> **Building with AI coding agents?** If you're using an AI coding agent, install the official Scalekit plugin. It gives your agent full awareness of the Scalekit API — reducing hallucinations and enabling faster, more accurate code generation.
>
> - **Claude Code**: `/plugin marketplace add scalekit-inc/claude-code-authstack` then `/plugin install <auth-type>@scalekit-auth-stack`
> - **GitHub Copilot CLI**: `copilot plugin marketplace add scalekit-inc/github-copilot-authstack` then `copilot plugin install <auth-type>@scalekit-auth-stack`
> - **Codex**: run the bash installer, restart, then open Plugin Directory and enable `<auth-type>`
> - **Skills CLI** (Windsurf, Cline, 40+ agents): `npx skills add scalekit-inc/skills --list` then `--skill <skill-name>`
>
> `<auth-type>` / `<skill-name>`: `agentkit`, `full-stack-auth`, `mcp-auth`, `modular-sso`, `modular-scim` — [Full setup guide](https://docs.scalekit.com/dev-kit/build-with-ai/)

---

# The Auth Stack for your SaaS

<div class="fold-section fold-full-width">
  <div class="fold-container" style="gap: 0.15rem;">
    <div>
      <h1 style="font-size: 2.2rem; margin: 0; text-align: left;">The Auth Stack for your SaaS</h1>
      <div style="font-size: 1.1rem; text-align: left;">
        <p style="margin: 0;">Add auth to your B2B SaaS application without building from scratch.</p>
        <p style="margin: 0.25rem 0 0;">Drop in a modular capability like MCP Auth, Single Sign-On, or SCIM alongside your existing system, or adopt Scalekit as your full identity layer for users, sessions, organizations, and roles.</p>
        <p style="margin: 0.5rem 0 0; font-size: 0.95rem;">Building auth from scratch? Start with <a href="/authenticate/fsa/quickstart">SaaS User Management</a>. Adding SSO, SCIM, or MCP Auth to an existing system? Use <a href="/authenticate/mcp/quickstart/">Modular Auth</a>.</p>
      </div>
    </div>

    <div style="margin-top: 0.15rem;">
      <p style="font-size: 0.875rem; color: var(--sl-color-text-muted); margin: 0 0 0.75rem;">2 steps · ~5 minutes · works with any AI coding agent</p>
      ```bash title="Step 1 — Add the marketplace (Claude REPL)" showLineNumbers=false
          /plugin marketplace add scalekit-inc/claude-code-authstack
          ```

          ```bash title="Step 2 — Install your auth plugin (Claude REPL)" showLineNumbers=false
          # options: full-stack-auth, agent-auth, mcp-auth, modular-sso, modular-scim
          /plugin install full-stack-auth@scalekit-auth-stack
          ```

          Now ask your agent to implement Scalekit auth in natural language. [See example starting prompts →](/agentkit/quickstart/)
        ```bash title="Step 1 — Install the Scalekit Auth Stack" frame="terminal" showLineNumbers=false
          curl -fsSL https://raw.githubusercontent.com/scalekit-inc/codex-authstack/main/install.sh | bash
          ```

          Step 2 — Restart Codex, open **Plugin Directory**, select **Scalekit Auth Stack**, and enable your auth plugin.

          Now ask your agent to implement Scalekit auth in natural language. [See example starting prompts →](/agentkit/quickstart/)
        ```bash title="Step 1 — Add the marketplace" frame="terminal" showLineNumbers=false
          copilot plugin marketplace add scalekit-inc/github-copilot-authstack
          ```

          ```bash title="Step 2 — Install your auth plugin" frame="terminal" showLineNumbers=false
          # options: full-stack-auth, agent-auth, mcp-auth, modular-sso, modular-scim
          copilot plugin install full-stack-auth@scalekit-auth-stack
          ```

          Now ask your agent to implement Scalekit auth in natural language. [See example starting prompts →](/agentkit/quickstart/)
        The Scalekit Auth Stack is pending Cursor Marketplace review. Install it locally in Cursor:

          ```bash title="Step 1 — Install the Scalekit Auth Stack" frame="terminal" showLineNumbers=false
          curl -fsSL https://raw.githubusercontent.com/scalekit-inc/cursor-authstack/main/install.sh | bash
          ```

          Step 2 — Restart Cursor, open **Settings > Cursor Settings > Plugins**, and enable your auth plugin.

          Now ask your agent to implement Scalekit auth in natural language. [See example starting prompts →](/agentkit/quickstart/)
        Works with OpenCode, Windsurf, Cline, Gemini CLI, Codex, and 35+ more agents via the [Vercel Skills CLI](https://vercel.com/docs/agent-resources/skills).

