Introducing the next era of Duende IdentityServer.
Bring AI agents and AI-native developer workflows into a Duende-protected system without bolting on a second security layer. Standards-based registration, discovery, and authentication for agents all running on the same identity infrastructure you trust.
Duende serves the world's most discerning organizations. We give them what they need to follow specs and standards — we don't take unnecessary risk. Our AI & Identity capabilities span three layers: how agents enter your system at runtime, how Duende accelerates developers through AI tooling, and the institutional protocol expertise that backs both.
Agents that arrive correctly identified. What AI agents need to register, discover, and authenticate against a Duende-protected system, all built on standards your security team already audits." to "Have your agents arrive correctly identified. Everything AI agents need to register, discover, and authenticate against a Duende-protected system, all built on standards your security team already audits.
Reach developers through the tools they already use. Duende shows up inside Copilot, Cursor, Claude, and other AI coding assistants as verified, compliant context.
Knowledge that can't be regenerated. Fifteen years of regulated deployments. Edge cases, compliance nuance, and production scar tissue that LLM-generated implementations can't replicate from training data alone.
The AI & Identity capability set is bundled across Duende IdentityServer tiers. No separate SKU, no add-on license. The runtime layer is available on every supported tier; the build-time layer is enabled at Standard and above.
Tier | What's Included |
|---|---|
| Community Edition | RFC 7591 · 8414 (Runtime layer included) |
| Lite | + MCP Security (Full runtime stack) |
| Standard | + Agent Skills (Runtime + build-time) |
| Advanced | + FAPI 2.0 (Financial-grade profile) |
| Custom | Up to Unlimited (Everything, tailored) |
Bring agents into a system that already understands identity. Fifteen years of OAuth, OIDC, FAPI, and SAML implementation experience now extended to the AI clients writing code against your APIs and the agents calling them at runtime.
