Reeve makes it safe for a Rails application to expose MCP (Model Context Protocol) tools to AI agents. Authentication says who is at the door; Reeve decides what they may touch and remembers what they touched: declarative per-record authorization scoped to the human the agent acts for, an append-...

Visit https://avohq.io/ to get more information about this gem.

Fortnox's REST API wraps every payload in a type key, spells its attributes in PascalCase, and treats an empty string as "leave this field alone" when you meant to clear it. This gem turns it into ordinary immutable Ruby objects with typed, constrained attributes, so a value Fortnox would reject ...

Discovery, PKCE authorization, token exchange, and token verification against a masks issuer, with Rack middleware for a resource server and a Rails engine that mounts the consumer half of the code flow. The auth server itself is the masks-server gem.

An authorization library that supports access control models like ACL, RBAC, ABAC in Ruby

Rails-native delegated authorization for AI agents.

Railtie, install generator, and helpers wiring a Rails app into ask-local's stable .localhost URLs: host authorization, Action Cable origins, Procfile $PORT rewrite, and an agent skill for local development.

Ruby authentication and authorization SDK for iden.

Public API for Mencoro customers. Authenticate with an API key: `Authorization: Bearer mencoro_sk_...`. Every write operation requires an `Idempotency-Key` header: a retry carrying the same key and body within 30 days is answered from the stored result without running again; after 30 days the key...

An OmniAuth strategy that authenticates against Authify, a self-hosted, multi-tenant identity provider, using the OpenID Connect authorization code flow with PKCE, verifying ID tokens against the organization's JWKS.

AccountAuthz is the authorization layer for multi-tenant apps. The app declares a fixed catalog of capabilities (permission + metric keys) in code; accounts manage roles as data that bundle those capabilities; AccountAuthz resolves what a member may do (can?) and which metrics they may see (appro...

The relying-party half of Login with ZOREAL: exchanges the authorization code your frontend received from @zoreal/oauth2-react, verifies the ID token against the provider's JWKS, and reads personal claims from /userinfo.

AuthZEN authorization APIs for Action Policy

A small Rails engine that stores immutable external agreement-version metadata and append-only localized acceptance evidence. It distinguishes the subject bound by an agreement from the actor accepting under recorded authority, rejects stale rendered versions, and leaves documents, authentication...

Throwaway gem for authorization testing. Safe to yank.

Lockdown is an authorization system for RubyOnRails (ver >= 2.1).

The api_keys feature for Rodauth lets an account create, list, and revoke API keys. A client sends an API key in the Authorization header to authenticate a request.

Adds "Sign in with ChatGPT" to Rack and Rails applications through OmniAuth and Devise. Authorization code flow with PKCE and a nonce; the ID token's signature, issuer, audience, expiry, and nonce are verified against OpenAI's published keys before the application sees an identity. Unofficial; no...

Generates Twitter API's Authorization header

Thin wrapper around Russian Post package tracking SOAP API. Works on a per-package basis (contrary to the bulk ticket-based API). Use it at your own risk, since the API may appear unstable and require authorization in future.