          ```bash title="Step 1 — Browse available skills" frame="terminal" showLineNumbers=false
          npx skills add scalekit-inc/skills --list
          ```

          ```bash title="Step 2 — Install a specific skill" frame="terminal" showLineNumbers=false
          npx skills add scalekit-inc/skills --skill adding-mcp-oauth
          ```

          Now ask your agent to implement Scalekit auth in natural language. [See example starting prompts →](/agentkit/quickstart/)
        <p style="font-size: 0.875rem; color: var(--sl-color-text-muted); margin: 0.75rem 0 0;">Need help? <a href="https://join.slack.com/t/scalekit-community/shared_invite/zt-3gsxwr4hc-0tvhwT2b_qgVSIZQBQCWRw">Join the developer community</a> or browse the <a href="/guides/">guides</a>.</p>
    </div>
  </div>
</div>

<div class="fold-section fold--background-muted fold-full-width">
  <div class="fold-container">
    <div class="modular-auth-layout">
      <div class="modular-auth-left">
        <h2 class="modular-auth-heading" style="margin-top: 1.5rem !important;">Modular auth</h2>
        <div class="modular-auth-description"><p>Add specific auth capabilities like MCP Auth, SSO, or SCIM without replacing your existing system.</p></div>
      </div>
      <div class="modular-auth-cards-grid">
        <FoldCard title="MCP Auth" iconKey="mcp" href="/authenticate/mcp/quickstart/" showCta={false} clickable={true}>
          Add OAuth 2.1 authorization to your remote MCP server with Dynamic Client Registration and short-lived tokens
        </FoldCard>

        <FoldCard title="Single Sign-On" iconKey="sso" href="/authenticate/sso/add-modular-sso/" showCta={false} clickable={true}>
          Let enterprise users sign in through their company's identity provider like Okta, Microsoft Entra, Google, and more
        </FoldCard>

        <FoldCard title="SCIM Provisioning" iconKey="scim" href="/directory/scim/quickstart/" showCta={false} clickable={true}>
          Automatically sync users, roles, and groups when IT admins add or remove people in Okta or Microsoft Entra
        </FoldCard>
      </div>
    </div>
  </div>
</div>

<div class="fold-section fold-full-width">
  <div class="fold-container">
    <div class="full-stack-auth-layout">
      <div class="full-stack-auth-left">
        <h2 class="full-stack-auth-heading" style="margin-top: 2rem !important;">SaaS user management</h2>
        <p class="full-stack-auth-description">Use Scalekit as your full identity layer to manage users, organizations, sessions, roles, and application access.</p>
        [Quickstart](/authenticate/fsa/quickstart)
        <p style="font-size: 0.9rem; margin: -1rem 0; color: var(--sl-color-text-muted);">Get production-ready auth running in minutes</p>
      </div>
      <div class="full-stack-auth-card">
        <img src={homeFsaImage.src} alt="SaaS User Management" style="width: 75%; height: auto; border-radius: 0.5rem; border: none !important; margin-left: 4rem !important;" data-zoom-off />
      </div>
    </div>
  </div>
</div>

<div class="fold-section fold-full-width" style="padding-top: 0;">
  <div class="fold-container">
    <ResponsiveCardGrid columnsDesktop={3} columnsLarge={3}>
      <FoldCard title="User lifecycle" iconKey="usercheck" href="/fsa/data-modelling" clickable={true}>
        Create, update, and delete users with built-in lifecycle APIs
      </FoldCard>
      <FoldCard title="Authentication methods" iconKey="authmethods" href="/authenticate/auth-methods/passwordless/" clickable={true}>
        Support modern login flows with passkeys, magic links, OTPs, and social logins
      </FoldCard>
      <FoldCard title="B2B-native identity" iconKey="b2b" href="/fsa/data-modelling" clickable={true}>
        Model organizations, user memberships, and multi-tenant access for B2B SaaS apps
      </FoldCard>
      <FoldCard title="Authorization" iconKey="shield" href="/authenticate/authz/overview" clickable={true}>
        Define roles and permissions for human users and AI agents
      </FoldCard>
      <FoldCard title="Enterprise identity" iconKey="sso" href="/authenticate/auth-methods/enterprise-sso" clickable={true}>
        Add enterprise capabilities like Single Sign-On (SSO) and SCIM provisioning
      </FoldCard>
      <FoldCard title="API & M2M auth" iconKey="apiauth" href="/authenticate/m2m/api-auth-quickstart" clickable={true}>
        Issue and validate user-scoped and org-level tokens for APIs and services
      </FoldCard>
    </ResponsiveCardGrid>
  </div>
</div>

