#authentication

mcptunnels

A one-command CLI that exposes a local MCP server to a public URL, so you can test or demo it with ChatGPT, Claude, or Cursor without deploying anything.

Aegis Authenticator

Free, open-source Android app for storing your two-factor authentication codes in an encrypted vault, with no cloud account, no ads, and full control over your own backups.

Pocket ID

A free, open-source, self-hosted login system for your other self-hosted apps, built entirely around passkeys — so nobody has to remember (or leak) a password ever again.

Dash

Self-hosted multi-user homelab dashboard with OAuth2/OIDC sign-in, personal bookmarks and group-based access, MIT licensed.

USBHawk

USBHawk turns a USB drive into a cryptographic hardware key for passwordless Windows login, using local ECDSA P-256 authentication with no cloud dependency.

ONE

ONE is a passkey-first identity platform that lets people verify their age or identity once and reuse that verification across apps, without businesses ever seeing raw personal data.

Magic

A login system for apps that need a crypto wallet behind the scenes — users just sign in with their email or a fingerprint like on any normal app, and Magic quietly creates and manages a real blockchain wallet for them, so nobody has to deal with seed phr

HYPR

A tool that lets employees and customers log in without a password at all — using something like a fingerprint or device unlock instead — which also means there's no password for a phishing email to steal, and no forgotten-password calls for the help desk

Beyond Identity

A login system that replaces passwords with a cryptographic key tied to your actual device, so there's simply nothing for a hacker to steal or guess — and it now also checks whether the person or AI agent on the other end of a video call or API request is

Alter Vault

A middleman service that lets an AI agent safely log into your other tools (Gmail, Slack, your CRM...) without ever handing it your actual passwords or API keys — the agent gets a narrow, temporary, revocable key just for the one task it needs to do, and

Rindler

Turns websites that don't have an API into structured, reliable tools an AI agent can call — handling logins, 2FA and bot detection along the way.

Serial Subscriptions

A backend service that handles the boring-but-critical parts of running a subscription business — logins, Stripe billing, usage limits, upgrades — in one integration, instead of a solo founder stitching together five different services themselves.

Overslash

A middleman that sits between your AI agents and the online services they need to use (GitHub, Slack, AWS, and more), so the agent can act on your behalf without ever seeing your actual passwords or API keys.

Locke

A password manager built around stopping phishing specifically — instead of just storing your passwords, it gives you disposable email addresses and warns you when a site is impersonating a real one.

MonoCloud

Login screens, password resets, and "sign in with Google" buttons are the boring part of every app — MonoCloud is a drop-in service that handles all of it so you don't build your own login system from scratch.

InstantDB

A real-time database with built-in auth, storage and permissions — like a modern, open-source Firebase where data lives on the client and syncs instantly across users and devices.

Zluri

Identity governance platform that discovers, manages and secures every human and non-human identity (including AI agents) across a company's SaaS and cloud apps.

Alloy

Identity and fraud decisioning platform that connects a single API to 270+ data providers, letting banks and fintechs orchestrate KYC/KYB, fraud and transaction monitoring across the whole customer lifecycle.

Persona

Identity verification API for KYC, KYB and fraud checks — document scanning, selfie liveness checks, and no-code workflows to route or auto-approve verifications.

OpenBao

Community-governed, truly open-source secrets manager — a Linux Foundation fork of Vault, born when Vault went source-available.