Introduction
The Inrupt Enterprise Solid Server (ESS) is an enterprise-grade data platform built on the Solid Protocol. It gives individuals and organizations secure, interoperable storage — called Pods — where data is stored under the owner's control and shared on their terms.
Storage
Pods are where users store their data. Each Pod is a standard HTTP resource server — clients create, read, update, and delete resources using standard HTTP methods. ESS supports the Solid Protocol specification, so any Solid-compliant client can interact with Pod data without vendor-specific APIs.
For more information, see Pod Storage Service.
Identity
ESS integrates with your existing enterprise identity infrastructure. Clients authenticate with an external OIDC-compliant Identity Provider (e.g., Okta, Azure AD, Ping Identity) and exchange the IdP's token for an ESS Access Token via the Platform Management Service. No proprietary identity broker is required. User provisioning — including account creation, WebID management, and storage allocation — is handled through the Platform Management API.
Each user has a WebID — a URI that uniquely identifies them across the Solid ecosystem. Pods and WebIDs are independent, allowing multiple Pods per identity and flexibility in how identities and storage are provisioned.
For more information, see Token Exchange.
Access Control
ESS provides fine-grained access control through two complementary mechanisms:
Access Control Policies (ACP) — Resource owners set policies that determine who can access their data and what operations are permitted.
Access Grants — A consent-based mechanism where resource owners grant specific access to requestors. Access Grants are W3C Verifiable Credentials, providing a portable, auditable record of consent.
For more information, see Authorization and Access Requests and Grants.
Notifications
ESS notifies applications when resources change. The Notification Delivery Service pushes notifications to remote HTTPS endpoints, enabling event-driven architectures without polling.
For more information, see Notification Services.
Security
ESS is designed for regulated industries and sensitive data:
Authentication — Native IdP integration with short-lived access tokens (5-minute default TTL)
Authorization — Fine-grained access control policies and consent-based Access Grants
Auditing — Comprehensive audit trail of all data access and operations
Encryption — Data protection in transit and at rest
For more information, see Security.
AI Agent Integration
ESS includes an MCP Service that enables AI agents and applications to securely access and manage personal data through the Model Context Protocol. AI agents operate within the same access control and consent framework as any other client — users grant access through Access Grants and can revoke it at any time.
For more information, see MCP Service.
Enterprise Grade
ESS is built for production deployments:
Microservices architecture — Each service scales independently to meet demand
High availability — Support for highly available deployment configurations
Flexible deployment — Standard enterprise deployment with optional Solid interoperability services when ESS needs to interoperate with other Solid servers
Monitoring — Built-in health checks, metrics, and centralized logging
Support — Up to 24/7 support with a commercial license. See Inrupt Support Center.
For more information, see Installation and Administration.
Last updated