🌐 Website • 📚 Documentation • 💻 GitHub • 🇫🇷 Français

Clav.run

Own Your Users • Zero Per-User Costs • Deploy in 3 Minutes • Secure Everything

Security concerns? Contact us at [email protected] • View Security Policy

---

Stop paying per user! Clav.run is the self-hosted identity server that puts you in control. Deploy in 1-2-3 minutes on any VPS or cloud, scale infinitely, and authenticate users with any method - passwords, biometrics, WebAuthn, MFA, or passwordless. Works in low-bandwidth zones, supports multiple accounts, and costs zero per user. 🚀

Built on the OpenID Certified™ node-oidc-provider library, delivering full OAuth 2.0 (RFC 6749) and OIDC compliance with advanced standards support.

⚠️ Note: While using the certified library, Clav.run itself has not undergone OpenID Foundation certification.

---

✨ Key Features

• 👥 Multi-Account Sessions – Seamlessly switch between identities
• 🎯 Native select_account Prompt – Simplifies account chooser UX
• 🌐 Federation Support – Connect with external identity providers
• ⚡ Scalable & Performant – Cluster-ready for high-load use cases
• 📱 Clean UI – Accessible, responsive login and consent flows
• 🔒 MFA Support – TOTP + email-based 2FA out-of-the-box
• 📊 Audit Logging – Track activity and session lifecycle

📄 See the full changelog • 🗺️ Check out our roadmap

---

🎯 Use Cases

Persona	Benefits
🚀 Startups	Fast to deploy, minimal complexity
👨‍💼 Solopreneurs	Zero recurring costs, full control over identity stack
🏢 SMBs	Centralized login across internal or client-facing apps
🔧 Developers	Flexible API, prebuilt flows, modern CLI
📱 Multi-App Teams	Full SSO and account linking across multiple tools and projects

---

🆚 Why Choose Clav.run?

Feature	Clav.run	Enterprise Solutions	Raw Library
Setup Time	🚀 Minutes	⏱️ Weeks	🛠️ Manual Setup
UI Included	✅ Complete	✅ Enterprise UI	❌ No
Self-Hosted	✅ Fully	❌ Cloud/Hybrid	✅ Yes
Cost	💰 Free	💸 Expensive	💰 Free
OpenID Certified	⚠️ Library Only	✅ Full	✅ Full

Enhanced library with complete UI and streamlined setup.

---

🚀 Quick Start

🔒 Option 1: Use Production Release (Recommended)

# Download the latest release
wget https://github.com/Dahkenangnon/clav.run/releases/latest/download/clav-run-v*.tar.gz
tar -xzf clav-run-v*.tar.gz && cd clav-run-release

# System check & setup
yarn clav requirements
yarn clav setup

# Stay up-to-date
yarn update latest

🛠️ Option 2: Run from Source

git clone https://github.com/Dahkenangnon/clav.run.git
cd clav.run
yarn install

yarn clav requirements
yarn clav setup
yarn jwks generate

yarn dev

📍 Visit http://localhost:9007 to get started.

---

🛠️ CLI Overview

# General
yarn clav requirements              # Check prerequisites
yarn clav setup                     # Interactive setup
yarn clav config validate           # Validate current config
yarn clav config set <key> <value> # Set a config key

# OIDC Clients
yarn clav client add                # Add a new client
yarn clav client list               # List registered clients

# Keys
yarn jwks generate                  # Generate new JWKS
yarn jwks quick                     # Quick key generation

# Updates
yarn update latest                  # Update to latest version
yarn update list                    # View all available versions
yarn update --target 1.0.0          # Update to specific version
yarn update --interactive           # Interactive mode

# Server
yarn start                          # Start dev server
yarn restart                        # Restart via PM2

---

📦 Deployment

Using PM2

# Start in production mode
pm2 start ecosystem.config.cjs --env production

# Or in development mode
pm2 start ecosystem.config.cjs --env development

---

🆘 Support & License

• 🛡 Security Issues: [email protected]
• 📚 Documentation: https://clav.run/docs
• 📄 License: MIT License - see LICENSE

---

Clav.run – Identity in Motion

---