nowfound

Dev tools · alternatives · 2026

24 alternatives to A self-hosted OAuth 2.0 server for authenticating AI agents and machine

MachineAuth is a self-hosted OAuth 2.0 server for authenticating AI agents and machines. What is an AI agent in this context? A software bot (like OpenCLAW, Claude Code, etc.) that makes API calls to access protected resources. Instead of sharing long-lived API keys, your agents can authenticate using OAuth 2.0 Client Credentials and receive short-lived JWT tokens. Why? No more sharing API keys Short-lived tokens (configurable) Easy credential rotation Industry-standard security

Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes.

  1. 1
    AgentAuth▲462

    Connect your AI Agents with your Accounts

    2024 · its alternatives →

  2. 2
    AgentSky▲430

    Any harness, any LLM — cloud-hosted agents on demand.

    Aug 2026 · agentsky.dev · its alternatives →

  3. 3

    Hi there, Mike here from Budibase. We’ve recently launched AI Agents into Beta, alongside our existing open-source app-building and automation tools. We built Budibase Agents for teams that want to leverage AI within real-world workflows, using their own LLMs, data, and APIs. Because of this, our Agents can be powered by any LLM with an OpenAI-compatible API, including open-source and locally-hosted models. This means you can build Agents that connect to your existing toolstack, within your own environment. Some more details: - Agents' behavior is configured using natural language…

    2022 · budibase.com · its alternatives →

  4. 4

    The first network of AIs (Open Source)

    2025 · github.com · its alternatives →

  5. 5
    Cred▲97

    OAuth credential delegation for AI agents

    Apr 2026 · cred.ninja · its alternatives →

  6. 6

    Hi HN — I’m a heavy OpenClaw user and, like many others, I’ve been thinking about how to give these new “unleashed” agents secure access to my accounts. Agents need API access to be useful. But API keys are long-lived secrets. And agents are not secure environments. So I built something for myself that quickly turned into a product: keychains.dev. The idea is simple: agents never see raw credentials. With Keychains.dev: • Agents make API calls via a drop-in replacement for curl or JavaScript’s fetch() • They use template variable names instead of embedding credentials • The request is…

    Feb 2026 · keychains.dev · its alternatives →

  7. 7

    Give your AI agents safe access to 10,000+ APIs

    Mar 2026 · jentic.com · its alternatives →

  8. 8

    We built OneCLI because AI agents are being given raw API keys. And it's going about as well as you'd expect. We figured the answer isn't "don't give agents access," it's "give them access without giving them secrets." OneCLI is an open-source gateway that sits between your AI agents and the services they call. You store your real credentials once in OneCLI's encrypted vault, and give your agents placeholder keys. When an agent makes an HTTP call through the proxy, OneCLI matches the request by host/path, verifies the agent should have access, swaps the placeholder for the real…

    Mar 2026 · github.com · its alternatives →

  9. 9

    Hey HN, we’re building an open specification that lets agents discover and invoke APIs with natural language, built on the OpenAPI standard. agents.json clearly defines the contract between LLMs and API as a standard that's open, observable, and replicable. Here’s a walkthrough of how it works: https://youtu.be/kby2Wdt2Dtk?si=59xGCDy48Zzwr7ND. There’s 2 parts to this: 1. An agents.json file describes how to link API calls together into outcome-based tools for LLMs. This file sits alongside an OpenAPI file. 2. The agents.json SDK loads agents.json files as tools for an LLM that…

    2025 · github.com · its alternatives →

  10. 10

    api2ai parses OpenAPI Spec to generate an agent that can make API calls. For context, I recently need to explore a handful of API suites and thought LLMs can help expedite this process. After some digging, I found OpenAPI Specs are perfect fit for function calling. Based on a text prompt, api2ai can select the right endpoint and properly parse request params and make api calls. It also handles authentication, currently it supports basic auth, api keys, and bearer token schemes. The tool has helped me explore and see APIs in action without a deep dive into the docs or using postman. It’s open…

