AgentIndex icon
AgentIndex
shellgate logo
shellgate
★ 15
vs
tsidp logo
tsidp
★ 684

shellgate vs tsidp

shellgate: Shellgate acts as a secure gateway between AI agents and your infrastructure, ensuring agents never directly access sensitive credentials like API keys or SSH keys. It enforces granular access control, logs every request, and intercepts dangerous commands for human approval, significantly enhancing the security and audibility of AI agent operations.; tsidp: `tsidp` is an experimental OpenID Connect (OIDC) and OAuth Identity Provider that integrates with your Tailscale network, enabling applications to authenticate users using their Tailscale identities. It supports both OIDC-compatible applications and authenticated MCP client/server connections, offering flexible deployment options via Docker or direct Go execution.

01

TL;DR

shellgate logo
shellgateSecurity & Safety · ★ 15

Securely connecting AI agents to external APIs without exposing real credentials.

Read shellgate full review →
tsidp logo
tsidpSecurity & Safety · ★ 684

Centralized authentication for self-hosted applications within a Tailscale network.

Read tsidp full review →
02

Side-by-Side Comparison

Field
shellgate logoshellgate
tsidp logotsidp
Category
Security & Safety
Security & Safety
Stars
★ 15
★ 684
License
MIT
BSD-3-Clause
Install Command
docker run -d -p 3000:3000 -e DATABASE_URL=postgres://user:pass@host:5432/shellgate -e SESSION_SECRET=$(openssl rand -hex 32) ghcr.io/matthiastjong/shellgate:latest
echo 'services: tsidp: container_name: tsidp image: ghcr.io/tailscale/tsidp:latest volumes: - tsidp-data:/data environment: - TAILSCALE_USE_WIP_CODE=1 - TS_STATE_DIR=/data - TS_HOSTNAME=idp - TSIDP_ENABLE_STS=1 # Optional: Tailscale auth key for automatic node registration # - TS_AUTHKEY=tskey-auth-xxxxx # REPLACE WITH YOUR_TAILSCALE_AUTHKEY volumes: tsidp-data:' > compose.yaml && docker compose up -d
Updated
4mo ago
2d ago
Open Source
Yes
Yes
Website
↗ Visit
↗ Visit
GitHub
↗ GitHub
↗ GitHub
Tags
AI Agent Security, API Gateway, Credential Management
OpenID Connect, OAuth, Identity Provider
03

Features

shellgate logoshellgate
01Gateway Proxy for API/SSH with credential injection.
02Scoped and revocable token management for agents.
03Human-in-the-loop guard for dangerous commands/APIs.
04Comprehensive audit logging of all agent activities.
05MCP (Model Context Protocol) server for seamless agent integration.
tsidp logotsidp
01Functions as an OIDC/OAuth Identity Provider tightly integrated with your Tailscale network.
02Authenticates applications and services using existing Tailscale identities.
03Supports OpenID Connect and OAuth protocols, including Dynamic Client Registration (DCR) and Secure Token Service (STS).
04Offers robust access control through Tailscale Application capability grants for UI and DCR endpoints.
05Deployable with Docker, Docker Compose, or as a Go application, supporting persistent state storage.
04

Use Cases

shellgate logoshellgate
↳Securely connecting AI agents to external APIs without exposing real credentials.
↳Allowing agents to execute commands on remote SSH servers with approval and auditing.
↳Protecting against prompt injection by intercepting dangerous agent commands.
↳Centralized management and revocation of AI agent access permissions.
↳Providing persistent memory and a knowledge base for AI agents.
tsidp logotsidp
↳Centralized authentication for self-hosted applications within a Tailscale network.
↳Integrating SaaS products with Tailscale identities by exposing tsidp via Tailscale Funnel.
↳Acting as an Identity Provider for platforms like Proxmox, Grafana, or Jellyfin.
↳Enabling secure client/server authentication based on the Model Context Protocol (MCP).
05

Best For

shellgate logoshellgate
—
tsidp logotsidp
Hidden Gem
FAQ

FAQ

What is the difference between shellgate and tsidp?
Both shellgate and tsidp are in the Security & Safety category. shellgate has 15 stars, while tsidp has 684 stars.
Which is better, shellgate or tsidp?
The best choice depends on your use case. Choose shellgate if Securely connecting AI agents to external APIs without exposing real credentials., and tsidp if Centralized authentication for self-hosted applications within a Tailscale network..
Is shellgate free or open source?
Yes, shellgate is open source on GitHub (MIT).
Is tsidp free or open source?
Yes, tsidp is open source on GitHub (BSD-3-Clause).
Cloud Infrastructure
Ad

Deploy on DigitalOcean

Host your MCP servers, Docker containers, and AI agents with $200 free credit over 60 days.

Claim $200 Free Credit
→

Related

Alternatives to shellgate →Alternatives to tsidp →shellgate details →tsidp details →