# SuperTokens

> Apache-2.0 session auth you can self-host with no MAU cap

**Category:** Next.js  
**Pricing:** freemium  
**URL:** https://supertokens.com  
**GitHub:** https://github.com/supertokens/supertokens-core  
**Added:** 2026-09-03

---

## The Hook

SuperTokens is session-centric auth that does not meter your self-hosted MAUs.

## What's Good

Apache-2.0 outside ee/. Frontend SDK + backend SDK + Java core. Passwordless, social, MFA, multi-tenancy. Pricing page: self-hosting the open-source features is free without any limits.

## The Catch

Three processes, not a single library. ee/ is not Apache. Cloud is MAU-metered; MFA and account-linking have 100 USD/month minima on Cloud. Read the carve-out before you assume the whole repo is Apache-2.0.

## Verdict

Apache-2.0 auth with no self-host MAU cap. Architecture is three pieces.