SuperTokens
Apache-2.0 session auth you can self-host with no MAU cap
Next.js / Auth · Freemium · 15.3k
Reviewed 2026-09-03 · last push 2026-10-20 · repo checked 2026-10-21
What's Good
Apache-2.0 outside ee/. Frontend SDK + backend SDK + Java core. Passwordless, social, MFA, multi-tenancy. Pricing page: self-hosting the open-source features is free without any limits.
The Catch
Three processes, not a single library. ee/ is not Apache. Cloud is MAU-metered; MFA and account-linking have 100 USD/month minima on Cloud. Read the carve-out before you assume the whole repo is Apache-2.0.
Verdict
Apache-2.0 auth with no self-host MAU cap. Architecture is three pieces.
Embed
Maintainer? Add the badge to your README. It is free, links to this review, and there is no paid version.
Markdown
[](https://stackgems.com/gems/supertokens)
HTML
<a href="https://stackgems.com/gems/supertokens"><img src="https://stackgems.com/badge/supertokens.svg" alt="SuperTokens reviewed on Stack Gems" height="20"></a>
Related
Next.js →- Auth.jsAuthentication for the web, framework-agnostic
- Better AuthTypeScript auth that lives in your app, not a rented IdP
- LogtoMPL-2.0 identity platform with a 50k-MAU free Cloud
- authentikMIT-core self-hosted IdP; enterprise/ is not MIT
- ZITADELAGPLv3 identity Cloud at US$0/Month — 100 DAU, not Logto 50k MAU