SuperTokens
Apache-2.0 session auth you can self-host with no MAU cap
Next.js / Auth · Freemium · 15.3k
What's Good
Apache-2.0 outside ee/. Frontend SDK + backend SDK + Java core. Passwordless, social, MFA, multi-tenancy. Pricing page: self-hosting the open-source features is free without any limits.
The Catch
Three processes, not a single library. ee/ is not Apache. Cloud is MAU-metered; MFA and account-linking have 100 USD/month minima on Cloud. Read the carve-out before you assume the whole repo is Apache-2.0.
Verdict
Apache-2.0 auth with no self-host MAU cap. Architecture is three pieces.
Embed
[](https://stackgems.com/gems/supertokens)