Skip to content
Authometry Dashboard

Start

Getting startedApplications

OAuth and OIDC

Authorization Code with PKCERedirect URI matchingToken endpointDevice Authorization

Operate

MCP serverConfiguration as codeAccount provisioningWebhook verificationErrors and traces

Operate

Configuration as code

Validate, review, and atomically apply authometry.dev/v1alpha1 manifests.

Use the review loop

Validate stays local. Plan and diff compare normalized manifests with the selected environment. Apply resolves secret references locally and commits the complete plan in one database transaction under an advisory lock.

authometry validate
authometry plan --server https://authometry.ch3n.cc --token $AUTHOMETRY_TOKEN
authometry diff --server https://authometry.ch3n.cc --token $AUTHOMETRY_TOKEN
authometry apply --server https://authometry.ch3n.cc --token $AUTHOMETRY_TOKEN
authometry status --server https://authometry.ch3n.cc --token $AUTHOMETRY_TOKEN

Manage five resource kinds

  • AuthometryInstance sets issuer and environment-wide protocol defaults.
  • Application declares the client, URLs, grants, scopes, security settings, token lifetimes, and optional secret reference.
  • Scope declares a consent-visible permission and sensitivity.
  • Policy assigns all-match authorization conditions to applications.
  • ClaimMapping copies approved user fields into tokens or UserInfo without replacing reserved claims.

Treat deletion as explicit

A remote managed resource that is absent from the desired directory appears as a delete operation. Review plans before apply and protect non-interactive production applies with branch and environment approvals.

Manifest-owned fields are read-only in the dashboard. Export dashboard resources before moving their ownership into Git.

ON THIS PAGE

Use the review loopManage five resource kindsTreat deletion as explicit