends for Auths identity system — Git and SQL adapters

Telemetry and metrics for Auths components.

Append-only transparency log types, Merkle math, and tile storage for Auths

Internal shared utilities for the Auths workspace

Minimal-dependency attestation verification library for Auths - supports FFI and WASM

Slim, hardened KERI rct-witness server binary over the shared auths-core witness library

Operator orchestration for running a hardened witness node: embedded standup manifest, key custody policy, and the node's health surface — composes the platform witness/KERI/verifier crates, reimplements no protocol