> ## Documentation Index
> Fetch the complete documentation index at: https://docs.agentfront.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Authentication & Authorization

> Three-tier auth model from public access to full OAuth 2.1 orchestration

FrontMCP implements a flexible **three-tier authentication system**. Choose the right level for each deployment scenario — from open development servers to production multi-tenant systems.

| Mode | How It Works | Best For |
| - | - | - |
| **Public** | No auth required, anonymous sessions | Development, testing, public APIs |
| **Transparent** | Pass-through tokens from external IdPs | Existing Auth0, Okta, Azure AD setups |
| **Orchestrated** | Full OAuth 2.1 server (local or remote) | Multi-app, federated auth, progressive auth |

<CardGroup cols={3}>
  <Card title="Auth Overview" icon="shield-check" href="/frontmcp/authentication/overview">
    Complete authentication guide
  </Card>

  <Card title="Auth Modes" icon="layer-group" href="/frontmcp/authentication/modes">
    Deep dive into all three modes
  </Card>

  <Card title="Progressive Auth" icon="stairs" href="/frontmcp/authentication/progressive">
    On-demand scope elevation
  </Card>

  <Card title="CIMD" icon="fingerprint" href="/frontmcp/authentication/cimd">
    Multi-account disambiguation
  </Card>

  <Card title="Local OAuth" icon="house" href="/frontmcp/authentication/local">
    Built-in OAuth 2.1 server
  </Card>

  <Card title="Remote OAuth" icon="cloud" href="/frontmcp/authentication/remote">
    External IdP integration
  </Card>

  <Card title="Skills HTTP Auth" icon="key" href="/frontmcp/authentication/skills-auth">
    API key and JWT auth for skill endpoints
  </Card>
</CardGroup>


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.