IntegrAuth
Identity & Security for Humans, Machines & AI Agents
Expert services in IAM, API Security, AI Integrations, Agent Authentication, MCP Security & Fine-Grained Authorization for modern enterprises
Our Services
Professional services and support for AI & agent security, IAM, API security, and software engineering
Free Security Tools
Free, no-login, spec-cited self-service tools — paste public data, get an instant graded report.
27 browser-based micro-tools built by our identity, API, and AI-agent security specialists — grade OAuth 2.1, OIDC, SAML, JWT, WebAuthn, and MCP configurations against the specs, RFC by RFC.
MCP Auth Scan
Grade a remote MCP server's OAuth 2.1 authorization (RFC 9728/8414/8707)
mcpauthscan.integrauth.comMCP Scopes
Score MCP tool over-privilege (OWASP MCP02)
mcpscopes.integrauth.comTool Poison Check
Scan MCP tool definitions for tool-poisoning indicators (OWASP MCP03)
toolpoisoncheck.integrauth.comA2A Scan
Grade an A2A Agent Card's declared auth schemes
a2ascan.integrauth.comAI Gateway Check
Grade a LiteLLM / AI-gateway config for hardening gaps
aigatewaycheck.integrauth.comWell-Known Scan
Map & grade a domain's OAuth/OIDC/MCP .well-known discovery surface
wellknownscan.integrauth.comJWKS Check
Grade a JWKS endpoint's key hygiene + verify a JWT
jwkscheck.integrauth.comOIDC Federation
Analyze CI/workload-identity federation trust (GitHub/GitLab → AWS/GCP/Azure)
oidcfed.integrauth.comIAM Trust Check
Grade an AWS IAM trust/resource policy for confused-deputy & wildcard risk
iamtrustcheck.integrauth.comDPoP Toolkit
Generate & validate DPoP proofs (RFC 9449)
dpop.integrauth.comToken Exchange
RFC 8693 token-exchange composer & delegation explainer
tokenexchange.integrauth.comClient Assertion Check
Build & lint an OAuth client-assertion JWT (RFC 7523)
clientassertcheck.integrauth.comID Token Check
Lint an OIDC ID token's semantics + flag access-token misuse
idtokencheck.integrauth.comConsent Check
Risk-rank a third-party OAuth app's requested scopes
consentcheck.integrauth.comRedirect Check
Diagnose OAuth redirect_uri mismatches & open-redirect risk
redirectcheck.integrauth.comLogout Check
Grade an OIDC issuer's logout/revocation posture
logoutcheck.integrauth.comDCR Check
Static-grade Dynamic Client Registration exposure from discovery metadata
dcrcheck.integrauth.comOpenID Federation Check
Validate an OpenID Federation entity statement / trust chain
oidfedcheck.integrauth.comSAML Scan
Grade SAML SP/IdP metadata security (cert/SHA-1/XSW)
samlscan.integrauth.comSAML Response Check
Grade a pasted SAML Response for XSW / assertion security
samlresponse.integrauth.comGateway JWT Lint
Lint an API-gateway JWT-validation policy (Kong / Azure APIM / Apigee)
gwjwtlint.integrauth.comGraphQL Check
Grade a GraphQL schema's security posture (paste-only)
graphqlcheck.integrauth.comCookie Check
Grade session-cookie & token-response hardening
cookiecheck.integrauth.comPasskey Check
Grade a WebAuthn relying-party config
passkeycheck.integrauth.comSSF Check
Validate a Shared Signals / CAEP transmitter config + SET
ssfcheck.integrauth.comSPIFFE Scan
Decode & inspect SPIFFE X.509 / JWT-SVIDs
spiffescan.integrauth.comCert Lint
Grade a pasted X.509 certificate's hygiene
certlint.integrauth.comEvery tool mirrors a check we run in real engagements — if a report surfaces gaps, our consulting services can help you close them.
Our Products
In-house developed software solutions - built entirely with cutting-edge technology
Smartable
Education ERP with Smart Auto Timetabling
Automated timetable generation using Google OR-Tools constraint programming
Wrenchub
Modern Vehicle Service Center Management
Cloud-based workshop software for digital job cards, real-time tracking, and SMS notifications
We Also Build Websites
Modern, fast, secure websites for restaurants, hospitals, schools and more — each live demo below ships with a dozen-plus switchable designs. Pick a style you love and we'll make it yours.
Want a website like these for your business? Contact us — we design, build, secure and host it end to end.
Smartable
API-First Education ERP with Smart Auto Timetabling
Key Features
- Automated timetable generation using Google OR-Tools
- Multi-tenant architecture with organization isolation
- Multi-campus support with branch scoping
- JWT authentication with refresh token rotation
- Teacher absence & substitution management
- Holiday management with automatic scheduling exclusion
- PDF export with 5 different views
- Advanced analytics & reporting
- Break supervision roster automation
- Conflict detection & constraint validation
Technology Stack
Frontend
SvelteKit, TypeScript, TailwindCSS
Backend API
Cloudflare Workers, Hono.js, TypeScript
Database
Cloudflare D1 (SQLite at the edge)
Computing
Modal.com (Serverless Python), Google OR-Tools, ReportLab
Authentication
Custom OAuth implementation, JWT + Refresh Tokens, Bcrypt
Infrastructure
- Cloudflare Workers: Edge API with global distribution
- Cloudflare D1: SQLite database at the edge
- Modal.com: Serverless Python for OR-Tools computation
- GitHub Actions: Automated CI/CD pipeline
Quality & Testing
- Comprehensive Testing: 19 route test suites
- Integration Tests: End-to-end API testing
- CI/CD Pipeline: Automated testing on every commit
- Type Safety: Full TypeScript implementation
Architecture
Users (Web Browser)
↓
Cloudflare Workers (Edge Runtime)
├── SvelteKit UI (SSR/SPA)
└── REST API (170+ endpoints - internal calls)
↓
├── Cloudflare D1 Database (26 tables, SQLite at edge)
└── Modal.com Python Service (OR-Tools + ReportLab)
Note: The SvelteKit UI and REST API are served from the same Cloudflare Worker. The REST API interacts directly with both D1 (for data persistence) and Modal.com (for timetable generation & PDF export).
170+
API Endpoints
26
Database Tables
19
Test Suites
5
PDF Export Views
Technologies We Support
We provide expert services, integration support, and custom software development for these platforms and tools
IAM
Auth0 
AWS Cognito 
Firebase Auth 
Keycloak 
Microsoft Entra ID 
Okta 
Oracle IDM & IAM 
SupabaseAuthorization & Policy
Agent Identity & Non-Human Identities
Gateways & CDNs
Programming
IaC & Automation
Testing Tools
Databases
Serverless
Monitoring & Observability
Message Queues & Event Streaming
Cloud Platforms
AI Tools
AI Agent Frameworks
AI Model Providers
AI Security & Guardrails
Trusted by Industry Leaders
Leading companies trust us for IAM, API security, AI security, and software development services
Get in Touch
Ready to secure your identities, APIs, and AI agents? Let's discuss your needs.
Email Us
[email protected]IntegrAuth
Securing Your Digital Future — Humans, Machines & AI Agents