Welcome to Scalekit

Authentication isn't why you started building your app. Whether it's for humans or AI agents, Scalekit hands you the full auth stack.

Implement authentication in minutes

Add MCP auth, Agent Auth, or SSO as modular components - or adopt the full-stack platform for your B2B, AI application

Modular Auth

Use standalone auth modules with your existing auth system—designed to layer on top

MCP Auth

Secure remote MCP servers with OAuth 2.1, CIMD/ dynamic client registration, and short-lived tokens

Agent Auth

Outbound Auth for AI agents and workflows with token vault and delegated OAuth consent

Single Sign-on

Enable SAML or OIDC single sign-on for any enterprise identity provider

SCIM Provisioning

Automate user and group provisioning and deprovisioning

Full stack auth platform

Use Scalekit as your complete identity layer — users, orgs, sessions, and all auth modules included

Quickstart

User lifecycle

Implement login, sign-up & session management

Auth methods

Add OTP, magic link, passkey, and social authentication flows

Multi-tenancy

Manage multiple orgs and users with isolation and home realm discovery

Authorization

Define roles, permissions, and RBAC

Enterprise SSO

Enable single sign-on with SAML or OIDC for enterprise identity providers

API Auth

Issue M2M credentials, org-level tokens, and user-scoped tokens for API access

Extensibility & Controls

Extend, customize, and govern every auth flow

Webhooks

Receive real-time events for authentication and user lifecycle updates

Interceptors

Apply custom checks or logic during authentication flows

Branding

Customize login surfaces and emails to match your app’s identity

Audit logs

Monitor and log every authentication activity and webhook events

Developer resources

Build faster with SDKs, reference docs, and ready‑to‑use tools

SDKs

Drop-in libraries to add auth to your app quickly

Code samples

Copy-and-paste examples for common auth flows

Developer community

Get help, share ideas, and learn from other builders

Changelogs

See what’s new, what changed, and how to upgrade

Security, Compliance & Availability

Encrypted, isolated, and globally available for production workloads

⊕ AES-256 for data at rest, TLS 1.3 in transit, and hashed secrets

⊕ Logical separation with enforced access controls for every org

⊕ SOC 2, ISO 27001, GDPR, and CCPA compliant

⊕ 99.99% uptime with high redundancy across multiple regions