# Pocket ID

> BSD-2-Clause passkey-only OIDC IdP; self-host only

**Category:** Next.js  
**Pricing:** open-source  
**URL:** https://pocket-id.org  
**GitHub:** https://github.com/pocket-id/pocket-id  
**Added:** 2026-09-04

---

## The Hook

Pocket ID is the passkey-only OIDC IdP when Hanko still offers passwords and Authelia is proxy SSO.

## What's Good

BSD-2-Clause. Self-host only — no paid Cloud trap. OIDC Certified. Passkeys only: no password store to mismanage. Homelab and MCP-scoped auth lane.

## The Catch

Vs Hanko/Authelia/Keycloak/Ory: passkey-ONLY OIDC IdP (no passwords). Homelab/MCP-scoped, not enterprise IAM. Free path is self-host only.

## Verdict

BSD-2-Clause passkey-only OIDC. Self-host; not enterprise IAM.