Snapshot
Continue to About ↓- What it does
- SuperTokens is an open-source authentication and session-management suite that developers add to their applications through frontend and backend SDKs, running as a managed cloud service or self-hosted on their own infrastructure.
More detail
- It provides sign-up and sign-in methods, session handling, and user and access-management features, with most of the codebase free to use under an open-core model.
- Best for
- Engineering teams that want to own user data and customize login flows, including startups needing fast setup with prebuilt UI and teams adding SSO, multi-tenancy, MFA, or RBAC to an app.
- Pricing
- Cloud (managed) pricing is $0.02 per monthly active user, free under 5,000 MAUs, with a $100 minimum monthly billing.
More detail
- Paid add-ons bill per MAU: Multi-factor Authentication at $0.01/MAU and Account Linking at $0.005/MAU, both with a $100/month minimum, and dashboard users cost $20/user/month after 3
- Main limitation
- Buyers wanting a no-code, fully managed identity product with no backend operations, since integration requires frontend and backend SDK work and self-hosting means running and securing the SuperTokens Core yourself.
- Record
- Living and monitored
- Reviewed
- Evidence
- Public web research
- Machine access
- Structured profile ↗
About
- SuperTokens is an open-source authentication and session-management suite that developers add to their applications through frontend and backend SDKs, running as a managed cloud service or self-hosted on their own infrastructure.
- It provides sign-up and sign-in methods, session handling, and user and access-management features, with most of the codebase free to use under an open-core model.
What it helps with
- Building production-grade login, sign-up, session management, and user management without building OAuth and session inf
- Vendor lock-in and loss of control over user data, addressed by self-hosting with your own database.
- Unpredictable authentication costs at scale, addressed by usage-based pricing and free self-hosting of open-source featu
- Migrating from an incumbent auth provider without forcing password resets or logouts, using bulk and lazy migration.
- Session hijacking and token mishandling, addressed by session recipes, token rotation, and claims validation.
- Enterprise requirements such as SSO, multi-tenancy, MFA, RBAC, and account linking.
Capabilities
A practical view of what is available and where limitations apply.
| Offering | Available | Detail |
|---|---|---|
| Email/password and passwordless login | Yes | Email-password, username-password, phone-password, magic links, and SMS/email OTP are documented. |
| Social login and SSO | Yes | Google, GitHub, Facebook, Apple, and custom providers; SAML SSO and enterprise login are documented. |
| Session management | Yes | Session verification, invalidation, subdomain sharing, and cookie or header-based sessions are documented. |
| Multi-factor authentication | Yes | TOTP, OTP, passkeys as a factor, recovery codes, and step-up auth; billed as a paid add-on with a minimum. |
| Multi-tenancy and organization support | Limited | Documented as a capability, but pricing is contact-sales only and undisclosed. |
| Machine-to-machine auth | Limited | Client-credentials flow is documented, but it is contact-sales only with undisclosed pricing. |
| Self-hosting with your own database | Yes | Free for open-source features with no MAU limit; you operate and secure the SuperTokens Core yourself. |
| User management dashboard | Yes | Included with 3 free dashboard users, then $20 per user per month. |
| Migration tooling from other providers | Yes | Account, session, and MFA migration tooling is documented, including bulk and lazy migration without password resets. |
| SOC2 compliance | Yes | Listed as a core feature on the pricing page; independent verification was not in the evidence. |
Bot trust
How confidently AI systems can verify this profile from public evidence.
—of 100
ChatGPT—/100
Claude—/100
This profile has not completed a Bot Score assessment yet.
Evidence
Where this record came from, when it was reviewed, and how confidently it can be used.
- Verification
- Scribble researched these facts from the linked public sources.
- The owner has not manually confirmed every field.
- Last reviewed
- Primary source
- supertokens.com
Technical profile details
Record ID
151d26fc-3327-451c-be4e-25f21d670355Canonical URLhttps://profiles.scribble.network/listing/supertokens-151d26fc