Vaarta Identity Studio
Sign inBook a demo
Platform
SDKs

Small packages. Every rule you set, everywhere.

The web package renders the sign-in you designed. The backend verifier tells you who is calling. The edge package keeps devices on plan, even offline. Each takes the strict side of every security choice.

Book a demoAPI security
api.pyvaarta_iam
from vaarta_iam import (IamVerifier, Principal,
                       settings_from_env)
from vaarta_iam.fastapi import principal_dependency

# One verifier per process: one key cache,
# one revocation window.
verifier = IamVerifier(settings_from_env())
principal_of = principal_dependency(verifier)

@router.get("/dashboards")
async def dashboards(me: Principal = Depends(principal_of)):
    # the person, their organization and their roles
    ...
Packages

One package for each place your code runs

Every package reads Identity Studio's configuration. None hard-codes a method, a role name or a limit.

@vaarta/auth-flow · web

Framework-free TypeScript. Fetches your sign-in plan, already reconciled with policy, with a frozen fallback if it cannot.

vaarta_iam · backend

Python. Verifies tokens offline against your JWKS, falls back to introspection, and hands you the person, organization and roles.

vaarta_edge · edge

For gateways, kiosks, cameras and panels: signed entitlements checked on the device, usage buffered and sent when the network returns.

vaarta-credential-bridge · agents

A local MCP server that lets an agent sign in, run a command or sign with a stored credential, without seeing it.

A full REST API under /iam/sdk

Sign-in, users, organizations, roles, billing, metering, company sign-in, notifications and governance, for any language.

Fails safe, and says why

A missing setting is reported once at start-up. Every refusal carries a reason you can log: expired, revoked, wrong application.

Works with

Part of one platform

Hosted sign-in The flow the web package renders.Roles & permissions Check a permission key, never a role name.Edge & entitlements What the edge package enforces.AI agents & MCP The credential bridge for agents.
Which plans include it, and the limits that apply, are on the plans page.See plans →

Your first verified request, today

Create an environment, copy your credentials and verify a token in one line.

Book a demoStart free trial