whichdevtool?
Menu
StacksDirectory Pricing changes Glossary
VPS and cloud servers App hosting and PaaS Managed databases Transactional email APIs Email marketing and newsletters Domain registrars CDN, DNS and edge security Monitoring, uptime and error tracking Auth and identity Frontend and full-stack frameworks Backend frameworks UI component libraries AI model APIs File and object storage Payments and billing Background jobs, queues and workflows ORMs and database toolkits

Hosted auth API (B2B and consumer) · by Stytch (Twilio)

Stytch

API-first authentication with multi-tenant B2B organizations, five free SSO or SCIM connections, and built-in bot and fraud detection; now part of Twilio.

Visit stytch.com ↗ Alternatives Free tier
Stytch homepage
§1

Overview

Stytch is an authentication and authorization API with separate data models for consumer apps and multi-tenant B2B apps. It covers passkeys, breach-resistant passwords, magic links, OTP, OAuth, SAML and OIDC SSO, SCIM provisioning, RBAC, sessions, M2M tokens and tools for authenticating AI agents and MCP servers. You can use its pre-built web and mobile components, headless SDKs, or raw APIs.

Pricing is a single pay-as-you-go plan with a $0 base fee and no feature gating. It includes 10,000 monthly active members, five SSO or SCIM connections, 1,000 M2M tokens and 10,000 device fingerprints; after that you pay per unit, with extra SSO or SCIM connections at $125 each. A $99 add-on allows full branding of the login experience.

A distinctive part of Stytch is its fraud and risk layer: device fingerprinting, invisible CAPTCHA, bot detection and intelligent rate limiting, sold as usage-based add-ons. Enterprise contracts add a 99.99% SLA, HIPAA BAA and dedicated support. Stytch has joined Twilio, so check roadmap and contract terms if long-term independence matters to you.

§2

Pricing and plans

Free tier

Pay-as-you-go with $0 base: 10,000 monthly active members, 5 SSO or SCIM connections, 1,000 M2M tokens, 10,000 fraud fingerprints, unlimited organizations and dashboard seats

At the limit Bills overage There are no hard caps; usage past the free allowances is billed at listed rates.

Plan Price What you get
Pay as you go $0 base 10,000 MAU, 5 SSO/SCIM connections, 1,000 M2M tokens included; usage beyond that billed
Custom branding add-on $99/mo Customizable brand and login experience, fixed fee
Fraud and risk $0.005/fingerprint 10,000 fingerprints included
Enterprise Custom Unlimited connections, 99.99% SLA, HIPAA BAA, dedicated Slack, migration support

The pricing page states there are no hard caps and that usage above the free allowances is billed at listed rates, but the per-MAU and per-M2M-token overage prices did not render on the page read, so afterFree is left general. HIPAA/BAA is listed under Enterprise. Stytch announced it has joined Twilio. No EU data-residency option was stated on the pages read.

Source: stytch.com/pricing · prices as published, excluding tax.

§3

What it does

B2B multi-tenancy
Organizations with per-org auth policies, JIT provisioning by domain, org discovery and IdP-driven role mapping.
SSO and SCIM
SAML and OIDC SSO plus SCIM provisioning and deprovisioning, five connections free.
Embeddable admin portal
An SDK that lets your customers configure SSO, SCIM and org settings inside your own dashboard.
Device fingerprinting
Fraud and bot detection, invisible CAPTCHA and rate limiting based on device intelligence, $0.005 per fingerprint after 10,000.
Connected Apps and agents
Tools to act as an OAuth provider for other apps, AI agents and MCP servers.
Delivery failover
SMS and email provider failover for one-time codes and magic links.
§4

Strengths and limitations

Strengths

  • No base fee and no feature gating
  • Five SSO or SCIM connections included free
  • Built-in device fingerprinting and bot defence
  • Unlimited dashboard seats and organizations

Limitations

  • Overage prices per MAU are not clearly shown on the pricing page
  • Branded login experience is a $99/mo add-on
  • HIPAA BAA and the 99.99% SLA require an Enterprise contract
  • Hosted only; no self-hosting
§5

Who it suits

Good for

  • B2B SaaS that needs SSO for a handful of early enterprise customers
  • Apps under active bot or credential-stuffing attack
  • Teams wanting headless APIs rather than a fixed UI

Look elsewhere if

  • Projects that must self-host
  • Teams that want an exact bill forecast before exceeding 10,000 MAU
§6

Alternatives to Stytch

Tool From Free option Stages
WorkOS AuthKit Hosted auth with enterprise SSO
$125/mo Free tier
FusionAuth Self-hostable CIAM server
$162/mo Free tier
Authgear Open-source CIAM (cloud, VPC or one-time self-host licence)
$50/mo Free tier
Supabase Managed Postgres backend platform
$25/mo Free tier
Asgardeo Hosted CIAM (with open-source self-hosted option)
$20/mo Free tier
Firebase Backend platform with document and realtime databases
Usage-based Free tier

All auth and identity →

§7

Questions

Is Stytch free?

The pay-as-you-go plan has no base fee and includes 10,000 monthly active users, five SSO or SCIM connections and 1,000 M2M tokens.

How much does an extra SSO connection cost on Stytch?

$125 per connection after the five included ones; Enterprise includes unlimited connections.

Who owns Stytch?

Stytch states on its homepage that it has joined Twilio.

Does Stytch offer bot protection?

Yes, as an add-on: device fingerprinting, invisible CAPTCHA and rate limiting, with 10,000 fingerprints included.

Sources read for this page