PropelAuth website screenshot

PropelAuth

PropelAuth is a B2B SaaS authentication and multi-tenant user management platform purpose-built for organizations that sell to other organizations. It provides hosted login UIs, first-class organizations / tenants with custom roles and permissions, enterprise SSO via SAML and OIDC, SCIM directory sync, end-user API keys with validation and usage reporting, OAuth 2.0 / OpenID Connect identity-provider endpoints, and OAuth 2.1 MCP server authentication with dynamic client registration for AI agents. Backend SDKs span Node, Express, FastAPI, Flask, Django REST Framework, Python, Go, Rust, .NET, Ruby, and Cloudflare Workers; frontend SDKs cover React, JavaScript, and Next.js (App + Pages Router). A Terraform provider and official CLI back infrastructure-as-code workflows. Pricing starts free with 10,000 MAU and scales through Growth ($150/mo) and Growth Plus ($500/mo) to custom Enterprise contracts.

PropelAuth publishes 18 APIs on the APIs.io network, including End-User API Keys API, OAuth2 API, Access Tokens API, and 15 more. Tagged areas include Authentication, Identity, B2B, Multi-Tenancy, and Authorization.

The PropelAuth catalog on APIs.io includes 1 JSON-LD context and 2 Spectral governance rulesets.

PropelAuth’s developer surface includes authentication, developer portal, documentation, getting-started guide, pricing, engineering blog, signup flow, and 72 more developer resources.

68.1/100 exemplar ▬ flat Agent 34/100 agent aware Full breakdown ↓
scored 2026-07-28 · rubric v0.6
AccessFreemiumSelf serve⚡ Free to try
18 APIs 21 Features
AuthenticationIdentityB2BMulti-TenancyAuthorizationRBACSSOSCIMMCPAPI Keys

Kin Score

Kin Score Kin Score How this is scored →
scored 2026-07-28 · rubric v0.6
Composite quality — 68.1/100 · exemplar
Contract Quality 17.8 / 25
Developer Ergonomics 13.0 / 20
Commercial Clarity 15.8 / 20
Operational Transparency 6.8 / 13
Governance 8.3 / 12
Discoverability 6.5 / 10
Agent readiness — 34/100 · agent aware
Machine-Readable Contract 18 / 18
Agentic Access Contract 10 / 10
MCP Server 0 / 12
Machine-Readable Auth 10 / 10
Idempotency 0 / 9
Stable Error Semantics 0 / 8
Request/Response Examples 7 / 7
Rate-Limit Signaling 7 / 7
Typed Event Surface 0 / 6
Agent Skills 0 / 5
Well-Known Catalog 0 / 4
Consent & Bot Identity 0 / 3
A2A Agent Card 0 / 8
Dry-Run / Simulate Mode 0 / 4
Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. This rating is computed from github.com/api-evangelist/propelauth: open an issue to ask a question, or submit a pull request to add artifacts. Want it done for you? Prioritized profiling — $2,500 →

APIs 18

Individual APIs this provider publishes, each with its own machine-readable definition.

PropelAuth End-User API Keys API

Backend REST API for issuing, validating, listing, updating, and revoking end-user API keys that PropelAuth manages on behalf of your users and tenant organizations. Includes pe...

PropelAuth OAuth2 API

OAuth 2.0 / OpenID Connect identity-provider endpoints exposed by your PropelAuth Auth URL. Use PropelAuth as an OIDC provider for first-party and third-party OAuth clients, inc...

PropelAuth Access Tokens API

Mint short-lived access tokens for impersonation and testing

PropelAuth Discovery API

OpenID Connect discovery

PropelAuth Dynamic Client Registration API

RFC 7591 dynamic client registration

PropelAuth Employees API

Inspect PropelAuth dashboard employees (internal team)

PropelAuth Invites API

Inspect and revoke pending organization invites

PropelAuth Magic Links API

Issue one-time magic links for login flows

PropelAuth MCP OAuth 2.1 API

OAuth 2.1 flows for MCP clients

PropelAuth Members API

Add, remove, invite, and change roles for users within an organization

PropelAuth Metadata API

Authorization server metadata discovery

PropelAuth Migration API

Migrate users from external authentication providers

PropelAuth Organizations API

Create, read, update, and delete tenant organizations

PropelAuth Role Mappings API

Manage custom role mappings per organization

PropelAuth Sessions API

Manage user sessions and forced logout

PropelAuth Usage API

Inspect API key usage statistics

PropelAuth Users API

Create, query, update, disable, delete, and inspect users

PropelAuth Validation API

Validate end-user, personal, organization, and imported API keys

Scroll for all 18

Postman Collections 5

Ready-to-run Postman collections for exercising this provider's APIs.

Open Collections 5

Open, tool-agnostic API collections (OpenAPI-derived and Bruno).

PropelAuth OAuth2 API

OPEN COLLECTION

PropelAuth User API

OPEN COLLECTION

Arazzo Workflows 13

Multi-step API workflows described with the Arazzo specification.

PropelAuth Create And Update User

Create a user, fetch it back, then enrich the profile with a follow-up update.

ARAZZO

PropelAuth Invite Existing User By ID

Resolve an existing user by email, create a new org, and invite that user in by ID.

