All repos — GH Trending Explorer

AI Agent Identity and Access Management and Inference Firewall

Faceplugin-ltd / Open-Source-Face-Recognition-SDK

Face Recognition, Face Liveness Detection, Face Anti-Spoofing, Face Detection, Face Landmarks, Face Compare, Face Matching, Face Pose, Face Expression, Face Attributes, Face Templates Extraction, Face Landmarks

google-labs-code / design.md

A format specification for describing a visual identity to coding agents. DESIGN.md gives agents a persistent, structured understanding of a design system.

logto-io / logto

🧑‍🚀 Authentication and authorization infrastructure for SaaS and AI apps, built on OIDC and OAuth 2.1 with multi-tenancy, SSO, and RBAC.

netbirdio / netbird

NetBird securely connects people, machines and AI agents across any network with one identity-based Zero Trust platform. Powered by peer-to-peer WireGuard®

casdoor / casdoor

An open-source Agent-first Identity and Access Management (IAM) /LLM MCP & agent gateway and auth server with web UI supporting OpenClaw, MCP, OAuth, OIDC, SAML, CAS, LDAP, SCIM, WebAuthn, TOTP, MFA, Face ID, Google Workspace, Azure AD

chuhe0719 / QuickJump

Android Kotlin utility. Use Android explicit Intent to launch internal Activity of Taobao, Cainiao and Pinduoduo. One-click to open parcel identity code page. NO URL Scheme. Demo: Douyin ID:29910020595

elementalsouls / Claude-BugHunter

A Claude Code skill bundle for bug hunting and external red-team work - 82 skills, 15 slash commands, 681 disclosed-report patterns curated across 24 core vulnerability classes, plus enterprise identity + infrastructure attack matrices.

letta-ai / letta-code

Stateful agents that are like people, with memory, identity, and the ability to learn and adapt

Inkloom-art / inkloom

Specialised AI models for logo design — a brand-analysis model turns a business into constraints, typography and symbol models construct the mark, and a composition engine produces real lockups and clear-space rules. Early access open.

zitadel / zitadel

ZITADEL - Identity infrastructure, simplified for you.

KatrielMoses / MailAccess

Free email OSINT tool, 5000+ platforms, identity clustering, breach detection. No API keys required. pip install mailaccess

keycloak / keycloak

Open Source Identity and Access Management For Modern Applications and Services

kdeldycke / awesome-falsehood

😱 Falsehoods Programmers Believe in

mvanhorn / cli-printing-press

Every API has a secret identity. This finds it, absorbs every feature from every competing tool, then builds the GOAT CLI — designed for AI agents first, with SQLite sync, offline search, and compound insight commands.

dromara / MaxKey

Dromara MaxKey 🗝️ SSO ,Leading-Edge IAM-IDaas(Identity and Access Management) Product , Under Apache-2.0 is free ，业界领先的IAM-IDaas身份管理和认证产品，遵循Apache-2.0开源免费，支持OAuth2.x、OpenID Connect、SAML2.0、CAS、JWT、SCIM等SSO标准协议，基于RBAC统一权限控制，实现用户生命周期管理，开源、安全、合规、自主可控。

DEEIX-AI / DEEIX-Chat

An enterprise AI workspace for model routing, multimodal chat, files, tools, billing, identity, and operations.

Dataojitori / nocturne_memory

A lightweight, rollbackable, and visual Long-Term Memory Server for MCP Agents. Say goodbye to Vector RAG and amnesia. Empower your AI with persistent, graph-like structured memory across any model, session, or tool. Drop-in replacement for OpenClaw.

open-gitagent / gitagent

A universal git-native AI agent framework. Your agent lives inside a git repo — identity, rules, memory, tools, and skills are all version-controlled files.

fatihaydost / brand-identity-skill

A Claude Code skill that designs a brand identity as one system: logo, typography and colour palette built together from one brief, measured, compared as identity cards, and delivered as a brand guidelines kit.

issuerd / issuerd

Fast, Keycloak-compatible IAM with DPoP and CIBA

OpenLlamas / model-xray

Model authenticity / dilution detection CLI: one command, one report. Detect fake or watered-down LLM endpoints via identity, context, tokenizer, capability and latency checks.

Evil0ctal / Douyin_TikTok_Download_API

🚀 自托管的抖音、TikTok、B 站数据采集与无水印视频下载 API，支持 AI agent 通过 MCP 调用与离线语音转文字，Docker 一键部署。| Self-hosted TikTok, Douyin & Bilibili scraper and no-watermark video downloader — async REST API, MCP server for AI agents, CLI and web console, plus offline speech-to-text for downloaded videos. Self-healing identity pool, PostgreSQL archive, one docker compose up.

drduh / YubiKey-Guide

Community guide to using YubiKey for GnuPG and SSH - protect secrets with hardware crypto.

mikro-orm / mikro-orm

TypeScript ORM for Node.js based on Data Mapper, Unit of Work and Identity Map patterns. Supports MongoDB, MySQL, MariaDB, MS SQL Server, PostgreSQL and SQLite/libSQL databases.

