#3939th of 102 in Backends, databases and hosting

logto

Self-hostable OIDC, OAuth 2.1 and SAML auth service with multi-tenancy and RBAC

Stars
14.9k
License
MPL-2.0
Last commit
Nov 2026
Last release
Nov 2026
Language
TypeScript
Stars, last 29 weeks+3,093
21 Apr 2026: 11,811 stars28 Apr 2026: 11,840 stars5 May 2026: 11,875 stars12 May 2026: 11,910 stars19 May 2026: 11,954 stars26 May 2026: 11,985 stars2 Jun 2026: 12,017 stars9 Jun 2026: 12,056 stars16 Jun 2026: 12,080 stars23 Jun 2026: 12,104 stars30 Jun 2026: 12,945 stars7 Jul 2026: 13,833 stars14 Jul 2026: 13,982 stars21 Jul 2026: 14,065 stars28 Jul 2026: 14,126 stars4 Aug 2026: 14,164 stars11 Aug 2026: 14,220 stars18 Aug 2026: 14,271 stars25 Aug 2026: 14,355 stars1 Sept 2026: 14,388 stars8 Sept 2026: 14,421 stars15 Sept 2026: 14,479 stars22 Sept 2026: 14,531 stars29 Sept 2026: 14,570 stars6 Oct 2026: 14,594 stars13 Oct 2026: 14,626 stars20 Oct 2026: 14,700 stars27 Oct 2026: 14,788 stars3 Nov 2026: 14,832 stars10 Nov 2026: 14,904 stars

11,811 on 21 Apr 202614,904 on 10 Nov 2026

From GitHub's daily star counts.

Checked on GitHub.

Overview

Logto is an identity and auth server written in TypeScript that handles sign-in, social login, MFA, enterprise SSO, and organization-level RBAC. It ships pre-built sign-in flows and SDKs for 30+ frameworks, and the README says it also fits Model Context Protocol and agent-based setups. It can be self-hosted with Docker Compose or Node.js on PostgreSQL, or used as the managed Logto Cloud.

Who it is for: Teams adding self-hosted or managed auth, SSO and RBAC to SaaS or agent apps

Strengths

  • Supports OIDC, OAuth 2.1 and SAML, with enterprise SSO and multi-tenancy built in
  • SDKs for 30+ frameworks including React, Next.js, Angular, Vue, Flutter, Go, Python
  • Docker Compose one-liner for self-hosting; also installable via npm init @logto
  • Organization RBAC, member invites and just-in-time provisioning

Weaknesses

  • Node.js install path requires a separately managed PostgreSQL database
  • MPL-2.0 has file-level copyleft, which may matter if you modify and ship it
  • Self-hosting means you operate and patch your own auth service

What it needs

  • no GPU
  • Docker + Compose
  • Needs PostgreSQL, Docker (optional), Node.js (optional)
  • port 3002

Quick answers

Is logto open source?

Yes. Its code is on GitHub under the MPL-2.0 license.

Can you run logto with Docker?

Yes. Its repository has a Docker setup: a Dockerfile, a Compose file or a published image.

Also in Backends, databases and hosting

See all 102
Also in Backends, databases and hosting
RankProjectScore
1bunJavaScript and TypeScript runtime with bundler, test runner and package manager96.7k starscustom license93 out of 100
2strapiHeadless CMS that generates REST and GraphQL APIs from content models Live demo ↗ (opens in a new tab)73.5k stars+245 (+0.3%) in 30 dayscustom license92 out of 100
3traefikHTTP reverse proxy and load balancer that auto-discovers routes from orchestrators65.5k stars+446 (+0.7%) in 30 daysMIT92 out of 100
#4appwriteBackend with auth, databases, storage, functions and an MCP server for agents Live demo ↗ (opens in a new tab)58k stars+463 (+0.8%) in 30 daysBSD-3-Clause92 out of 100
#5medusaNode.js commerce platform with modular products, carts, orders and payments37.2k starscustom license92 out of 100