ARAZZO

PropelAuth Invite User To Org

Create an organization, email an invite to a user, and confirm the invite is pending.

ARAZZO

PropelAuth Issue Magic Link For New User

Create a new user, then mint a one-time magic link to sign them in.

ARAZZO

PropelAuth Migrate User With Password

Import a user from an external auth system, resolve their ID, then attach a legacy password hash.

ARAZZO

PropelAuth Offboard User From Org

Resolve a user by email, remove them from an org, and confirm the remaining membership.

ARAZZO

PropelAuth Onboard User Into Org

Create a user, create an organization, and add the user to it with a role.

ARAZZO

PropelAuth Promote Org Member

Find a user by email, change their role within an org, and confirm the new role.

ARAZZO

PropelAuth Provision Org API Key

Create an organization, issue an API key bound to it, then read the key's metadata back.

ARAZZO

PropelAuth Provision Org With Admin

Stand up a new organization, create its first admin user, add them, and verify membership.

ARAZZO

PropelAuth Revoke Pending Invite

Find a pending invite for an org and revoke it when one is outstanding.

ARAZZO

PropelAuth Rotate User API Key

Find a user's active API key, revoke it, and issue a fresh replacement.

ARAZZO

PropelAuth Upsert User By Email

Look a user up by email and update them if they exist, otherwise create them.

ARAZZO

Scroll for all 13

Pricing Plans 1

Published pricing tiers and plan structures.

Rate Limits 1

Documented rate limits and quota policies.

Propelauth Rate Limits

4 limits

RATE LIMITS

FinOps 1

Cost, billing, and metering signals for API financial operations.

Features 21

Notable capabilities this provider offers.

Hosted, customizable login UIs for B2B SaaS
First-class organizations / tenants with custom roles and granular permissions (RBAC)
End-user API keys (personal and org-scoped) with validation, usage stats, and import of legacy keys
Enterprise SSO via SAML and OIDC with self-service per-organization setup (Okta, Entra ID, etc.)
SCIM directory sync for enterprise customers (Growth Plus and Enterprise tiers)
MCP server authentication via OAuth 2.1, PKCE, dynamic client registration, and token introspection
User impersonation with audit trail and alerting
Multi-factor authentication (TOTP) enforceable per organization
Magic links and password authentication with configurable password policies
Per-organization 2FA enforcement and session controls
OAuth 2.0 / OpenID Connect identity-provider endpoints including discovery
User migration from external auth providers (bcrypt, argon2, scrypt, pbkdf2, firebase scrypt)
Separate staging environment included on Growth tier and above
Custom domain on the free tier
Backend SDKs for Node, Express, FastAPI, Flask, Django REST Framework, Python, Go, Rust, .NET, Ruby, and Cloudflare Workers
Frontend SDKs for React, JavaScript, and Next.js (App + Pages Router)
Official PropelAuth CLI and Terraform provider for infrastructure-as-code
Postman collection for the entire backend API
10,000 MAU included on every tier; overage $0.05/MAU on Growth and Growth Plus
Advanced API Keys add-on for 5,000,000 monthly validations
Bring-Your-Own-Auth deployment mode (`byo.propelauth.com`)

Scroll for all 21

Semantic Vocabularies 1

JSON-LD contexts and semantic vocabularies used across these APIs.

Propelauth Context

0 classes · 4 properties

JSON-LD

Spectral Rules 2

Spectral governance rulesets for linting and validating these APIs.

PropelAuth API Rules

5 rules · 4 warnings 1 info

SPECTRAL

PropelAuth API Rules

7 rules · 1 errors 6 warnings

SPECTRAL

JSON Schema 3

Standalone JSON Schema definitions for this provider's data models.

PropelAuth End-User API Key

7 properties

JSON SCHEMA

PropelAuth Organization

14 properties

JSON SCHEMA

PropelAuth User

19 properties

JSON SCHEMA

Examples 4

Example request and response payloads for these APIs.

Security Posture 3

Authentication, domain security, vulnerability disclosure, and trust-center signals.

Propelauth Authentication

http · 1 scheme

SECURITY

Propelauth Domain Security

TLSv1.3 · HSTS · DMARC

SECURITY

Propelauth Trust Center

SOC 2, GDPR

SECURITY

Agentic Access 1

Recommended x-agentic-access execution contracts for AI agents.

Propelauth Agentic Access

54 operations · 36 acting · 3 human-in-the-loop

54 operations · 36 acting

AGENTIC

Resources

Get Started 3

Portal, sign-up, and the first successful call

Documentation 11

Reference material describing how the API behaves

Scroll for all 11

Agent Surfaces 1

MCP servers, agent skills, and machine-readable catalogs

Design & Contract 15

Pagination, idempotency, versioning, errors, and events

Scroll for all 15

Build 36

SDKs, sample code, and the tooling you integrate with

Scroll for all 36

Access & Security 3

Authentication, authorization, and security posture

Operate 4

Status, limits, changes, and where to get help

Commercial 5

Pricing, plans, and the legal terms of use

Company 1

The organization behind the API

Source (apis.yml)

