Choose the auth modules you need, or use Scalekit as your complete auth stack

Choose only the auth modules you need, or use Scalekit as your complete auth stack.
Modular MCP Auth
MCP Auth
Secure your MCP servers with drop-in OAuth
$0
/month
Upto 1M users and agents
Modular SSO pricing
Single Sign-on
An SSO connection is a SAML or OIDC integration configured for an organization. You are billed only for connections that are enabled. Connections in a disabled state are not charged.
Add SSO with SAML and OIDC. No auth rewrites.
1 FREE SSO Connection
2 - 15
$60/conn
16 - 30
25% OFF
$45/conn
31 - 50
40% OFF
$35/conn
51 - 100
50% OFF
$30/conn
Modular SSO pricing
$0
/month for
1
connections
Modular SCIM pricing
SCIM
A SCIM connection automates user provisioning and deprovisioning for an organization through external directory (e.g., Azure AD, Okta) or HR systems. You’re billed only for connections that are enabled. Connections in a disabled state are not charged.
Automate user provisioning & deprovisioning for enterprise directories
1 FREE SCIM Connection
2 - 15
$60/conn
16 - 30
25% OFF
$45/conn
31 - 50
40% OFF
$35/conn
51 - 100
50% OFF
$30/conn
Modular SCIM pricing
$0
/month for
1
connections
Modular Agent Auth pricing
Agent Auth
Each time a user authorizes your app through Scalekit, a connected account is created. Integrations are counted separately. For example, connecting both GitHub and Slack counts as two connected accounts.
Connect your AI Agents securely to third party tools and MCP servers
10000 Free connected accounts
Then $5 per 1K accounts
Agent Auth pricing
$0
/month for
10k
connected accounts
Customization Pro
Bring your custom domain, custom email templates, your email provider
$99
/domain/month
EU Data Residency 
Dedicated Frankfurt (EU) cluster ensures low latency, EU data residency, and strong data isolation
$99
/month
Optional Add-on
Customization Pro
Remove Scalekit watermark
Bring your domain, templates, and email provider
$99
/domain/month
Optional Add-on
EU data residency
Keep data in the EU with Frankfurt-based clusters
$99
/month
Full stack auth platform
Use Scalekit as your full identity layer — users, orgs, sessions, and all auth modules included.
Scale
End-to-end auth with generous free limits.
$0
/month
Scale plan includes:
1M Monthly Active Users
A user is counted as active (MAU)  if they log in or sign up for your application at least once during a billing month. You’re billed only for active users.
then $0.05 / MAU
100 Monthly Active Organizations
An organization is  counted as active (MAO)  if it has at least two users and at least one of them logs in during a billing month. You are only billed for active organizations.
then $1 / MAO
1 SSO connection
then $60 / additional SSO connection
1 SCIM directory
then $60 / additional SCIM directory
10,000 M2M tokens / month
then $5 / 1,000 M2M tokens
1000 connected accounts
then $2 per 1K accounts
Custom domain & branding
Optional add-on: $99/mo
Enterprise
Private deployment, premium SLAs, and 24Ă—7 support.
Custom
Everything in Scale plus:
On-prem or private cloud deployment
99.99%+ availability SLA
SIEM integrations & real-time audit streaming
Dedicated onboarding & solution engineering
Priority enterprise support
Flexible contracts for volume or multi-year deals

All the essentials included you only pay for usage

A platform engineered in full — built for flexibility, auditability, and every edge case.
UI Widgets
Prebuilt login, signup, and admin UIs you can embed instantly.
Auth logs
Full authentication event logs included with no extra fees or add-ons.
Interceptors
Request / response interceptors for IP policies, rate limits, and security workflows.
Webhooks
Reliable, retry-backed webhooks for user, org, session, and directory events.
Multi-tenancy
Native organizations, memberships, and tenant routing built for B2B SaaS.
Role-Based Access control (RBAC)
Roles and fine-grained permissions for users and organizations.
Unlimited Environments
Create dev, staging, sandbox, and preview environments at no additional cost.
SDKs & Developer tools
Node, Go, and Python SDKs, CLI tools, quickstarts, and testing utilities
Implementation Support
Expert-led onboarding with direct support from Scalekit’s engineering team.

Trusted by leading AI apps

Frequently asked questions

How does pricing scale as we grow?

