Overview
Stytch is an authentication and authorization API with separate data models for consumer apps and multi-tenant B2B apps. It covers passkeys, breach-resistant passwords, magic links, OTP, OAuth, SAML and OIDC SSO, SCIM provisioning, RBAC, sessions, M2M tokens and tools for authenticating AI agents and MCP servers. You can use its pre-built web and mobile components, headless SDKs, or raw APIs.
Pricing is a single pay-as-you-go plan with a $0 base fee and no feature gating. It includes 10,000 monthly active members, five SSO or SCIM connections, 1,000 M2M tokens and 10,000 device fingerprints; after that you pay per unit, with extra SSO or SCIM connections at $125 each. A $99 add-on unlocks full branding of the login experience.
A distinctive part of Stytch is its fraud and risk layer: device fingerprinting, invisible CAPTCHA, bot detection and intelligent rate limiting, sold as usage-based add-ons. Enterprise contracts add a 99.99% SLA, HIPAA BAA and dedicated support. Stytch has joined Twilio, so check roadmap and contract terms if long-term independence matters to you.
Pricing and plans
checked 28 Sept 2026Free tier
Pay-as-you-go with $0 base: 10,000 monthly active members, 5 SSO or SCIM connections, 1,000 M2M tokens, 10,000 fraud fingerprints, unlimited organizations and dashboard seats
| Plan | Price | What you get |
|---|---|---|
| Pay as you go | $0 base | 10,000 MAU, 5 SSO/SCIM connections, 1,000 M2M tokens included; usage beyond that billed |
| Custom branding add-on | $99/mo | Customizable brand and login experience, fixed fee |
| Fraud and risk | $0.005/fingerprint | 10,000 fingerprints included |
| Enterprise | Custom | Unlimited connections, 99.99% SLA, HIPAA BAA, dedicated Slack, migration support |
What it does
- B2B multi-tenancy
- Organizations with per-org auth policies, JIT provisioning by domain, org discovery and IdP-driven role mapping.
- SSO and SCIM
- SAML and OIDC SSO plus SCIM provisioning and deprovisioning, five connections free.
- Embeddable admin portal
- An SDK that lets your customers configure SSO, SCIM and org settings inside your own dashboard.
- Device fingerprinting
- Fraud and bot detection, invisible CAPTCHA and rate limiting based on device intelligence, $0.005 per fingerprint after 10,000.
- Connected Apps and agents
- Tools to act as an OAuth provider for other apps, AI agents and MCP servers.
- Delivery failover
- SMS and email provider failover for one-time codes and magic links.
Strengths and limitations
Strengths
- No base fee and no feature gating
- Five SSO or SCIM connections included free
- Built-in device fingerprinting and bot defence
- Unlimited dashboard seats and organizations
Limitations
- Overage prices per MAU are not clearly shown on the pricing page
- Branded login experience is a $99/mo add-on
- HIPAA BAA and the 99.99% SLA require an Enterprise contract
- Hosted only; no self-hosting
Who it suits
Good for
- B2B SaaS that needs SSO for a handful of early enterprise customers
- Apps under active bot or credential-stuffing attack
- Teams wanting headless APIs rather than a fixed UI
Look elsewhere if
- Projects that must self-host
- Teams that want an exact bill forecast before exceeding 10,000 MAU
Alternatives to Stytch
| Tool | From | Free option | Stages |
|---|---|---|---|
| Amazon Cognito Cloud user directory and auth service | Usage-based | Free tier | |
| Asgardeo Hosted CIAM (with open-source self-hosted option) | $20/mo | Free tier | |
| Authgear Open-source CIAM (cloud, VPC or one-time self-host licence) | $50/mo | Free tier | |
| Firebase Backend platform with document and realtime databases | Usage-based | Free tier | |
| FusionAuth Self-hostable CIAM server | $162/mo | Free tier | |
| Supabase Managed Postgres backend platform | $25/mo | Free tier |
Questions
Is Stytch free?
The pay-as-you-go plan has no base fee and includes 10,000 monthly active users, five SSO or SCIM connections and 1,000 M2M tokens.
How much does an extra SSO connection cost on Stytch?
$125 per connection after the five included ones; Enterprise includes unlimited connections.
Who owns Stytch?
Stytch states on its homepage that it has joined Twilio.
Does Stytch offer bot protection?
Yes, as an add-on: device fingerprinting, invisible CAPTCHA and rate limiting, with 10,000 fingerprints included.
Sources read for this page