# Logto documentation

> Official documentation for Logto, an identity and access management (IAM) platform for developers. Covers authentication (sign-up and sign-in, social sign-in, enterprise SSO, MFA, passwordless), authorization (RBAC, API protection), multi-tenant organizations, user management, and auth for AI agents and MCP servers, with quick starts for popular web, mobile, and backend frameworks.

Logto is built on OpenID Connect (OIDC), OAuth 2.1, and SAML. It runs as a hosted service (Logto Cloud) or self-hosted from the open-source core at github.com/logto-io/logto. The product site is logto.io; this site hosts the documentation.

## Getting started

- [Introduction](https://docs.logto.io/introduction): What Logto is and how it works
- [Plan your architecture](https://docs.logto.io/introduction/plan-your-architecture): Choosing between B2C and B2B setups
- [Set up Logto Cloud](https://docs.logto.io/introduction/set-up-logto-cloud): Create a tenant and configure your first application
- [Quick starts](https://docs.logto.io/quick-starts): Integration guides for web, mobile, and backend frameworks

## Core guides

- [Integrate Logto](https://docs.logto.io/integrate-logto): Connect your applications to Logto
- [End-user flows](https://docs.logto.io/end-user-flows): Sign-up and sign-in, social sign-in, enterprise SSO, MFA, and account management
- [Authorization](https://docs.logto.io/authorization): Role-based access control and permissions
- [API protection](https://docs.logto.io/api-protection): Validate Logto-issued tokens in your backend, per framework
- [Organizations](https://docs.logto.io/organizations): Multi-tenant organizations for B2B apps
- [User management](https://docs.logto.io/user-management): Manage users, profiles, and identities
- [Connectors](https://docs.logto.io/connectors): Email, SMS, social, and enterprise SSO connectors
- [Integrations](https://docs.logto.io/integrations): Per-provider setup guides for social sign-in, enterprise SSO, email, and SMS
- [Customization](https://docs.logto.io/customization): Sign-in experience branding, custom UI, and localization
- [Security](https://docs.logto.io/security): Password policies and attack protection
- [Developers](https://docs.logto.io/developers): Webhooks, audit logs, and custom token claims

## AI and MCP

- [AI integration use cases](https://docs.logto.io/use-cases/ai): Overview of using Logto with AI apps, agents, and MCP servers
- [Add auth to an MCP server](https://docs.logto.io/use-cases/ai/mcp-server-add-auth)
- [Enable third-party AI agent access](https://docs.logto.io/use-cases/ai/enable-third-party-ai-agent-access)
- [Connect your agent to third-party APIs](https://docs.logto.io/use-cases/ai/connect-your-agent-to-third-party-apis)
- [Logto MCP server](https://docs.logto.io/logto-cloud/logto-mcp-server): Remote MCP server that sets up Logto integrations and answers Logto questions from your AI application

## Deployment

- [Logto Cloud](https://docs.logto.io/logto-cloud): The hosted service, plans, and tenant settings
- [Logto OSS](https://docs.logto.io/logto-oss): Self-hosting the open-source core

## API reference

- [Logto API reference](https://openapi.logto.io): REST API reference for Logto

## Other Logto sites

- [logto.io](https://logto.io): Product site and pricing
- [Blog](https://blog.logto.io): Guides on authentication, authorization, and identity management
- [Auth Wiki](https://auth-wiki.logto.io): Encyclopedia of authentication and authorization concepts
- [GitHub](https://github.com/logto-io/logto): Open-source core repository