Open-source authorization infrastructure

Access decisions,
without the guesswork.

Authometry is a self-hosted OAuth and OpenID Connect control plane that makes every authorization decision visible, reviewable, and yours.

Start building Explore the dashboard

Built for teams that own their trust boundary.
Standards-first. No black-box decisions.

Authorization tracereq_a72b9c

DecisionRequest denied

12 ms

Client credentialsconfidential client

2 ms

Redirect URIexact match

1 ms

PKCE challengeS256 verified

3 ms

Workspace policyadmin:write not assigned

6 ms

How to fix it

Assign admin:write to this workspace, or remove it from the request.

Live decision path

Built on the standards your stack already speaks

OAuth 2.0 OpenID Connect S256 PKCE DPoP

One control plane

Authorization should explain itself.

Configure the system, watch it decide, and know exactly what to change—without stitching together another maze of tools.

Observe

See why access was granted.

Follow every client check, redirect match, policy rule, consent step, and token claim in one ordered trace.

Redacted by default

Control

Review authorization like code.

Define applications, scopes, claims, and policies in manifests. Preview every change before it reaches production.

Plan before apply

Delegate

Give agents less, on purpose.

Issue short-lived, sender-constrained grants to registered agents without handing over a user’s full authority.

Actor-aware tokens

From request to reason

One path. Every answer.

Authometry keeps the protocol, policy, and evidence together. The same path that issues a token also produces the trace your team can inspect.

Exact redirect matching and PKCE
Central session and refresh-token lifecycle
Redacted audit evidence for every decision

Explore OAuth & OIDC

Identityverified

claims

Policyevaluated

decision

Tokenissued

Trace recorded 12 ms

Agent authorization

Delegate the task.
Keep the authority.

Register agent identities, reduce human grants to exactly what the task needs, and bind access to the agent that requested it.

Add Authometry OAuth to my app: https://authometry.ch3n.cc/SKILL.md

Read the agent authorization guide

Delegated grantRelease assistant

Active

ACTORJiayang

DELEGATERelease agent

Granted scopes2 of 3

deployments:read

deployments:create

secrets:write

Reduced by policyExpires in 18 minutes

Your trust boundary

Own the decision.
Understand the outcome.

Deploy Authometry, register your first application, and follow an authorization request from start to finish.

Get started View on GitHub

Open-source authorization infrastructure

Access decisions,
without the guesswork.

Authometry is a self-hosted OAuth and OpenID Connect control plane that makes every authorization decision visible, reviewable, and yours.

Start building Explore the dashboard

Built for teams that own their trust boundary.
Standards-first. No black-box decisions.

Authorization tracereq_a72b9c

DecisionRequest denied

12 ms

Client credentialsconfidential client

2 ms

Redirect URIexact match

1 ms

PKCE challengeS256 verified

3 ms

Workspace policyadmin:write not assigned

6 ms

How to fix it

Assign admin:write to this workspace, or remove it from the request.

Live decision path

Built on the standards your stack already speaks

OAuth 2.0 OpenID Connect S256 PKCE DPoP

One control plane

Authorization should explain itself.

Configure the system, watch it decide, and know exactly what to change—without stitching together another maze of tools.

Observe

See why access was granted.

Follow every client check, redirect match, policy rule, consent step, and token claim in one ordered trace.

Redacted by default

Control

Review authorization like code.

Define applications, scopes, claims, and policies in manifests. Preview every change before it reaches production.

Plan before apply

Delegate

Give agents less, on purpose.

Issue short-lived, sender-constrained grants to registered agents without handing over a user’s full authority.

Actor-aware tokens

From request to reason

One path. Every answer.

Authometry keeps the protocol, policy, and evidence together. The same path that issues a token also produces the trace your team can inspect.

Exact redirect matching and PKCE
Central session and refresh-token lifecycle
Redacted audit evidence for every decision

Explore OAuth & OIDC

Identityverified

claims

Policyevaluated

decision

Tokenissued

Trace recorded 12 ms

Agent authorization

Delegate the task.
Keep the authority.

Register agent identities, reduce human grants to exactly what the task needs, and bind access to the agent that requested it.

Add Authometry OAuth to my app: https://authometry.ch3n.cc/SKILL.md

Read the agent authorization guide

Delegated grantRelease assistant

Active

ACTORJiayang

DELEGATERelease agent

Granted scopes2 of 3

deployments:read

deployments:create

secrets:write

Reduced by policyExpires in 18 minutes

Your trust boundary

Own the decision.
Understand the outcome.

Deploy Authometry, register your first application, and follow an authorization request from start to finish.

Get started View on GitHub

Access decisions,without the guesswork.

Authorization should explain itself.

See why access was granted.

Review authorization like code.

Give agents less, on purpose.

One path. Every answer.

Delegate the task.Keep the authority.

Own the decision.Understand the outcome.

Access decisions,without the guesswork.

Authorization should explain itself.

See why access was granted.

Review authorization like code.

Give agents less, on purpose.

One path. Every answer.

Delegate the task.Keep the authority.

Own the decision.Understand the outcome.

Access decisions,
without the guesswork.

Delegate the task.
Keep the authority.

Own the decision.
Understand the outcome.

Access decisions,
without the guesswork.

Delegate the task.
Keep the authority.

Own the decision.
Understand the outcome.