MA

Matrix Authentication Service

OAuth 2.0 and OpenID Connect provider for Matrix homeservers

Matrix & XMPP ★ 284 stars Medium setup Apache-2.0

Matrix Authentication Service is a standalone OAuth 2.0 and OpenID Connect provider from Element that handles authentication for Matrix homeservers such as Synapse, moving Matrix login to delegated, standards-based auth. Written in Rust.

Key features

  • OAuth 2.0 and OIDC for Matrix
  • Delegated authentication
  • Modern login flows
  • Works with Synapse

Pros & cons

Strengths

  • Released under the Apache-2.0 license
  • First-class Docker support for quick deployment
  • Written in Rust
  • Tiny footprint — runs in 256 MB RAM

Trade-offs

  • Requires a Matrix homeserver
  • Auth component only

Is Matrix Authentication Service secure?

No known vulnerabilities affect Matrix Authentication Service's latest release (v1.27.0). OSV.dev lists 1 past advisory for the project; none of them applies to this release. No known vulnerabilities is not proof of security: it means none have been publicly catalogued.

  • Most recent fixed advisory CVE-2025-62425, published 2025-10-16 (363 days ago), fixed in 1.4.0

Source: OSV.dev, checked 2026-10-14. How this is measured.

Health badge

Maintain Matrix Authentication Service? Add its health score to your README. The badge links back to this page.

SelfHostIndex: 81 · excellent

Markdown
[![SelfHostIndex health score for Matrix Authentication Service](https://selfhostindex.com/badge/matrix-authentication-service.svg)](https://selfhostindex.com/app/matrix-authentication-service/)
HTML
<a href="https://selfhostindex.com/app/matrix-authentication-service/"><img src="https://selfhostindex.com/badge/matrix-authentication-service.svg" alt="SelfHostIndex health score for Matrix Authentication Service"></a>
reStructuredText
.. image:: https://selfhostindex.com/badge/matrix-authentication-service.svg
   :alt: SelfHostIndex health score for Matrix Authentication Service
   :target: https://selfhostindex.com/app/matrix-authentication-service/

The score is recomputed on every nightly rebuild from public repository data — see how it is calculated.

Similar matrix & xmpp apps