Documentation

Build with AuthFI.

Everything you need to add authentication, authorization, and keyless access to your app, cloud, servers, and AI agents — one platform, one audit trail.

Quickstart Browse SDKs

Quickstart

Auth in minutes.

From zero to a working login + verified token. Replace {project} with your project key.

1

Create a project

Sign up and create a project in the console. You get a client ID, a hosted login domain, and API keys — no infrastructure to stand up.

2

Send users to Universal Login

GET https://id.authfi.io/{project}/authorize
  ?client_id=$CLIENT_ID
  &redirect_uri=https://app.example.com/callback
  &response_type=code
  &scope=openid profile email
  &code_challenge=$PKCE
3

Exchange the code for tokens

curl -X POST https://api.authfi.io/v1/{project}/token \
  -d grant_type=authorization_code \
  -d code=$CODE \
  -d client_id=$CLIENT_ID \
  -d code_verifier=$PKCE_VERIFIER
4

Verify the token

# Validate the JWT against the project JWKS
GET https://api.authfi.io/v1/{project}/.well-known/jwks.json
# iss, aud, exp, and signature checked by your SDK

Explore the docs

Find the right starting place.

Guides and references grouped by what you’re building — get started, authorize, access, and build.

Get started
Universal Login One hosted login for every app Authentication Passkeys, MFA, passwordless SSO & SAML SAML 2.0, OIDC, social
Authorize
Access control RBAC, roles & permissions Directory & SCIM Users, groups, provisioning Actions Custom logic on auth events
Access
Cloud Access Keyless AWS · GCP · Azure · OCI Server Access (PAM) Zero-key SSH, JIT, sudo AI Agent Identity Scoped agents, MCP, act-chains
Build
SDKs Seven languages Terraform Identity as code Quickstart Ship auth in minutes

API & SDKs

Call it from anywhere.

Everything in the console is a REST call — and typed clients ship it to your stack.

REST & Management API

Everything in the console is a REST call. Manage tenants, users, apps, roles, connections, and keys programmatically.

curl https://api.authfi.io/manage/v1/{project}/users \
  -H "Authorization: Bearer $MGMT_TOKEN"

SDKs — seven languages

Typed clients for verification, management, and access. Same identity, one call.

Node.jsPythonGoJavaRubyPHP.NET
All SDKs →

Start building.

Free for 5,000 users · No credit card · Your brand, your region.

Start free Open the console