{"data":{"slug":"supertokens","name":"SuperTokens","tagline":"Apache-2.0 session auth you can self-host with no MAU cap","category":"nextjs","categoryName":"Next.js","url":"https://supertokens.com","github":"https://github.com/supertokens/supertokens-core","pricing":"freemium","hook":"SuperTokens is session-centric auth that does not meter your self-hosted MAUs.","whatsGood":"Apache-2.0 outside ee/. Frontend SDK + backend SDK + Java core. Passwordless, social, MFA, multi-tenancy. Pricing page: self-hosting the open-source features is free without any limits.","theCatch":"Three processes, not a single library. ee/ is not Apache. Cloud is MAU-metered; MFA and account-linking have 100 USD/month minima on Cloud. Read the carve-out before you assume the whole repo is Apache-2.0.","verdict":"Apache-2.0 auth with no self-host MAU cap. Architecture is three pieces.","addedAt":"2026-09-03","featured":false,"domain":"Next.js","subSpecialty":"Auth","capabilities":["sessions","auth"],"surfaces":["Self-host","Hosted"],"ecosystem":["Node.js","Browser"],"licenseModel":"Freemium","githubStars":15295},"related":[{"slug":"vercel","name":"Vercel","tagline":"The platform that made Next.js deployment trivial"},{"slug":"prisma","name":"Prisma","tagline":"Type-safe database access with killer DX"},{"slug":"drizzle","name":"Drizzle ORM","tagline":"TypeScript ORM that feels like SQL"},{"slug":"trpc","name":"tRPC","tagline":"End-to-end typesafe APIs without codegen"},{"slug":"clerk","name":"Clerk","tagline":"Auth that actually ships with your UI"}],"links":{"self":"/api/gems/supertokens","html":"/gems/supertokens","markdown":"/gems/supertokens.md","category":"/api/gems?category=nextjs","categoryPage":"/stacks/nextjs"}}