apis.yml Raw ↑
aid: propelauth
url: https://raw.githubusercontent.com/api-evangelist/propelauth/refs/heads/main/apis.yml
apis:
- aid: propelauth:propelauth-api-keys-api
  name: PropelAuth End-User API Keys API
  tags:
  - Authentication
  - API Keys
  - Machine-to-Machine
  - B2B
  humanURL: https://docs.propelauth.com/reference/api/apikey
  properties:
  - url: https://docs.propelauth.com/reference/api/apikey
    type: Documentation
  - url: openapi/propelauth-api-keys-api-openapi.yml
    type: OpenAPI
  - url: json-schema/propelauth-api-key-schema.json
    type: JSONSchema
  - url: examples/propelauth-validate-api-key-example.json
    type: Examples
  description: Backend REST API for issuing, validating, listing, updating, and revoking end-user API keys that PropelAuth
    manages on behalf of your users and tenant organizations. Includes personal and org-scoped keys, imported legacy keys,
    and per-key usage reporting. Up to 5M validations / month with the Advanced API Keys add-on.
- aid: propelauth:propelauth-oauth2-api
  name: PropelAuth OAuth2 API
  tags:
  - Authentication
  - OAuth 2.0
  - OpenID Connect
  - Identity Provider
  humanURL: https://docs.propelauth.com/reference/api/oauth2
  properties:
  - url: https://docs.propelauth.com/reference/api/oauth2
    type: Documentation
  - url: openapi/propelauth-oauth2-api-openapi.yml
    type: OpenAPI
  description: OAuth 2.0 / OpenID Connect identity-provider endpoints exposed by your PropelAuth Auth URL. Use PropelAuth
    as an OIDC provider for first-party and third-party OAuth clients, including no-code / low-code and OIDC-aware backends.
    Authorize, token exchange, refresh, userinfo, logout, and OIDC discovery.
- aid: propelauth:propelauth-access-tokens-api
  name: PropelAuth Access Tokens API
  description: Mint short-lived access tokens for impersonation and testing
  humanURL: https://docs.propelauth.com/reference/api/user
  tags:
  - Access Tokens
  properties:
  - type: OpenAPI
    url: openapi/propelauth-access-tokens-api-openapi.yml
  - type: Documentation
    url: https://docs.propelauth.com/reference/api/user
  - type: GettingStarted
    url: https://docs.propelauth.com/reference/api/getting-started
  - type: JSONSchema
    url: json-schema/propelauth-user-schema.json
  - type: JSONLD
    url: json-ld/propelauth-context.jsonld
  - type: Examples
    url: examples/propelauth-create-user-example.json
  - type: Examples
    url: examples/propelauth-create-magic-link-example.json
  - type: Documentation
    url: https://docs.propelauth.com/reference/api/org
  - type: JSONSchema
    url: json-schema/propelauth-org-schema.json
  - type: Examples
    url: examples/propelauth-create-org-example.json
  - type: Documentation
    url: https://docs.propelauth.com/mcp-authentication/overview
- aid: propelauth:propelauth-discovery-api
  name: PropelAuth Discovery API
  description: OpenID Connect discovery
  humanURL: https://docs.propelauth.com/reference/api/user
  tags:
  - Discovery
  properties:
  - type: OpenAPI
    url: openapi/propelauth-discovery-api-openapi.yml
  - type: Documentation
    url: https://docs.propelauth.com/reference/api/user
  - type: GettingStarted
    url: https://docs.propelauth.com/reference/api/getting-started
  - type: JSONSchema
    url: json-schema/propelauth-user-schema.json
  - type: JSONLD
    url: json-ld/propelauth-context.jsonld
  - type: Examples
    url: examples/propelauth-create-user-example.json
  - type: Examples
    url: examples/propelauth-create-magic-link-example.json
  - type: Documentation
    url: https://docs.propelauth.com/reference/api/org
  - type: JSONSchema
    url: json-schema/propelauth-org-schema.json
  - type: Examples
    url: examples/propelauth-create-org-example.json
  - type: Documentation
    url: https://docs.propelauth.com/mcp-authentication/overview
- aid: propelauth:propelauth-dynamic-client-registration-api
  name: PropelAuth Dynamic Client Registration API
  description: RFC 7591 dynamic client registration
  humanURL: https://docs.propelauth.com/reference/api/user
  tags:
  - Dynamic Client Registration
  properties:
  - type: OpenAPI
    url: openapi/propelauth-dynamic-client-registration-api-openapi.yml
  - type: Documentation
    url: https://docs.propelauth.com/reference/api/user
  - type: GettingStarted
    url: https://docs.propelauth.com/reference/api/getting-started
  - type: JSONSchema
    url: json-schema/propelauth-user-schema.json
  - type: JSONLD
    url: json-ld/propelauth-context.jsonld
  - type: Examples
    url: examples/propelauth-create-user-example.json
  - type: Examples
    url: examples/propelauth-create-magic-link-example.json
  - type: Documentation
    url: https://docs.propelauth.com/reference/api/org
  - type: JSONSchema
    url: json-schema/propelauth-org-schema.json
  - type: Examples
    url: examples/propelauth-create-org-example.json
  - type: Documentation
    url: https://docs.propelauth.com/mcp-authentication/overview