osaurus-ai / osaurus

Own your AI. The native macOS harness for AI agents -- any model, persistent memory, autonomous execution, cryptographic identity. Built in Swift. Fully offline. Open source.

microsoft / agent-governance-toolkit

AI Agent Governance Toolkit — Policy enforcement, zero-trust identity, execution sandboxing, and reliability engineering for autonomous AI agents. Covers 10/10 OWASP Agentic Top 10.

cerbos / cerbos

Cerbos is an open-core authorization management platform for authorizing every identity and governing every action across applications, gateways, workloads, and AI agents.

awslabs / agentcore-samples

Amazon Bedrock Agentcore accelerates AI agents into production with the scale, reliability, and security, critical to real-world deployment.

oauthlib / oauthlib

A generic, spec-compliant, thorough implementation of the OAuth request-signing logic

ballerine-io / ballerine

Open-source infrastructure and data orchestration platform for risk decisioning

microsoft / winappCli

winapp, the Windows App Development CLI, is a single command-line interface for managing Windows SDKs, packaging, generating app identity, manifests, certificates, and using build tools with any app framework.

AzureAD / microsoft-authentication-library-for-python

Microsoft Authentication Library (MSAL) for Python makes it easy to authenticate to Microsoft Entra ID. General docs are available here https://learn.microsoft.com/entra/msal/python/ Stable APIs are documented here https://msal-python.readthedocs.io. Questions can be asked on www.stackoverflow.com with tag "msal" + "python".

GJR787878 / DeviceResetSpoofer

清除应用数据后自动生成全新设备标识（Android ID / 广告ID / IMEI / 设备型号 / MAC / GSF / 运营商）/ Auto-generate a fresh device identity (Android ID, Ad ID, IMEI, model, MAC, GSF, carrier) after clearing app data.

drJhonatan00 / SlowPokeTail-EMU

Unofficial modification of the Citra emulator for Android, developed with a focus on a customized visual identity, resource optimization, and an improved user experience on mobile devices.

nithin42 / Foundry-Toolbox-Radar-Lab

Pre-deployment governance, identity auditing, and data-leakage scanner for Microsoft Foundry Toolboxes and autonomous AI agents.

yakew7 / DesignHub

Open-source, local-first design & brand toolkit. Build a brand once, then get logo variants, mockups, social assets, a brand book PDF and design tokens. Plus fonts, colors, icons, SVG & accessibility tools. No login, no backend.

oauth2-proxy / oauth2-proxy

Reverse proxy that adds OAuth2 and OIDC authentication in front of web applications, supporting many identity providers.

self-hosted security devops

dexidp / dex

OpenID Connect (OIDC) identity and OAuth 2.0 provider with pluggable connectors

projectcalico / calico

Cloud native networking and network security

doorkeeper-gem / doorkeeper

Doorkeeper is an OAuth 2 provider for Ruby on Rails / Grape.

kanidm / kanidm

Kanidm: A simple, secure, and fast identity management platform

unicity-sphere / sphere-sdk

The SDK for autonomous economic agents. Give an agent an identity, a wallet, and the ability to find, negotiate with, and settle with other agents - peer-to-peer, with perfect privacy and ultra-fast finality

pomerium / pomerium

Pomerium is an identity and context-aware access proxy.

allenpeng0705 / EnvoyMesh

Decentralized P2P mesh for autonomous AI agents — self-sovereign identity, peer-to-peer chat, and on-device AI that negotiates tasks on your behalf. No central server.

i2p / i2p.i2p

I2P is an anonymizing network, offering a simple layer that identity-sensitive applications can use to securely communicate. All data is wrapped with several layers of encryption, and the network is both distributed and dynamic, with no trusted parties.

pac4j / pac4j

Security engine for Java (authentication, authorization, multi frameworks): OpenID Connect, SAML2, CAS, OAuth, LDAP, JWT...

phongnguyend / Practical.CleanArchitecture

Full-stack .Net 10 Clean Architecture (Microservices, Modular Monolith, Monolith), Blazor, Angular 22, React 19, Vue 3.5, BFF with YARP, NextJs 16, Domain-Driven Design, CQRS, SOLID, Asp.Net Core Identity Custom Storage, OpenID Connect, EF Core, OpenTelemetry, SignalR, Background Services, Health Checks, Rate Limiting, Clouds (Azure, AWS, GCP), ...

kdeldycke / awesome-iam

👤 Identity and Access Management knowledge for cloud platforms

authgear / authgear-server

Open source Auth0/Keycloak alternative. Passkeys, SSO, MFA, passwordless, biometric login. Self-hosted or cloud. Enterprise-ready for SaaS & mobile apps

daptin / daptin

Self-hosted application server for schema-driven APIs, identity, files, automation, integrations, realtime, metering, and protocols.

spiffe / spiffe

The SPIFFE Project

dreamfactorysoftware / dreamfactory

DreamFactory is a secure, self-hosted enterprise data access platform that provides governed API access to any data source, connecting enterprise applications and on-prem LLMs with role-based access and identity passthrough.