What is Stytch?
Stytch is an authentication and fraud prevention platform for B2B and consumer applications. It is made by Stytch and provides APIs, SDKs and prebuilt UI for sign-in, sessions, organization management, single sign-on and machine-to-machine access. The problem it solves is auth complexity at scale: teams get multi-tenancy, SSO, SCIM and role controls without building each flow and security policy themselves.
Key features
- Passwordless and password auth. Email magic links, one-time codes, OAuth, passkeys and passwords can be combined in one project.
- B2B organization management. Organizations, member invitations, roles, metadata and organization-level auth policies are built in.
- SSO and SCIM. SAML and OIDC connections, SCIM provisioning and just-in-time provisioning are available without a separate identity product.
- Sessions and authorization. Session management and role-based access control cover both people and machine-to-machine tokens.
- Fraud and risk tools. Optional CAPTCHA, bot detection, device fingerprinting, rate limiting and custom authorization verdicts add protection.
- Prebuilt UI. Login and admin portal components reduce the front-end work for common auth screens.
- Flexible deployment. Hosted APIs cover most teams, while enterprise plans add custom support and a 99.99% uptime SLA.
Who is Stytch for?
B2B SaaS companies that need SSO, SCIM and organization-level permissions, and consumer apps that want passwordless sign-in. It suits product teams that want auth APIs with prebuilt UI instead of a fully hosted identity suite, and platforms that need both human users and machine-to-machine tokens. It is also used by companies that want fraud signals next to authentication rather than in a separate tool.
Use cases
- Adding Google and Microsoft SSO for enterprise customers.
- Letting users sign in with passkeys or email magic links.
- Managing organizations, roles and member invitations in a B2B product.
- Issuing machine-to-machine tokens for service-to-service calls.
- Adding bot detection and device fingerprinting to a sign-up flow.
Pricing
Stytch uses pay-as-you-go pricing starting at $0 per month, with 10,000 monthly active users and AI agents, unlimited organizations, five SSO or SCIM connections and 1,000 M2M tokens included. Extra SSO or SCIM connections cost $125 each, custom branding and Stytch brand removal costs $99, and fraud fingerprints beyond 10,000 cost $0.005 each. Enterprise pricing is custom and adds volume discounts, a 99.99% uptime SLA, a private Slack channel, migration support and HIPAA with a business associate agreement. See the official Stytch pricing page.
Getting started
- Create a Stytch project in the dashboard.
- Choose the auth methods and organization model for your app.
- Install the SDK and add the public token and secret to your environment.
- Mount the auth routes and add the prebuilt UI or your own screens.
Alternatives
- Clerk is a hosted authentication and user management service.
- Better Auth is an open source TypeScript authentication framework.
- SuperTokens is an open source auth platform with managed options.
- Logto is an open source identity and access management product.
FAQ
Is Stytch free?
Yes. Stytch starts at $0 per month with 10,000 monthly active users, unlimited organizations, five SSO or SCIM connections and 1,000 M2M tokens. Usage beyond those amounts is billed pay as you go.
What is Stytch used for?
Stytch is used to add authentication, organization management and fraud prevention to applications. It supports passwordless sign-in, SSO, SCIM, sessions, RBAC and machine-to-machine tokens.
Stytch vs Auth0?
Both provide authentication and enterprise identity features. Stytch offers pay-as-you-go pricing with 10,000 free monthly active users and no feature gating, while Auth0 is a broader identity platform with its own plan structure. Teams often compare the total cost at their expected user and SSO volume.
Does Stytch support B2B organizations?
Yes. Stytch includes organizations, member invitations, roles, organization metadata and per-organization auth policies, along with SSO and SCIM connections.
Can Stytch handle fraud prevention?
Yes. Optional add-ons cover CAPTCHA, bot detection, device fingerprinting, intelligent rate limiting and custom authorization verdicts.
