For the complete documentation index, see llms.txt. Markdown versions of all docs pages are available by appending .md to any docs URL.
Authentication & identity
Integrate agentgateway with identity providers and authentication systems
Agentgateway supports multiple authentication methods and integrates with popular identity providers.
Authentication methods
Agentgateway supports several authentication approaches.
| Method | Use Case | Reference |
|---|---|---|
| JWT validation | API authentication | JWT authentication |
| MCP authentication | OAuth protection for MCP servers | MCP authentication |
| OIDC browser auth | Browser-based user authentication | OIDC browser authentication |
| OAuth2/OIDC (external) | User authentication via proxy | OAuth2 Proxy |
| External authz | Custom auth services | External authorization |
| Tailscale | Zero-trust networks | Tailscale |
Identity providers
Agentgateway includes native MCP authentication providers for the following identity providers. Each provider adapts agentgateway to the OAuth behaviors of that authorization server, such as where it publishes signing keys and whether it supports Dynamic Client Registration.
Keycloak
Protect MCP servers with Keycloak as the authorization server.
OAuth2 Proxy
Add user authentication with GitHub, Google, Azure AD, and other OAuth providers by integrating …
Auth0
Protect MCP servers with Auth0 as the authorization server.
Tailscale
Authenticate users with their Tailscale identity for zero-trust access to your MCP servers.
Descope
Protect MCP servers with Descope as the authorization server.
Okta
Protect MCP servers with Okta as the authorization server.
authentik
Integrate agentgateway with authentik for identity management
Microsoft Entra ID
Protect MCP servers with Microsoft Entra ID (Azure AD) as the authorization server.
