Curity logo
  • Identity ServerAccess IntelligenceToken Intelligence
    Read more→

    See how the platform fits together

  • By use case iconBy Use Case
    API Access ControlB2B and Partner IdentityCIAMModernize InfrastructureOpen Banking and Financial-Grade APIsSecure AI and Machine Access
    By industry iconBy Industry
    Financial ServicesGovernmentHealthcareTech & SaaSTelecom
  • Pricing
  • Business iconBusiness
    ArticlesBlogCoursesDocumentsTrainingVideosWebinars
    For developers iconFor developers
    Code ExamplesDeveloper PortalDocumentationGetting StartedGuidesHow-tosOAuth Tools
  • AboutCareersContact
    CustomersESGEvents Calendar
    NewsPartners
  • Talk to an Expert
  • Get Started
ArticlesCode ExamplesCoursesDocumentationDocumentsGetting StartedGuidesHow-tosTrainingVideosWebinarsWhat's new

APIs and Clients

  • APIs
    • Learn OAuth API Security Coding Skills
    • Securing a Spring Boot API with JWTs
    • Securing a Java API with JWTs
    • Securing a Kotlin API with JWTs
    • Securing a .NET API with JWTs
    • Securing a Go API With JWTs
    • Securing a Node.js Express API with JWTs
    • Securing a Python Flask API with JWTs
    • Securing a Symfony API with JWTs
    • Securing a Serverless API with JWTs
    • Securing a Serverless API on Vercel using JWTs
    • Mutual TLS Secured API
    • API Access via JWT Assertions
    • Securing API Events using JWTs
    • Testing Zero Trust APIs
  • Single Page Apps
    • SPA using Token Handler
    • Token Handler Deployment Example
    • Javascript SPA using Assisted Token Flow
    • Javascript SPA using OAuth Assistant Library
    • Javascript SPA using Code Flow + PKCE
    • React SPA using Assisted Token Flow
    • Angular SPA using Assisted Token Flow
    • Hypermedia Authentication API React Demo
  • Websites
    • OpenID Connect Client with Spring Security
    • OpenID Connect Client with .NET
    • OpenID Connect Client with .NET Framework
    • OpenID Connect Client with Node.js Express
    • OpenID Connect Client with Python
    • OpenID Connect Client with Java Undertow
    • OpenID Connect Client with MITREid
    • OpenID Connect Client with Mutual TLS
    • OpenID Connect Client with Encrypted ID Tokens
    • SAML 2.0 Website
  • Mobile Apps
    • Kotlin Android App using AppAuth
    • Kotlin Android App using HAAPI
    • Swift iOS App using AppAuth
    • Swift iOS App using HAAPI
    • React Native App using HAAPI
    • Mobile Dynamic Client Registration
    • Mobile Web SSO
    • Mobile Setup with ngrok
  • AI Agents
    • Implement MCP Authorization
    • Backend Agent with A2A Authorization
    • Secure an OpenAI ChatGPT App

Plugins

  • Alarm Handlers
    • Alarm Integration Plug-in
  • Authenticators
    • Bitbucket Authenticator
    • Box Authenticator
    • Idura Authenticator
    • Dropbox Authenticator
    • Entrust Authenticator
    • Freja eID Authenticator
    • GitHub Authenticator
    • Instagram Authenticator
    • LinkedIn Authenticator
    • Nonce Authenticator
    • reCAPTCHA Authenticator
    • Salesforce Authenticator
    • Slack Authenticator
    • StackExchange Authenticator
    • Twitter Authenticator
    • Username Password Authenticator
    • Windows Live Authenticator
  • Authentication Actions
    • Choose Account Authentication Action
    • Debug Attribute Authentication Action
    • Redirect Action Example
    • Send Email Action Example
    • Time Based Deny Authentication Action
    • Kong Dev Portal User Provisioner
    • Azure API Management User Provisioner
    • Microblink BlinkID Authentication Action
    • iProov Authentication Action
  • Data Access
    • PBKDF2 Credential Data Access Plugin
    • RESTful Data Access Plugin
  • Claims Providers
    • Salesforce Claims Provider
  • Consentors
    • Example Generic Consentor
  • Emailers
    • RESTful Emailer Plug-in
    • Twilio SendGrid Emailer Plugin
  • Event Listeners
    • Amazon SQS Event Listener
    • Apigee Token Publisher Event Listener
    • Apigee Split Token Publisher Event Listener
    • AWS Split Token Publisher Event Listener
    • Client Authentication Attempt Counter
    • Cloudflare Token Publisher Event Listener
  • SMS Senders
    • RESTful SMS Sender Plugin
    • Tele2 SMS Plugin
  • Authorization Managers
    • XACML Authorization Manager
    • Open Policy Agent Authorization Manager
    • AuthZEN Authorization Manager
  • Token Procedures
    • Long-Lived Tokens on Refresh Procedure Plugin
    • Exchange Opaque Token to JWT
    • OpenID AuthZEN Token Procedure
    • Token Exchange With External IdP
  • Session Management
    • SSO Revocation Plugins

Learn more

  • Webinars
  • Documents
  • Videos
  • Training

AI Agents

Code examples to show how to securely integrate AI agents with APIs, using interoperable security.

  • March 10, 2026

    Backend Agent with A2A Authorization

  • February 6, 2026

    Secure an OpenAI ChatGPT App

    Use the Hypermedia Authentication API to implement step-up authentication with an integrated user experience

  • November 5, 2025

    Implement MCP Authorization

    Develop an OAuth-secured MCP server and integrate AI agents with human approval and a controlled level of access

Architecture

See how Curity fits into modern identity and API architectures.

Explore architecture

Customer Stories

Learn how organizations run identity and API security at scale.

Read customer stories
Curity logo

To connect with a product expert today,

email us or call +46 8-410 737 70

Get started with Curity

Curity Identity ServerCurity Access Intelligence for AIFree TrialPricingContact us
Curity AB © All Rights Reserved · Terms of Service
Sign up for API Security Insights→
Follow us
  • X icon
  • Bluesky icon
  • LinkedIn icon
  • Medium icon
  • GitHub icon
  • YouTube icon
  • RSS icon
  • Nordic APIs icon