- aid: propelauth:propelauth-employees-api
  name: PropelAuth Employees API
  description: Inspect PropelAuth dashboard employees (internal team)
  humanURL: https://docs.propelauth.com/reference/api/user
  tags:
  - Employees
  properties:
  - type: OpenAPI
    url: openapi/propelauth-employees-api-openapi.yml
  - type: Documentation
    url: https://docs.propelauth.com/reference/api/user
  - type: GettingStarted
    url: https://docs.propelauth.com/reference/api/getting-started
  - type: JSONSchema
    url: json-schema/propelauth-user-schema.json
  - type: JSONLD
    url: json-ld/propelauth-context.jsonld
  - type: Examples
    url: examples/propelauth-create-user-example.json
  - type: Examples
    url: examples/propelauth-create-magic-link-example.json
  - type: Documentation
    url: https://docs.propelauth.com/reference/api/org
  - type: JSONSchema
    url: json-schema/propelauth-org-schema.json
  - type: Examples
    url: examples/propelauth-create-org-example.json
  - type: Documentation
    url: https://docs.propelauth.com/mcp-authentication/overview
- aid: propelauth:propelauth-invites-api
  name: PropelAuth Invites API
  description: Inspect and revoke pending organization invites
  humanURL: https://docs.propelauth.com/reference/api/user
  tags:
  - Invites
  properties:
  - type: OpenAPI
    url: openapi/propelauth-invites-api-openapi.yml
  - type: Documentation
    url: https://docs.propelauth.com/reference/api/user
  - type: GettingStarted
    url: https://docs.propelauth.com/reference/api/getting-started
  - type: JSONSchema
    url: json-schema/propelauth-user-schema.json
  - type: JSONLD
    url: json-ld/propelauth-context.jsonld
  - type: Examples
    url: examples/propelauth-create-user-example.json
  - type: Examples
    url: examples/propelauth-create-magic-link-example.json
  - type: Documentation
    url: https://docs.propelauth.com/reference/api/org
  - type: JSONSchema
    url: json-schema/propelauth-org-schema.json
  - type: Examples
    url: examples/propelauth-create-org-example.json
  - type: Documentation
    url: https://docs.propelauth.com/mcp-authentication/overview
- aid: propelauth:propelauth-magic-links-api
  name: PropelAuth Magic Links API
  description: Issue one-time magic links for login flows
  humanURL: https://docs.propelauth.com/reference/api/user
  tags:
  - Magic Links
  properties:
  - type: OpenAPI
    url: openapi/propelauth-magic-links-api-openapi.yml
  - type: Documentation
    url: https://docs.propelauth.com/reference/api/user
  - type: GettingStarted
    url: https://docs.propelauth.com/reference/api/getting-started
  - type: JSONSchema
    url: json-schema/propelauth-user-schema.json
  - type: JSONLD
    url: json-ld/propelauth-context.jsonld
  - type: Examples
    url: examples/propelauth-create-user-example.json
  - type: Examples
    url: examples/propelauth-create-magic-link-example.json
  - type: Documentation
    url: https://docs.propelauth.com/reference/api/org
  - type: JSONSchema
    url: json-schema/propelauth-org-schema.json
  - type: Examples
    url: examples/propelauth-create-org-example.json
  - type: Documentation
    url: https://docs.propelauth.com/mcp-authentication/overview
- aid: propelauth:propelauth-mcp-oauth-2-1-api
  name: PropelAuth MCP OAuth 2.1 API
  description: OAuth 2.1 flows for MCP clients
  humanURL: https://docs.propelauth.com/reference/api/user
  tags:
  - MCP OAuth 2.1
  properties:
  - type: OpenAPI
    url: openapi/propelauth-mcp-oauth-2-1-api-openapi.yml
  - type: Documentation
    url: https://docs.propelauth.com/reference/api/user
  - type: GettingStarted
    url: https://docs.propelauth.com/reference/api/getting-started
  - type: JSONSchema
    url: json-schema/propelauth-user-schema.json
  - type: JSONLD
    url: json-ld/propelauth-context.jsonld
  - type: Examples
    url: examples/propelauth-create-user-example.json
  - type: Examples
    url: examples/propelauth-create-magic-link-example.json
  - type: Documentation
    url: https://docs.propelauth.com/reference/api/org
  - type: JSONSchema
    url: json-schema/propelauth-org-schema.json
  - type: Examples
    url: examples/propelauth-create-org-example.json
  - type: Documentation
    url: https://docs.propelauth.com/mcp-authentication/overview
- aid: propelauth:propelauth-members-api
  name: PropelAuth Members API
  description: Add, remove, invite, and change roles for users within an organization
  humanURL: https://docs.propelauth.com/reference/api/user
  tags:
  - Members
  properties:
  - type: OpenAPI
    url: openapi/propelauth-members-api-openapi.yml
  - type: Documentation
    url: https://docs.propelauth.com/reference/api/user
  - type: GettingStarted
    url: https://docs.propelauth.com/reference/api/getting-started
  - type: JSONSchema
    url: json-schema/propelauth-user-schema.json
  - type: JSONLD
    url: json-ld/propelauth-context.jsonld
  - type: Examples
    url: examples/propelauth-create-user-example.json
