ory / kratos
Headless cloud-native authentication and identity management written in Go. Scales to a billion+ users. Replace Homegrown, Auth0, Okta, Firebase with better UX and DX. Passkeys, Social Sign In, OIDC, Magic Link, Multi-Factor Auth, SMS, SAML, TOTP, and more. Runs everywhere, runs best on Ory Network.
github.com/ory/kratosIndexed at 3699ae3Up to date with upstream
About this codebase
`repo` is a Go-based backend codebase that provides an identity/self-service and session HTTP API: it consumes incoming HTTP requests (plus JSON payloads and route parameters), routes them through handler/controller logic and supporting utilities, persists and retrieves identity/session state via SQL-backed persistence layers, and outputs structured JSON responses (including error objects) to clients; it also includes an `oryx` tooling area for migrations, randomness utilities, and watcher/integration tests.
Written by gpt-5.4-nano from the index
7,338 files and 8,367 symbols in 26 modules, led by Go (1,013 files) and Shell (9).
Code health
This codebase scores 6.7 out of 10 for code health, which we rate fair. It also scores maintainability 7.5 and static performance 9.9 out of 10. The three are scored separately and never blended into one number. Risk is concentrated, as it usually is: 78 of 7,338 files are git hotspots, and they average 3.2 — which is where the fixes pay off most.
On the leaderboards:#13 of 19 Go repos
Do next
3 things worth doing this quarter.
Worth planning
Update the decision “Do not bound schema structural size at loader layer”: the code it governs has moved on
Agents and reviewers still follow it, so they are steered by a rule the code no longer keeps.
- status
- Accepted, drifting
Small effort, worth a checkUpdate the decision “Reject pure
$refcycles but not mixed validation cycles”: the code it governs has moved onAgents and reviewers still follow it, so they are steered by a rule the code no longer keeps.
- status
- Accepted, drifting
Small effort, worth a checkDelete 260 unused symbols and files (2,288 lines)
Nothing in the graph reaches them, across 139 files; every reader and agent pays to skip them.
- symbols
- 260
- lines
- 2,288
- safe to delete
- Yes(inferred)
Medium effort
Use ory/kratos in your agent
Point Claude Code, Cursor, Codex or VS Code at this repository. Your agent gets the index this page is built from: cited answers, callers, history and health for any file.
https://api.repowise.dev/mcp/ory/kratosOne command, run anywhere. Adds the server to your local Claude Code config.
Docsclaude mcp add --transport http repowise https://api.repowise.dev/mcp/ory/kratos \ --header "Authorization: Bearer rw_live_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
This repo is public, so anyone with a Repowise account and an API key can connect.
Try asking
- get_overview()
- get_answer("how is kratos put together?")
- get_why("why is kratos structured this way?")
Prefer local? pip install repowise && repowise init indexes your own checkout, no account needed.
Go deeper
- OverviewEverything the index found, what changed this week, commits and decisions.
- DocumentationModule-by-module documentation, 1,258 pages, 1,258 written by a model.
- ArchitectureDependency graph, layers and third-party dependencies.
- Code healthEvery file's score, the findings behind it, tests and refactoring plans.
- CommitsEach commit's effect on code health, with agent provenance.
- ContributorsWho owns what, and where one person holds most of the knowledge.
- DecisionsArchitectural decisions mined from commits and pull requests.
- Ask this codebaseSign inGrounded answers over the indexed code.
Maintain this repo? Claim the page
Sign in with GitHub and we check that you are an admin or maintainer of ory/kratos. Then add a badge to the README that links readers here.
Use this repo from Claude or ChatGPT
Add this URL as a custom connector and sign in with repowise when asked. No API key to copy.
https://api.repowise.dev/mcp/ory/kratosFor maintainers
Add a badge to your README
Every badge is public, cached, and updates on its own after every index. Nothing to install.
Repowise badge
Links to this page, with no score on it. Adding it also re-indexes the repo every week.
[](https://repowise.dev/repo/ory/kratos?src=badge_wiki)Code health badge
The repo's health score out of 10, from the latest index.
[](https://repowise.dev/repo/ory/kratos?src=badge_health)Code health card
A larger card with the score, its change since the last index, and when it was measured. The HTML version follows the reader's light or dark theme.
[](https://repowise.dev/repo/ory/kratos?src=badge_card)How ory/kratos works
Headless cloud-native authentication and identity management written in Go. Scales to a billion+ users. Replace Homegrown, Auth0, Okta, Firebase with better UX and DX. Passkeys, Social Sign In, OIDC, Magic Link, Multi-Factor Auth, SMS, SAML, TOTP, and more. Runs everywhere, runs best on Ory Network. This page is a map of the ory/kratos repository, written primarily in Go, rebuilt from the source each time it is indexed. Repowise parses every symbol, computes a dependency graph, scores per-file code health from complexity, duplication, test coverage and churn, mines git history for hotspots and ownership, and lifts the architectural decisions into documentation you can read here or query through MCP.
The codebase has 7,338 files and 8,367 symbols in 26 modules, led by Go, Shell and Makefile. Code health is 6.7 out of 10, rated fair.
Use the links above to open each view, or connect this repository to your agent for grounded answers inside Claude, Cursor, Codex or VS Code.