What Ory Hydra does
OpenID-certified OAuth 2.0 server that delegates user authentication to your application
Why teams reach for it: Provides a standards-certified token issuer for teams that want to keep their own login experience and user store.
Worth knowing
Not MCP-specific. Ory also offers a hosted network edition.
How Ory Hydra compares
Fields the vendor doesn't document are left blank here rather than guessed — a blank means nothing verified, not a "no."
- Oauth Version
- OAuth 2.1
- Client Registration
- CIMD and DCR
- Resource Indicators (RFC 8707)
- No
- Protected Resource Metadata (RFC 9728)
- No
- Authorization Server Metadata (RFC 8414)
- Yes
- Pkce
- Supported
- Token Exchange (RFC 8693)
- Yes
- Agent Delegation
- Carried in token
- Idp Federation
- any existing identity provider
- Upstream Token Vault
- No
- Self Hostable
- Yes
- Audit Log
- No
Who can connect, and what may they do?
Authorization & identity tools control who — or which AI agent — is allowed to connect, and what they're allowed to do once connected.