  - type: Examples
    url: examples/propelauth-create-magic-link-example.json
  - type: Documentation
    url: https://docs.propelauth.com/reference/api/org
  - type: JSONSchema
    url: json-schema/propelauth-org-schema.json
  - type: Examples
    url: examples/propelauth-create-org-example.json
  - type: Documentation
    url: https://docs.propelauth.com/mcp-authentication/overview
- aid: propelauth:propelauth-metadata-api
  name: PropelAuth Metadata API
  description: Authorization server metadata discovery
  humanURL: https://docs.propelauth.com/reference/api/user
  tags:
  - Metadata
  properties:
  - type: OpenAPI
    url: openapi/propelauth-metadata-api-openapi.yml
  - type: Documentation
    url: https://docs.propelauth.com/reference/api/user
  - type: GettingStarted
    url: https://docs.propelauth.com/reference/api/getting-started
  - type: JSONSchema
    url: json-schema/propelauth-user-schema.json
  - type: JSONLD
    url: json-ld/propelauth-context.jsonld
  - type: Examples
    url: examples/propelauth-create-user-example.json
  - type: Examples
    url: examples/propelauth-create-magic-link-example.json
  - type: Documentation
    url: https://docs.propelauth.com/reference/api/org
  - type: JSONSchema
    url: json-schema/propelauth-org-schema.json
  - type: Examples
    url: examples/propelauth-create-org-example.json
  - type: Documentation
    url: https://docs.propelauth.com/mcp-authentication/overview
- aid: propelauth:propelauth-migration-api
  name: PropelAuth Migration API
  description: Migrate users from external authentication providers
  humanURL: https://docs.propelauth.com/reference/api/user
  tags:
  - Migration
  properties:
  - type: OpenAPI
    url: openapi/propelauth-migration-api-openapi.yml
  - type: Documentation
    url: https://docs.propelauth.com/reference/api/user
  - type: GettingStarted
    url: https://docs.propelauth.com/reference/api/getting-started
  - type: JSONSchema
    url: json-schema/propelauth-user-schema.json
  - type: JSONLD
    url: json-ld/propelauth-context.jsonld
  - type: Examples
    url: examples/propelauth-create-user-example.json
  - type: Examples
    url: examples/propelauth-create-magic-link-example.json
  - type: Documentation
    url: https://docs.propelauth.com/reference/api/org
  - type: JSONSchema
    url: json-schema/propelauth-org-schema.json
  - type: Examples
    url: examples/propelauth-create-org-example.json
  - type: Documentation
    url: https://docs.propelauth.com/mcp-authentication/overview
- aid: propelauth:propelauth-organizations-api
  name: PropelAuth Organizations API
  description: Create, read, update, and delete tenant organizations
  humanURL: https://docs.propelauth.com/reference/api/user
  tags:
  - Organizations
  properties:
  - type: OpenAPI
    url: openapi/propelauth-organizations-api-openapi.yml
  - type: Documentation
    url: https://docs.propelauth.com/reference/api/user
  - type: GettingStarted
    url: https://docs.propelauth.com/reference/api/getting-started
  - type: JSONSchema
    url: json-schema/propelauth-user-schema.json
  - type: JSONLD
    url: json-ld/propelauth-context.jsonld
  - type: Examples
    url: examples/propelauth-create-user-example.json
  - type: Examples
    url: examples/propelauth-create-magic-link-example.json
  - type: Documentation
    url: https://docs.propelauth.com/reference/api/org
  - type: JSONSchema
    url: json-schema/propelauth-org-schema.json
  - type: Examples
    url: examples/propelauth-create-org-example.json
  - type: Documentation
    url: https://docs.propelauth.com/mcp-authentication/overview
- aid: propelauth:propelauth-role-mappings-api
  name: PropelAuth Role Mappings API
  description: Manage custom role mappings per organization
  humanURL: https://docs.propelauth.com/reference/api/user
  tags:
  - Role Mappings
  properties:
  - type: OpenAPI
    url: openapi/propelauth-role-mappings-api-openapi.yml
  - type: Documentation
    url: https://docs.propelauth.com/reference/api/user
  - type: GettingStarted
    url: https://docs.propelauth.com/reference/api/getting-started
  - type: JSONSchema
    url: json-schema/propelauth-user-schema.json
  - type: JSONLD
    url: json-ld/propelauth-context.jsonld
  - type: Examples
    url: examples/propelauth-create-user-example.json
  - type: Examples
    url: examples/propelauth-create-magic-link-example.json
  - type: Documentation
    url: https://docs.propelauth.com/reference/api/org
  - type: JSONSchema
    url: json-schema/propelauth-org-schema.json
  - type: Examples
    url: examples/propelauth-create-org-example.json
  - type: Documentation
    url: https://docs.propelauth.com/mcp-authentication/overview
- aid: propelauth:propelauth-sessions-api
  name: PropelAuth Sessions API
  description: Manage user sessions and forced logout
  humanURL: https://docs.propelauth.com/reference/api/user
  tags:
  - Sessions
  properties:
  - type: OpenAPI
    url: openapi/propelauth-sessions-api-openapi.yml