Scalekit is designed to scale with real adoption, not arbitrary seat counts. You start with a generous free tier, and pricing grows only as your product grows across users, organizations, agents and enterprise usage.

Example growth paths:

  • Modular Auth
    If you already use an auth provider or an in-house system, you can add Scalekit for specific needs like Enterprise SSO. You get one free connection, then pay only as usage grows, with no hidden fees.
    If you start with MCP Auth, billing begins only after you exceed the included MAU free tier.
  • Full-Stack Auth
    When Scalekit becomes your complete identity layer, it powers users, orgs, RBAC, sessions, MCPs, agents, and provisioning end-to-end. Pricing scales once you exceed free MAU/MAO limits, add additional enterprise connections, opt for the customization add-on or exceed connected account limit and org limits in free tier.

This lets teams adopt identity infrastructure progressively, without paying upfront for complexity. Advanced customization is optional and charged at flat $99 per month.

What happens if we exceed the free tier?

If you cross free tier or included thresholds (MAUs, MAOs, connected accounts, or enterprise connections), additional usage is billed at the published per-unit rates.

For example, if you enable 2 SSO connections in a month, the first is free and you only pay $60/month for the second connection.

There are no sudden plan jumps, pricing stays predictable and scales gradually with real usage. You’ll also have a one-month grace period to settle payment, after which access may be paused until the balance is cleared.

This allows teams to grow into paid usage smoothly without unexpected disruption.

Can Scalekit run alongside our existing auth system?

Yes. Scalekit is designed to coexist with your current auth setup, so you don’t need to replace everything upfront.

Many teams start by layering Scalekit on top of an existing provider or in-house system:

  • Keep current login and session flows intact
  • Add Scalekit for Enterprise SSO, MCP Auth, or Agent workflows
  • Gradually expand coverage and migrate to Full stack Auth as needs grow

This enables a smooth, low-risk rollout with no downtime. Read more about migration here:

What plan should I choose between Modular Auth and Full-Stack Auth?

Choose based on whether you’re extending an existing auth system or replacing it.

  • Modular Auth
    Add specific capabilities like SSO, SCIM, MCP Auth, or Agent Auth on top of your current stack.
    Best for incremental modernization or enterprise readiness.
  • Full-Stack Auth
    Scalekit becomes your complete identity foundation across customers, orgs, MCPs, and agents.
    Best when you want one unified platform instead of stitching identity components together.
Can we start Modular and upgrade later?

Yes. Scalekit is built for staged adoption.

Teams often start with a module (SSO or MCP Auth or Agent Auth), then expand into Full-Stack Auth as identity requirements become more central to their product.

You don’t need to redesign your system twice. Moving from Modular to Full-Stack Auth is seamless, fully documented, and typically requires minimal changes rather than deep rewrites or reconfiguration. Read more here

Can I migrate from WorkOS or Auth0?

Yes. Teams often migrate to Scalekit from existing auth solutions, whether homegrown systems or platforms like WorkOS and Auth0.

Scalekit supports phased migration paths based on the modules you’re adopting and the workflows you need (SSO, SCIM, Agent auth, FSA, and more). Migration guidance and support are available to ensure a smooth transition without disruption.

For a tailored migration plan, write to us for a custom consultation.

Do development environments incur charges?

No. Development (Dev, QA, UAT, Staging) environments are free. Charges apply only for usage in production environments.

What data security and compliance standards does Scalekit follow?

Scalekit complies with GDPR and CCPA regulations. Customers can request data deletion by contacting our support team.

How do I get a custom plan?

To discuss enterprise pricing or a custom plan tailored to your needs, please write to us at hi@scalekit.com

What is Scalekit’s uptime and status?

Scalekit maintains 99.99%+ uptime. You can view system status and historical uptime on this page.

Enterprise grade security, every step of the way

SOC 2 and ISO 27001 certified
GDPR and CCPA Compliant
Annual 3rd-party penetration tests
Data encryption with HTTPS/TLS 1.3
Multi-region Data residency
Scalekit offers dedicated clusters in Frankfurt (EU) and Los Angeles (NA), ensuring low latency, strict data boundaries, and region-specific encryption.

Move with confidence, we've got your back

Dedicated support
Directly access our engineering team through aprivate Slack channel
Mission-critical reliability
Built for enterprise-grade authentication with 99.9% 
uptime SLA