All 45 Dependencies
Every package Ory Kratos depends on, ranked by repo health score.
Ory Kratos is a headless, cloud-native identity server written in Go that takes full ownership of user authentication and account lifecycle. Instead of embedding auth logic into your application, you expose Kratos over HTTP and let it drive login, registration, account recovery, email verification, multi-factor authentication, and profile management as self-contained, configurable flows.
Every identity in Kratos is defined by a JSON Schema, meaning user traits—email, username, phone number, or any custom attributes your product requires—are declared in config rather than code. Credential types (password, passkey, TOTP, WebAuthn, OIDC social login, SAML, magic link codes) are strategies that can be mixed and matched per deployment without touching application logic.
Kratos is UI-agnostic by design. The server never renders HTML; it returns flow objects that your own frontend—React, Vue, mobile, or server-rendered—consumes to build whatever login screen you need. This strict separation means branding, accessibility, and UX are entirely in your control. Browser-based and API-native flows are first-class citizens, covering both traditional web apps and native mobile clients.
Born from the Ory ecosystem, Kratos integrates natively with Ory Hydra for OAuth2 and OpenID Connect, Ory Oathkeeper for request authorization, and the Ory Network managed service. It supports PostgreSQL, MySQL, and CockroachDB via the Ory Pop ORM, ships quickstart Docker Compose setups for most databases, and runs comfortably on Kubernetes. Adopted by companies including Segment, Arduino, and Sainsbury's, Kratos is proven at scale across both consumer and enterprise workloads.
