{"data":{"slug":"pocket-id","name":"Pocket ID","tagline":"BSD-2-Clause passkey-only OIDC IdP; self-host only","category":"nextjs","categoryName":"Next.js","url":"https://pocket-id.org","github":"https://github.com/pocket-id/pocket-id","pricing":"open-source","hook":"Pocket ID is the passkey-only OIDC IdP when Hanko still offers passwords and Authelia is proxy SSO.","whatsGood":"BSD-2-Clause. Self-host only — no paid Cloud trap. OIDC Certified. Passkeys only: no password store to mismanage. Homelab and MCP-scoped auth lane.","theCatch":"Vs Hanko/Authelia/Keycloak/Ory: passkey-ONLY OIDC IdP (no passwords). Homelab/MCP-scoped, not enterprise IAM. Free path is self-host only.","verdict":"BSD-2-Clause passkey-only OIDC. Self-host; not enterprise IAM.","addedAt":"2026-09-04","featured":false,"domain":"Auth","subSpecialty":"Auth","capabilities":["auth","oidc","passkeys"],"surfaces":["Self-host"],"ecosystem":["Multi-platform"],"licenseModel":"OSS/MIT","githubStars":9099},"related":[{"slug":"vercel","name":"Vercel","tagline":"The platform that made Next.js deployment trivial"},{"slug":"prisma","name":"Prisma","tagline":"Type-safe database access with killer DX"},{"slug":"drizzle","name":"Drizzle ORM","tagline":"TypeScript ORM that feels like SQL"},{"slug":"trpc","name":"tRPC","tagline":"End-to-end typesafe APIs without codegen"},{"slug":"clerk","name":"Clerk","tagline":"Auth that actually ships with your UI"}],"links":{"self":"/api/gems/pocket-id","html":"/gems/pocket-id","markdown":"/gems/pocket-id.md","category":"/api/gems?category=nextjs","categoryPage":"/stacks/nextjs"}}