AuthKit

The standard for modern auth

Ship auth in minutes, with no rewrite between your first and your largest customer. Free up to 1 million users.

  • Cursor
  • Anthropic
  • Granola
  • Synthesia
  • Wispr Flow
  • Decagon
  • Baseten

Every auth feature.Already shipped.

Ship auth fast

  • Passwords, passkeys & MFA
  • All major social login providers
  • Organizations
  • Role-based access control
  • Auth for AI agents & MCP
  • Bot & abuse protection
  • User waitlist

Sell to enterprise

  • SSO: SAML & OIDC
  • Directory Sync (SCIM)
  • Fine-grained access control
  • Self-serve IdP setup
  • Per-org auth config
  • Audit Logs
  • Entitlements

Customize & scale

  • Drop-in UI widgets
  • API Keys
  • Feature flags
  • Analytics
  • User impersonation
  • Third-party integrations
  • Localization

Integrate in minutes with AI.

Run and an AI agent sets up AuthKit for you. It detects your framework, installs the SDK, writes your auth routes and middleware, and runs your build to check the result.

Framework-aware: Next.js, Laravel, TanStack Start, SvelteKit, Django, and 10 more.

No account needed

Run the installer and try AuthKit without an account.

AuthKit setup animation showing the WorkOS CLI generating a finished Super App sign-in screen, then customizing it as a branded hosted page, a drop-in members widget, or a custom UI built on the API.

Sign-in that feels like part of your app.

Start with hosted pages that match your brand, or go as custom as your product needs.

AuthKit setup animation showing the WorkOS CLI generating a finished Super App sign-in screen, then customizing it as a branded hosted page, a drop-in members widget, or a custom UI built on the API.

AuthKit setup animation showing the WorkOS CLI generating a finished Super App sign-in screen, then customizing it as a branded hosted page, a drop-in members widget, or a custom UI built on the API.

More than a login box.A complete identity platform.

Authentication, user management, access control, and B2B infrastructure unified in one platform.

Orgs

B2B-first by design

Identity built around organizations from day one, with multi-tenant architecture, sign-in policies for each organization, and admin controls already in place.

Organization A
Organization B

Enterprise Authentication

Support every IdP

Save months of work integrating SSO and Directory Sync. Customers connect their own identity provider through the self-serve Admin Portal, without back-and-forth support tickets.

RBAC

Secure and flexible RBAC

Define roles and permissions once, assign them per organization, and read them straight from the user’s session for every access check.

Roles
Acme, Inc.
PermissionsAdmin
PermissionsAdmin

Radar

Stop abuse before it reaches your app

Add Radar to block bots and free account abuse from stealing valuable resources in real time, powered by advanced detections and device fingerprinting.

Ready for your users,and their agents.

Agents are fast becoming how people discover and use software. AuthKit gives them a sanctioned way in, on the same users, organizations, and roles you already have.

MCP Auth

Connect any MCP client

ChatGPT, Claude, and Cursor connect to your app with fully managed OAuth. AuthKit keeps up with the MCP spec, so you don’t have to.

MCP docs

Agent Auth

Agents that act for a user

Mint short-lived, revocable tokens for your agents, capped by the user’s own permissions. Built on your existing roles, no second system.

Agent Auth docs

Agent Registration

Sign-up built for agents

Agents sign up for your app through auth.md, an open spec by WorkOS. Publish your own, or let AuthKit host it for you.

Learn about auth.md

Reliability & Security

Built to protect every login.Proven to stay online.

  • SOC 2 Type 2
  • GDPR
  • CCPA
  • HIPAA

Customer testimonials

“Cursor now runs completely on WorkOS AuthKit. Login times are much faster, the signup page looks much better, and we’re no longer subject to Auth0’s customer-hostile and opaque pricing.”
Arvid LunnemarkCo-founder, Cursor

Pricing

Your first million users, for free.

Launch on AuthKit and grow without watching the meter. You pay nothing until you pass a million monthly active users, and staging environments are never billed.

First 1M monthly active users
Free
Each additional 1M MAUs
$2,500/mo

Start building today.

The auth layer trusted by OpenAI, Anthropic, and Cursor is ready for your app too. What will you build?

Still have questions?

Chat with our team to get hands-on guidance for your implementation, migration, or rollout.

Talk to an expert