This is the first release of Ory Talos, an open-source API key server built for high-throughput systems.
If your services, CI/CD jobs, or AI agents authenticate with API keys, Talos gives you one place to issue, verify, revoke, and manage them, without building credential infrastructure yourself.
- Verify at scale: low-latency API key verification with caching and eventual revocation
- Go offline: derive short-lived JWT and macaroon tokens from long-lived keys, so callers don't hit the server on every request
- Bring your own keys: import externally-issued API keys for unified verification
- Deploy your way: single binary with admin, self-service, or all-in-one modes; runs as a side-car or scales horizontally on Postgres, MySQL, or CockroachDB
- Operate predictably: structured logging, metrics, and tracing built in
- Solve agentic use cases: With derived Macaroon capability tokens.
For more information head over to https://www.ory.com/docs/talos