    2023 · github.com · its alternatives →

  11. 11

    Open-source auth for enterprise applications, and AI agents

    Sep 2026 · authorizer.dev · its alternatives →

  12. 12

    I’ve been experimenting with AI agents lately, and one problem kept coming up: they either get a raw API key with full access or nothing at all. That’s risky, especially if you’re testing agents that can make arbitrary calls. So I hacked together a tiny package called Kage Keys - https://github.com/kagehq/keys It lets you wrap agent actions with scoped, short-lived tokens instead of handing over your real API keys. Example: ```js import { withAgentKey, getLogs } from "@kagehq/keys"; async function main() { await withAgentKey("github:repos.read", async () => {…

    2025 · github.com · its alternatives →

  13. 13
    Latchkey▲122

    Hi HN, At Imbue, we’ve been following the rapid developments in the agent landscape and noticed that the way agents interact with third-party services on users’ behalf often leaves a lot to be desired. Integrations are ad hoc, complicated, context-heavy, and either unfriendly to non-technical users or tied to a lock-in of some sort. We‘re experimenting with a command-line tool, Latchkey, that could be used by local agents targeted at non-technical users while avoiding remote intermediaries. As far as we know, this is the only existing approach at the intersection of these two goals. Core…

    Mar 2026 · github.com · its alternatives →

  14. 14

    Hello HN, I’ve always loved building frontend-only apps—those you can prototype over a weekend, host for free on GitHub Pages, and scale to millions of users. Unfortunately, AI-enabled apps complicate things, as exposing your OpenAI key to the world is obviously a no-go. This also means mobile developers often have to run their own servers. That’s why I built ServerlessAI, an API gateway that lets you securely call multiple AI providers directly from client side using OpenAI-compatible APIs. You can authenticate users through any identity provider, like Google or Apple, and set per-user…

    2024 · serverlessai.dev · its alternatives →

  15. 15

    Build your own AI Agent for machines!

    2025 · share.streamlit.io · its alternatives →

  16. 16

    Skip the setup and run OpenClaw & Hermes, fully managed

    Aug 2026 · cloudways.com · its alternatives →

  17. 17

    Deploy AI-generated apps to your own server with one command. Open source, sandboxed, automatic HTTPS. Built for non-engineers.

    Apr 2026 · openberth.io · its alternatives →

  18. 18

    over this weekend myself and two of my friends took part in a hackathon and built this side-project. we have been diving into computer-use recently and developed an sdk to make it easy to implement for devs like us. one feature we were missing though, was the agent being able to log into services. anthropic understandably blocks this capability with their guardrails, and you wouldn't want your credentials to end up in any model context anyways. so we added a keychain service to the vm that the agent is using. it was built using the pass cli (https://www.passwordstore.org/).…

    2025 · github.com · its alternatives →

  19. 19

    Hi HN, I built Agent Passport, an open-source identity verification layer for AI agents. Think "Sign in with Google, but for Agents." The problem: AI agents are everywhere now (OpenClaw has 180K+ GitHub stars, Moltbook had 2.3M agent accounts), but there's no standard way for agents to prove their identity. Malicious agents can impersonate others, and skill/plugin marketplaces have no auth layer. Cisco's security team already found data exfiltration in third-party agent skills. Agent Passport solves this with: - Ed25519 challenge-response authentication (private keys never leave the…

    Feb 2026 · agent-passport-red.vercel.app · its alternatives →

  20. 20

    Secure credential proxy for AI agents

    Mar 2026 · agentkeys.io · its alternatives →

  21. 21
    HelixID▲34

    Open-source identity & trust layer for AI agents

    Sep 2026 · helixid.dev · its alternatives →

  22. 22

    Love OpenClaw? Now ship it to production. Built in Rust.

    Feb 2026 · github.com · its alternatives →

  23. 23

    Share API keys with AI agents. Encrypted. No server needed.

    Feb 2026 · its alternatives →

  24. 24

    Open-source 2D IDE for managing AI agents in native CLIs, terminal, gits, beads issues, and files across multiple projects and machines. Self-host on a single machine via localhost OR host on a cluster via Tailscale OR connect to app.49agents.com (coming soon) - alpbahadur/49-IDE

    Aug 2026 · github.com · its alternatives →

Also compare

Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →