01 · ABOUT

What ZITADEL does

Open-source identity and access management platform for SaaS and B2B applications, providing SSO, MFA, passkeys, OIDC, SAML, SCIM, and multi-tenancy with self-hosted and SaaS deployment options.

Why teams reach for it: ZITADEL is an open-source identity and access management platform built for teams that need more than basic auth.

Worth knowing

Postman Collection is in beta

HybridOpen SourceGoTypeScriptMDXJavaScriptPLpgSQLMCP Server & Client
02 · TECHNICAL SPECIFICATIONS

How ZITADEL compares

Fields the vendor doesn't document are left blank here rather than guessed — a blank means nothing verified, not a "no."

Oauth Version
OAuth 2.0
Client Registration
DCR only
Resource Indicators (RFC 8707)
No
Protected Resource Metadata (RFC 9728)
No
Authorization Server Metadata (RFC 8414)
No
Pkce
Required
Token Exchange (RFC 8693)
Yes
Agent Delegation
Carried in token
Idp Federation
Entra ID, Google
Upstream Token Vault
No
Self Hostable
Yes
Audit Log
Yes
03 · NEW TO MCP?
Who can connect, and what may they do?

Authorization & identity tools control who — or which AI agent — is allowed to connect, and what they're allowed to do once connected.