OpenApe authorization server: grant issuance, revocation, introspection

Refresh token rotation, session revocation and reuse detection for FeathersJS authentication.

**Centralized authorization** for AgentProdReady — identity normalization, allow/deny decisions, delegation, revocation, and Security Context production.

Offline verifier for the Trustable portable verify package. Checks a credential's integrity, its issuer's authorship and its revocation state with no network access.

Fastify plugin that adds an [IndieAuth Token Revocation endpoint](https://indieauth.spec.indieweb.org/#token-revocation) to a Fastify server.

The Ethereum Revocation List types for smart contract interaction.

A library for managing revocation of verifiable credentials in decentralized identity systems.

Portable default-deny policy, grants, risk gates, and revocation for Pactmark

The controller module for interacting with Ethereum revocation lists & resolving revocation entries for EIP-5539.

JWT authentication + refresh-token rotation with token revocation via `TokenStore` for Axiomify.

Provider-neutral replication protocol and executable reference state machine for mdbase authorities. It models stable record identity, pinned snapshots, scoped ordered changes, conditional idempotent mutations, conflicts, cursor reset, revocation, offline

OC Agent canonical messages, envelope formats (delegation/action/revocation), scope grammar, and verification. See https://github.com/orangecheck/oc-agent-protocol.

JWT token validation package with offline JWKS validation and Redis-based token revocation support

OAuth 2.0 server building blocks: RFC 8414 metadata, RFC 7662 introspection, RFC 7009 revocation, RFC 9126 PAR, RFC 7591 dynamic client registration. Cross-standard reusable; no Workers runtime dependency.

Hashed API tokens with scopes, masking, rotation, revocation, last-used tracking.

SDK for Auth verification, capability, receipt, revocation, pricing, and sidecar workflows.

Framework-agnostic authentication core: password hashing, JWTs, refresh rotation, revocation, pluggable storage

Warrant-gated MCP tools over MCP's own OAuth 2.1: a BrowserID 7521 assertion-grant AS + fail-closed per-call revocation checks. Every tool call attributable to 'agent X on behalf of human Y', revocable in one click.

Jiaozi Protocol core primitives — DID documents, Ed25519 keys, status.v1 signed revocation-freshness credentials, attest.v1, credit merkle anchors

Verifier-retained verification receipts (spec 303): commitment-split evidence that signature + scope + revocation were checked at time T. Public receipt = HMAC commitments only; private detail = vault-held opening material.