Notes from building auth in the open
Deep dives, release notes, and engineering write-ups from the team building an open-source IAM stack for humans, AI agents, and machines.
Latest posts
MCP Dev Summit, Identity, and the Authorization Gap in MCP
Three ThunderID team members presented at MCP Dev Summit events on the same problem viewed from three altitudes: who an agent is acting as when it calls an MCP server, whether it's headless, host-driven, or acting on a user's behalf.
Ayesha Dissanayaka, Hasini Samarathunga, and Sahan Dilshan
Aug 30, 2026 · 16 min read
Verifiable Credentials for Real-World Authority: What ThunderID Makes Possible
Learn how ThunderID acts as the identity backbone for verifiable credentials and digital wallet-enabled apps, powering CitizenVerify, the public sector winner at the EUDI Wallet Hackathon 2026.
Thisara Welmilla
Aug 14, 2026 · 10 min read
ThunderID: The Open Source IAM Stack Built for Agents, Ready for Quantum, Open by Design
Open source IAM has shaped identity infrastructure for decades. It gave real alternatives to proprietary software, made identity tooling free and accessible to anyone. That work mattered, and it still does.
Sagara Gunathunga
May 21, 2026 · 5 min read
