Orgs
B2B-first by design
Identity built around organizations from day one, with multi-tenant architecture, sign-in policies for each organization, and admin controls already in place.
AuthKit
The standard for modern auth
Ship auth in minutes, with no rewrite between your first and your largest customer. Free up to 1 million users.
- Cursor
- Anthropic
- Granola
- Synthesia
- Wispr Flow
- Decagon
- Baseten
Every auth feature.Already shipped.
Ship auth fast
- Passwords, passkeys & MFA
- All major social login providers
- Organizations
- Role-based access control
- Auth for AI agents & MCP
- Bot & abuse protection
- User waitlist
Sell to enterprise
- SSO: SAML & OIDC
- Directory Sync (SCIM)
- Fine-grained access control
- Self-serve IdP setup
- Per-org auth config
- Audit Logs
- Entitlements
Customize & scale
- Drop-in UI widgets
- API Keys
- Feature flags
- Analytics
- User impersonation
- Third-party integrations
- Localization
Integrate in minutes with AI.
Run and an AI agent sets up AuthKit for you. It detects your framework, installs the SDK, writes your auth routes and middleware, and runs your build to check the result.
Framework-aware: Next.js, Laravel, TanStack Start, SvelteKit, Django
No account needed
Run the installer and try AuthKit without an account.
AuthKit setup animation showing the WorkOS CLI generating a finished Super App sign-in screen, then customizing it as a branded hosted page, a drop-in members widget, or a custom UI built on the API.
Sign-in that feels like part of your app.
Start with hosted pages that match your brand, or go as custom as your product needs.
AuthKit setup animation showing the WorkOS CLI generating a finished Super App sign-in screen, then customizing it as a branded hosted page, a drop-in members widget, or a custom UI built on the API.
AuthKit setup animation showing the WorkOS CLI generating a finished Super App sign-in screen, then customizing it as a branded hosted page, a drop-in members widget, or a custom UI built on the API.
More than a login box.A complete identity platform.
Authentication, user management, access control, and B2B infrastructure unified in one platform.
Enterprise Authentication
Support every IdP
Save months of work integrating SSO and Directory Sync. Customers connect their own identity provider through the self-serve Admin Portal, without back-and-forth support tickets.
RBAC
Secure and flexible RBAC
Define roles and permissions once, assign them per organization, and read them straight from the user’s session for every access check.
Roles
PermissionsAdmin
PermissionsAdmin
Radar
Stop abuse before it reaches your app
Add Radar to block bots and free account abuse from stealing valuable resources in real time, powered by advanced detections and device fingerprinting.
Free trial abuseBlocked
SSO loginAllowed
Bot detectedBlocked
Disposable emailChallenged
Ready for your users,and their agents.
Agents are fast becoming how people discover and use software. AuthKit gives them a sanctioned way in, on the same users, organizations, and roles you already have.
MCP Auth
Connect any MCP client
ChatGPT, Claude, and Cursor connect to your app with fully managed OAuth. AuthKit keeps up with the MCP spec, so you don’t have to.
Agent Auth
Agents that act for a user
Mint short-lived, revocable tokens for your agents, capped by the user’s own permissions. Built on your existing roles, no second system.
Agent Registration
Sign-up built for agents
Agents sign up for your app through auth.md, an open spec by WorkOS. Publish your own, or let AuthKit host it for you.
Reliability & Security
Built to protect every login.Proven to stay online.
99.99%
Historical uptime
SOC 2 Type 2
GDPR
CCPA
HIPAA
Customer testimonials
“Cursor now runs completely on WorkOS AuthKit. Login times are much faster, the signup page looks much better, and we’re no longer subject to Auth0’s customer-hostile and opaque pricing.”
Pricing
Your first million users, for free.
Launch on AuthKit and grow without watching the meter. You pay nothing until you pass a million monthly active users, and staging environments are never billed.
- First 1M monthly active users
- Free
- Each additional 1M MAUs
- $2,500/mo
Frequently asked questions
AuthKit includes authentication, session management, organizations, and role-based permissions. It supports email and password, passkeys, social login, passwordless email codes, MFA, and enterprise SSO. Use the hosted login experience or build your own with the APIs.
- View pricing
AuthKit is free for your first 1 million monthly active users. Each additional million costs $2,500 per month. Enterprise SSO and Directory Sync are billed separately per connection. Custom domains and other paid features have separate pricing.
- Explore migration guides
Yes. WorkOS has migration guides for Auth0, Clerk, Firebase, AWS Cognito, Supabase, and other providers. If your current provider lets you export password hashes in a supported format, you can import them into WorkOS so users keep their existing passwords.
- Explore integration options
Yes. You can build your own sign-up and sign-in flows with the AuthKit APIs. You control the interface, while WorkOS manages authentication, user accounts, and sessions.
- Explore organization policies
Yes. You can set authentication policies for each organization, requiring enterprise SSO for one customer, allowing other sign-in methods for another, and enforcing MFA where needed. Users can belong to multiple organizations with different roles in each.
- Explore customization
You can customize logos, colors, fonts, layouts, copy, and light and dark themes in the WorkOS Dashboard. Use custom CSS for more detailed styling. A paid custom domain add-on lets you host sign-in on your own domain.
- Get started with AuthKit
Use the WorkOS AI installer or follow a quickstart for your framework. Guides and example apps cover Next.js, React, Remix, Node.js, Python, and Ruby.
Start building today.
The auth layer trusted by OpenAI, Anthropic, and Cursor is ready for your app too. What will you build?
Still have questions?
Chat with our team to get hands-on guidance for your implementation, migration, or rollout.