Pricing

Pay for identity activity,
not seats or tiers.

One plan. Every core identity primitive is included from day one. You pay for identity activity as it happens, plus a small flat fee for the infrastructure you keep running. A dormant user never costs you anything.

BETA

Billing is not switched on yet, so no account is charged today. The rate card below is what will apply once invoicing goes live, and we'll announce before the first charge.

Identity activity

METERED

A $1 usage credit is applied automatically every month before anything is charged. Human and machine authentication are priced the same: agents and services are first-class actors here, not a metered upsell.

Human authentication
sign-ins, MFA challenges
$0.50
per 10,000 operations
Machine authentication
agent & service credentials
$0.50
per 10,000 operations
API key verification
per successful key check
$0.20
per 10,000 operations
Identity lifecycle
signups, invitations, membership changes
Free

Infrastructure capacity

RECURRING

Billed for keeping a resource live, prorated by the day. Creating, changing, or deleting one is always free.

Issuers
first 2 included
$2
/month each additional
Custom domains
no included allowance
$5
/month each
Platform fee $5/month flat
60-day trial

Metered activity and the platform fee are waived for your first 60 days. Custom domains and issuers beyond the included 2 still bill during the trial, because they carry real infrastructure cost even when idle.

Worked examples

What this looks like on a bill

Small account, default capacity

5,000 human logins + 1,000 API key checks · 2 issuers · 0 custom domains

Metered activity$0.27
Usage credit−$0.27
Capacity (within included)$0.00
Platform fee$5.00
Total $5.00/month
Growing account, one extra issuer + a custom domain

50,000 human + 10,000 machine logins + 20,000 API key checks · 3 issuers · 1 custom domain

Metered activity$3.40
Usage credit−$1.00
Capacity (1 issuer + 1 domain)$7.00
Platform fee$5.00
Total $14.40/month

Full definitions, rate table, and how the trial and usage credit interact live in the pricing documentation.

Principles

How we think about pricing

Identity pricing has a bad reputation: a maze of per-seat gates and metered internals nobody can predict. We built this model to be the opposite. You're not charged for a user existing, a seat sitting idle, or an internal retry firing.

pricing principles

One plan: every core identity primitive is available from day one, nothing gated behind an upgrade

Usage-based: pay for meaningful identity activity, not raw internal events

No surprise multipliers: webhook retries, audit fan-out, and failed operations never inflate your bill

Capacity is billed separately: issuers and domains are priced for standing infrastructure, never for the API call that creates or changes them

FAQ

Common questions

Why isn't this priced per monthly active user or per seat?

Because signups, invitations, and membership changes are free: you're never billed for a user simply existing. You pay for authentication activity when it actually happens, and for the infrastructure you keep running. A dormant user costs you nothing.

What counts as billable identity activity?

Three things today: human authentication, machine authentication, and API key verification. Identity lifecycle operations (signups, invitations, membership changes) are tracked as activity but free. Everything else, including reads, config changes, webhook deliveries and retries, and failed requests, is never metered.

What's the $1 monthly credit?

Every account gets $1 of usage credit each month, applied automatically to offset metered activity charges before anything is billed. Unused credit doesn't roll over to the next month.

Do webhooks, retries, or failed requests increase my bill?

No. Only the identity operations listed above are metered. Internal implementation details, like retries, audit-record fan-out, and failed writes, never multiply your bill.

Is there a free tier?

Every account starts with a 60-day trial: metered activity and the platform fee are waived (custom domains and issuers beyond the included 2 still bill, since that's standing infrastructure cost). After the trial, the rate card above applies uniformly. There's no separate discounted tier.

When does billing actually start?

Billing is not switched on yet, and no account is being charged. This page describes the rate card that will apply once invoicing goes live; we'll announce before the first charge.

Get started

One API. Every identity. Free to start.

Create an account, grab your API keys, and model users, organizations, services, and agents in one system. No credit card, no sales calls.

  • 60-day free trial
  • No credit card required
  • Every feature included