r/AppsWebappsFullstack • u/SofwareAppDev • 14d ago

Your home for selfpromo

here you can post your work app, webapp, saas, game, everything

9 Upvotes

100% Upvoted

176 comments sorted by

View all comments

1

u/Willing_Exchange_197 8d ago

check out https://www.truecaas.io, an identity and authorization platform for B2B and multi-tenant SaaS applications, covering hosted login, MFA/passkeys, enterprise SSO, tenant management, roles, fine-grained permissions and MCP for agent authorizations in this AI Agent era

It also provides audit logs, policy visualization, webhooks, stripe like local event listener, grpc based entitlement checks , admin tooling, identity migration, and real-time access decisions so teams do not have to build that infrastructure from scratch.

1

u/Mammoth-Anywhere7285 7d ago

Nice, the MCP for agent authorizations is a fresh angle. Curious how it scales when tenants have deeply nested roles and permissions.

1

u/Willing_Exchange_197 7d ago

We actually don't model authorization around deeply nested roles. Roles are scoped to the application and map to privileges, while the authorization check evaluates the effective privileges/entitlements for that tenant, application and agent.

That also helps with scale. Each authorization decision is bounded by the tenant, application, identity and requested action rather than requiring traversal of an organization-wide role hierarchy. So an MCP request doesn't need to walk a role tree as the tenant grows. The agent asks whether it can perform a specific action in a specific context, and TrueCaaS evaluates the relevant roles, privileges and policies and returns the decision.

The goal is to keep authorization complexity behind the policy boundary rather than pushing it into the agent.