  - type: Documentation
    url: https://docs.propelauth.com/reference/api/user
  - type: GettingStarted
    url: https://docs.propelauth.com/reference/api/getting-started
  - type: JSONSchema
    url: json-schema/propelauth-user-schema.json
  - type: JSONLD
    url: json-ld/propelauth-context.jsonld
  - type: Examples
    url: examples/propelauth-create-user-example.json
  - type: Examples
    url: examples/propelauth-create-magic-link-example.json
  - type: Documentation
    url: https://docs.propelauth.com/reference/api/org
  - type: JSONSchema
    url: json-schema/propelauth-org-schema.json
  - type: Examples
    url: examples/propelauth-create-org-example.json
  - type: Documentation
    url: https://docs.propelauth.com/mcp-authentication/overview
- aid: propelauth:propelauth-usage-api
  name: PropelAuth Usage API
  description: Inspect API key usage statistics
  humanURL: https://docs.propelauth.com/reference/api/user
  tags:
  - Usage
  properties:
  - type: OpenAPI
    url: openapi/propelauth-usage-api-openapi.yml
  - type: Documentation
    url: https://docs.propelauth.com/reference/api/user
  - type: GettingStarted
    url: https://docs.propelauth.com/reference/api/getting-started
  - type: JSONSchema
    url: json-schema/propelauth-user-schema.json
  - type: JSONLD
    url: json-ld/propelauth-context.jsonld
  - type: Examples
    url: examples/propelauth-create-user-example.json
  - type: Examples
    url: examples/propelauth-create-magic-link-example.json
  - type: Documentation
    url: https://docs.propelauth.com/reference/api/org
  - type: JSONSchema
    url: json-schema/propelauth-org-schema.json
  - type: Examples
    url: examples/propelauth-create-org-example.json
  - type: Documentation
    url: https://docs.propelauth.com/mcp-authentication/overview
- aid: propelauth:propelauth-users-api
  name: PropelAuth Users API
  description: Create, query, update, disable, delete, and inspect users
  humanURL: https://docs.propelauth.com/reference/api/user
  tags:
  - Users
  properties:
  - type: OpenAPI
    url: openapi/propelauth-users-api-openapi.yml
  - type: Documentation
    url: https://docs.propelauth.com/reference/api/user
  - type: GettingStarted
    url: https://docs.propelauth.com/reference/api/getting-started
  - type: JSONSchema
    url: json-schema/propelauth-user-schema.json
  - type: JSONLD
    url: json-ld/propelauth-context.jsonld
  - type: Examples
    url: examples/propelauth-create-user-example.json
  - type: Examples
    url: examples/propelauth-create-magic-link-example.json
  - type: Documentation
    url: https://docs.propelauth.com/reference/api/org
  - type: JSONSchema
    url: json-schema/propelauth-org-schema.json
  - type: Examples
    url: examples/propelauth-create-org-example.json
  - type: Documentation
    url: https://docs.propelauth.com/mcp-authentication/overview
- aid: propelauth:propelauth-validation-api
  name: PropelAuth Validation API
  description: Validate end-user, personal, organization, and imported API keys
  humanURL: https://docs.propelauth.com/reference/api/user
  tags:
  - Validation
  properties:
  - type: OpenAPI
    url: openapi/propelauth-validation-api-openapi.yml
  - type: Documentation
    url: https://docs.propelauth.com/reference/api/user
  - type: GettingStarted
    url: https://docs.propelauth.com/reference/api/getting-started
  - type: JSONSchema
    url: json-schema/propelauth-user-schema.json
  - type: JSONLD
    url: json-ld/propelauth-context.jsonld
  - type: Examples
    url: examples/propelauth-create-user-example.json
  - type: Examples
    url: examples/propelauth-create-magic-link-example.json
  - type: Documentation
    url: https://docs.propelauth.com/reference/api/org
  - type: JSONSchema
    url: json-schema/propelauth-org-schema.json
  - type: Examples
    url: examples/propelauth-create-org-example.json
  - type: Documentation
    url: https://docs.propelauth.com/mcp-authentication/overview
name: PropelAuth
tags:
- Authentication
- Identity
- B2B
- Multi-Tenancy
- Authorization
- RBAC
- SSO
- SCIM
- MCP
- API Keys
kind: contract
accessModel:
  pricing: freemium
  onboarding: self-serve
  trial: false
  try_now: true
  public: false
  label: Freemium · Self-serve signup
  confidence: high
  source:
  - plans
  - authentication
  generated: '2026-07-22'
  method: derived
image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/icons/propelauth.png
access: 3rd-Party
common:
- type: AgenticAccess
  url: agentic-access/propelauth-agentic-access.yml
- type: TrustCenter
  url: security/propelauth-trust-center.yml
- type: DomainSecurity
  url: security/propelauth-domain-security.yml
- type: Authentication
  url: authentication/propelauth-authentication.yml
- type: PostmanWorkspace
  url: https://www.postman.com/kinlaneapi/propelauth/overview
- type: Arazzo
  url: arazzo/propelauth-create-and-update-user-workflow.yml
  name: PropelAuth Create And Update User
- type: Arazzo
  url: arazzo/propelauth-invite-existing-user-by-id-workflow.yml
