SPIFFE / SPIRE
Identity & PermissionOpen source · Apache-2.0★ 2,569（2026-10-04）Self-hosted
CNCF-graduated workload identity standard and its reference implementation.
SPIFFE is the CNCF Graduated specification (graduated 23 August 2022) for cryptographic workload identity and SPIRE is its reference implementation; together they issue X.509-SVID and JWT-SVID credentials through a Workload API without pre-shared secrets, using node and workload attestation.
Key facts
| Category | Identity & Permission |
|---|---|
| License | Apache-2.0 |
| Language | Go |
| Self-hosted | Yes |
| GitHub stars | 2,569 (2026-10-04) |
| Last push | 2026-10-02 |
| Last verified | 2026-10-04 |
| Repository | https://github.com/spiffe/spire |
Tools in this category
AGNTCY Agent Identity
Linux Foundation-hosted identity service for agents, MCP servers and multi-agent systems.
Open source★ 67Caveat
Agent Identity Protocol (AIP)
An IETF Internet-Draft proposing agentic authentication and policy enforcement, submitted with NVIDIA involvement.
Standard / specCaveat
Auth0 for AI Agents
Auth0's agent auth suite: user login, delegated authorization and token vault.
ProprietaryCaveat