Free & open source community ID service
Authes is a free and open source community ID service for any app or website. Built for the developer community and open web — zero database, simple PIN and reset password, no email tracking, and zero-registration CIMD.
Simple PIN & reset password
Shared, privacy-first authentication for community projects. No email required. No passwords. Instant access.
Username
Memorable handles like bold-fox4. No email address required.
Secure PIN
Fast numeric sign-in with touch pinpad for mobile and desktop.
Reset Key
Permanent recovery phrase saved in your vault. No email server needed.
Frictionless & secure
Private by default with zero email tracking.
- Instant sign-in: Fast numeric keypad entry.
- Brute-force safe: Progressive rate-limiting and lockouts.
- Standard tokens: RS256 JWT tokens with OpenID Connect.
Zero-registration authentication
Zero registration. Your web domain is your client ID.
Integrate with your coding agent
You can just tell your coding agent to use https://authes.org for OIDC CIMD authentication with callbacks to https://your-web-domain and http://localhost:8080, for example:
Use https://authes.org for OIDC CIMD authentication with callbacks to https://your-web-domain and http://localhost:8080
Because Authes is an open community service with Client ID Metadata Documents (CIMD), coding agents like Claude Code, Cursor, Copilot, or Antigravity can immediately set up authentication without needing developer portal accounts or API keys.
Link to login
Pass your metadata URL as client_id:
https://authes.org/oauth/authorize? response_type=code &client_id=https://mywebsite.com/client.json &redirect_uri=https://mywebsite.com/auth/callback &scope=openid profile
Host metadata
Serve 3 lines of JSON at https://mywebsite.com/client.json:
{
"client_name": "My Web Site",
"redirect_uris": ["https://mywebsite.com/auth/callback"]
}
Exchange code for tokens
Get RS256 ID tokens. No client secret needed:
curl -X POST https://authes.org/oauth/token \ -d "grant_type=authorization_code" \ -d "code=AUTHORIZATION_CODE" \ -d "client_id=https://mywebsite.com/client.json" \ -d "redirect_uri=https://mywebsite.com/auth/callback"