  name: PropelAuth Invite Existing User By ID
- type: Arazzo
  url: arazzo/propelauth-invite-user-to-org-workflow.yml
  name: PropelAuth Invite User To Org
- type: Arazzo
  url: arazzo/propelauth-issue-magic-link-for-new-user-workflow.yml
  name: PropelAuth Issue Magic Link For New User
- type: Arazzo
  url: arazzo/propelauth-migrate-user-with-password-workflow.yml
  name: PropelAuth Migrate User With Password
- type: Arazzo
  url: arazzo/propelauth-offboard-user-from-org-workflow.yml
  name: PropelAuth Offboard User From Org
- type: Arazzo
  url: arazzo/propelauth-onboard-user-into-org-workflow.yml
  name: PropelAuth Onboard User Into Org
- type: Arazzo
  url: arazzo/propelauth-promote-org-member-workflow.yml
  name: PropelAuth Promote Org Member
- type: Arazzo
  url: arazzo/propelauth-provision-org-api-key-workflow.yml
  name: PropelAuth Provision Org API Key
- type: Arazzo
  url: arazzo/propelauth-provision-org-with-admin-workflow.yml
  name: PropelAuth Provision Org With Admin
- type: Arazzo
  url: arazzo/propelauth-revoke-pending-invite-workflow.yml
  name: PropelAuth Revoke Pending Invite
- type: Arazzo
  url: arazzo/propelauth-rotate-user-api-key-workflow.yml
  name: PropelAuth Rotate User API Key
- type: Arazzo
  url: arazzo/propelauth-upsert-user-by-email-workflow.yml
  name: PropelAuth Upsert User By Email
- url: https://www.propelauth.com
  type: Portal
- url: https://docs.propelauth.com
  name: PropelAuth Docs
  type: Documentation
- url: https://docs.propelauth.com/getting-started
  name: Getting Started
  type: GettingStarted
- url: https://docs.propelauth.com/reference
  name: Reference Documentation
  type: Documentation
- url: https://docs.propelauth.com/reference/api/getting-started
  name: Backend API — Getting Started
  type: Documentation
- url: https://docs.propelauth.com/reference/api/user
  name: User API Reference
  type: Documentation
- url: https://docs.propelauth.com/reference/api/org
  name: Organization API Reference
  type: Documentation
- url: https://docs.propelauth.com/reference/api/apikey
  name: API Keys Reference
  type: Documentation
- url: https://docs.propelauth.com/reference/api/oauth2
  name: OAuth2 API Reference
  type: Documentation
- url: https://docs.propelauth.com/mcp-authentication/overview
  name: MCP Authentication Overview
  type: Documentation
- url: https://www.propelauth.com/pricing
  name: PropelAuth Pricing
  type: Pricing
- url: https://status.propelauth.com/
  name: PropelAuth Status
  type: StatusPage
- url: https://status.propelauth.com/default/history.rss
  name: PropelAuth Status RSS
  type: StatusPage
- url: https://www.propelauth.com/blog
  name: PropelAuth Blog
  type: Blog
- url: https://www.propelauth.com/legal/terms-of-service
  type: TermsOfService
- url: https://www.propelauth.com/legal/privacy-policy
  type: PrivacyPolicy
- url: https://auth.propelauth.com/en/signup
  name: Sign Up
  type: Signup
- url: https://byo.propelauth.com
  name: Bring Your Own Auth
  type: Documentation
- url: https://docs.propelauth.com/files/PropelAuth.postman_collection.json
  name: Postman Collection
  type: Documentation
- url: support@propelauth.com
  type: Support
- url: https://github.com/PropelAuth
  type: GitHubOrganization
- url: https://github.com/PropelAuth/react
  name: React SDK
  type: SDKs
- url: https://github.com/PropelAuth/javascript
  name: JavaScript SDK
  type: SDKs
- url: https://github.com/PropelAuth/nextjs
  name: Next.js SDK (App + Pages Router)
  type: SDKs
- url: https://github.com/PropelAuth/node
  name: Node.js SDK
  type: SDKs
- url: https://github.com/PropelAuth/express
  name: Express Middleware
  type: SDKs
- url: https://github.com/PropelAuth/propelauth-fastapi
  name: FastAPI SDK
  type: SDKs
- url: https://github.com/PropelAuth/propelauth-flask
  name: Flask SDK
  type: SDKs
- url: https://github.com/PropelAuth/propelauth-py
  name: Python SDK
  type: SDKs
- url: https://github.com/PropelAuth/propelauth-django-rest-framework
  name: Django REST Framework SDK
  type: SDKs
- url: https://github.com/PropelAuth/propelauth-go
  name: Go SDK
  type: SDKs
- url: https://github.com/PropelAuth/rust
  name: Rust Crate
  type: SDKs
- url: https://github.com/PropelAuth/dotnet
  name: .NET SDK
  type: SDKs
- url: https://github.com/PropelAuth/propelauth-rb
  name: Ruby SDK
  type: SDKs
- url: https://github.com/PropelAuth/cloudflare-worker
  name: Cloudflare Worker SDK
  type: SDKs
- url: https://github.com/PropelAuth/frontend-apis
  name: Frontend APIs
  type: SDKs
- url: https://github.com/PropelAuth/node-apis
  name: Node Backend APIs
  type: SDKs
- url: https://github.com/PropelAuth/cli
  name: PropelAuth CLI
  type: Tools
- url: https://github.com/PropelAuth/terraform-provider-propelauth
  name: Terraform Provider
  type: Tools
- url: https://github.com/PropelAuth/byo-go
  name: BYO Auth (Go)
  type: Tools
- url: https://github.com/PropelAuth/propelauth-byo-java
  name: BYO Auth (Java)
