Ory is the largest open source community in the world for cloud software application security. We maintain advanced open source security software solving authentication, authorization, access control, application network security, and delegation. Ory implements a variety of industry and best-practice standards including OAuth 2.0 / OAuth 2.1, OpenID Connect, Zero Trust Networking, Google Zanzibar Policy Framework, FIDO2 U2F, WebAuthn, TOTP, and more.

Ory Community

Hi, what should I do if I want my app to be able to send requests to the admin API (create identities, list them, etc)?

you will of course need some auth mechanism to verify if the user has the correct permissions to do so.

you can probably rely on the kratos session + some permissions (keto) for admin user accounts.