Skip to main content

Guardhouse documentation

Build identity into your application.

Follow a working path from client registration to sign-in, token validation, authorization, and production operations.

Applicationrequests identityGuardhouseissues access tokenProtected API

Choose a path

Start with the outcome you need

Add user sign-in

Register a browser client and add Guardhouse-hosted authentication to React.

React quickstart →

Connect a service or agent

Use client credentials for workers, backends, agents, and MCP servers.

M2M quickstart →

Configure a tenant

Set up applications, authentication, users, branding, and providers.

Configuration map →

Operate securely

Prepare production security, troubleshoot integrations, and choose deployment ownership.

Security guide →

The core model

Configure once, enforce at every boundary

  1. ClientThe application or service requesting a token.
  2. ResourceThe API audience that will accept that token.
  3. AccessThe scopes and policies required by an operation.