  type: Tools
- url: https://github.com/PropelAuth/base-elements
  name: React Base Elements
  type: Tools
- url: https://github.com/PropelAuth/documentation
  name: Documentation Source
  type: Documentation
- url: https://github.com/PropelAuth/react-frontend-starter
  name: React Frontend Starter
  type: CodeExamples
- url: https://github.com/PropelAuth/express-backend-starter
  name: Express Backend Starter
  type: CodeExamples
- url: https://github.com/PropelAuth/flask-backend-starter
  name: Flask Backend Starter
  type: CodeExamples
- url: https://github.com/PropelAuth/fastapi-backend-starter
  name: FastAPI Backend Starter
  type: CodeExamples
- url: https://github.com/PropelAuth/python-chalice-backend-starter
  name: Python Chalice Backend Starter
  type: CodeExamples
- url: https://github.com/PropelAuth/rust-axum-starter
  name: Rust Axum Starter
  type: CodeExamples
- url: https://github.com/PropelAuth/redwood
  name: RedwoodJS Starter
  type: CodeExamples
- url: https://github.com/PropelAuth/postgraphile-propelauth-starter
  name: PostGraphile Starter
  type: CodeExamples
- url: https://github.com/PropelAuth/nextjs-example-app
  name: Next.js Example App
  type: CodeExamples
- url: https://github.com/PropelAuth/react-express-comment-example
  name: React + Express Comment Example
  type: CodeExamples
- url: https://github.com/PropelAuth/demo-genai-api-keys
  name: GenAI API Keys Demo
  type: CodeExamples
- url: https://github.com/PropelAuth/demo-b2b-coupon-generator
  name: B2B Coupon Generator Demo
  type: CodeExamples
- url: https://github.com/PropelAuth/windows-login-pages
  name: Windows Login Pages
  type: CodeExamples
- url: plans/propelauth-plans-pricing.yml
  type: Plans
- url: rate-limits/propelauth-rate-limits.yml
  type: RateLimits
- url: finops/propelauth-finops.yml
  type: FinOps
- url: vocabulary/propelauth-vocabulary.yml
  type: Vocabulary
- url: rules/propelauth-rules.yml
  type: SpectralRuleset
- type: Features
  data:
  - Hosted, customizable login UIs for B2B SaaS
  - First-class organizations / tenants with custom roles and granular permissions (RBAC)
  - End-user API keys (personal and org-scoped) with validation, usage stats, and import of legacy keys
  - Enterprise SSO via SAML and OIDC with self-service per-organization setup (Okta, Entra ID, etc.)
  - SCIM directory sync for enterprise customers (Growth Plus and Enterprise tiers)
  - MCP server authentication via OAuth 2.1, PKCE, dynamic client registration, and token introspection
  - User impersonation with audit trail and alerting
  - Multi-factor authentication (TOTP) enforceable per organization
  - Magic links and password authentication with configurable password policies
  - Per-organization 2FA enforcement and session controls
  - OAuth 2.0 / OpenID Connect identity-provider endpoints including discovery
  - User migration from external auth providers (bcrypt, argon2, scrypt, pbkdf2, firebase scrypt)
  - Separate staging environment included on Growth tier and above
  - Custom domain on the free tier
  - Backend SDKs for Node, Express, FastAPI, Flask, Django REST Framework, Python, Go, Rust, .NET, Ruby, and Cloudflare Workers
  - Frontend SDKs for React, JavaScript, and Next.js (App + Pages Router)
  - Official PropelAuth CLI and Terraform provider for infrastructure-as-code
  - Postman collection for the entire backend API
  - 10,000 MAU included on every tier; overage $0.05/MAU on Growth and Growth Plus
  - Advanced API Keys add-on for 5,000,000 monthly validations
  - Bring-Your-Own-Auth deployment mode (`byo.propelauth.com`)
  sources:
  - https://www.propelauth.com
  - https://www.propelauth.com/pricing
  - https://docs.propelauth.com
  - https://docs.propelauth.com/reference/api/getting-started
  - https://github.com/PropelAuth
  updated: '2026-05-25'
created: '2026-05-25T00:00:00.000Z'
modified: '2026-05-25'
position: Providing
description: PropelAuth is a B2B SaaS authentication and multi-tenant user management platform purpose-built for organizations
  that sell to other organizations. It provides hosted login UIs, first-class organizations / tenants with custom roles and
  permissions, enterprise SSO via SAML and OIDC, SCIM directory sync, end-user API keys with validation and usage reporting,
  OAuth 2.0 / OpenID Connect identity-provider endpoints, and OAuth 2.1 MCP server authentication with dynamic client registration
  for AI agents. Backend SDKs span Node, Express, FastAPI, Flask, Django REST Framework, Python, Go, Rust, .NET, Ruby, and
  Cloudflare Workers; frontend SDKs cover React, JavaScript, and Next.js (App + Pages Router). A Terraform provider and official
  CLI back infrastructure-as-code workflows. Pricing starts free with 10,000 MAU and scales through Growth ($150/mo) and Growth
  Plus ($500/mo) to custom Enterprise contracts.
maintainers:
- FN: Kin Lane
  email: info@apievangelist.com
  X: apievangelist
  url: https://apievangelist.com
specificationVersion: '0.16'