<div class="fold-section fold--background-muted fold-full-width">
  <div class="fold-container">
    <div>
      <h2 style="font-size: 1.8rem; margin: 0.5rem 0; text-align: left;">Extensibility & Controls</h2>
      <p style="font-size: 1.1rem; margin: 0; text-align: left;">Customize identity workflows and apply your business logic.</p>
    </div>

    <div class="platform-features-grid">
      <ResponsiveCardGrid>
        <FoldCard title="Webhooks" iconKey="webhooks" href="/reference/webhooks/overview/" clickable={true}>
          Receive real-time events for authentication, user lifecycle, and organizations
        </FoldCard>
        <FoldCard title="Interceptors" iconKey="workflow" href="/authenticate/interceptors/auth-flow-interceptors/" clickable={true}>
          Apply custom logic and policy checks during authentication and authorization flows
        </FoldCard>
        <FoldCard title="Branding" iconKey="theme" href="/fsa/guides/login-page-branding/" clickable={true}>
          Customize hosted login and signup pages plus auth emails to match your app
        </FoldCard>
        <FoldCard title="Auth logs" iconKey="events" href="/guides/dashboard/auth-logs/" clickable={true}>
          Record and inspect authentication events and user access activity for auditing purposes
        </FoldCard>
      </ResponsiveCardGrid>
    </div>
  </div>
</div>

<div class="fold-section fold-full-width">
  <div class="fold-container">
    <div>
      <h2 style="font-size: 1.8rem; margin: 0.5rem 0; text-align: left;">Developer Resources</h2>
      <p style="font-size: 1.1rem; margin: 0; text-align: left;">SDKs, code samples, and community resources for building with Scalekit.</p>
    </div>

    <ResponsiveCardGrid>
      <FoldCard title="SDKs" iconKey="sdk" href="/apis/#description/sdks" clickable={true}>
        Drop-in libraries to quickly integrate Scalekit into your application
      </FoldCard>
      <FoldCard title="Code samples" iconKey="github" href="/resources/code-samples" clickable={true}>
        Reference implementations and code examples for common auth flows
      </FoldCard>
      <FoldCard title="Developer community" iconKey="community" href="https://join.slack.com/t/scalekit-community/shared_invite/zt-3gsxwr4hc-0tvhwT2b_qgVSIZQBQCWRw" target="_blank" rel="noopener" clickable={true}>
        Ask questions, share feedback, and learn from other Scalekit developers
      </FoldCard>
    </ResponsiveCardGrid>
  </div>
</div>

<div class="fold-section fold--background-muted fold-full-width">
  <div class="fold-container">
    <div>
      <h2 style="font-size: 1.8rem; margin: 0.1rem 0; text-align: left;">Security, Compliance & Availability</h2>
      <p style="font-size: 1.1rem; margin: 0; text-align: left;">Designed for production workloads with strict operational and security requirements.</p>
    </div>

    <div class="security-sections">
      <div>
        <p style="margin: 0.5rem 0;"><span style="margin-right: 0.5rem;">⊕</span><strong>Multi-region data residency</strong><br /><span style="margin-left: 1.5rem;">Dedicated regional clusters in the US and EU</span></p>
        <p style="margin: 0.5rem 0;"><span style="margin-right: 0.5rem;">⊕</span><strong>Compliance</strong><br /><span style="margin-left: 1.5rem;">SOC 2, ISO 27001, GDPR, and CCPA compliant</span></p>
        <p style="margin: 0.5rem 0;"><span style="margin-right: 0.5rem;">⊕</span><strong>Uptime</strong><br /><span style="margin-left: 1.5rem;">99.99% uptime with failover redundancy</span></p>
        <p style="margin: 0.5rem 0;"><span style="margin-right: 0.5rem;">⊕</span><strong>Secure token & secret storage</strong><br /><span style="margin-left: 1.5rem;">Vault-backed storage with strong isolation for tokens and credentials</span></p>
      </div>
      <div style="display: flex; justify-content: center; align-items: center; margin-top: 0 !important;">
        <img src={complianceImage.src} alt="Compliance certifications" style="max-width: 110%; height: auto; border: none" data-zoom-off />
      </div>
    </div>
  </div>
</div>

---

## More Scalekit documentation

| Resource | What it contains | When to use it |
|----------|-----------------|----------------|
| [/llms.txt](/llms.txt) | Structured index with routing hints per product area | Start here — find which documentation set covers your topic before loading full content |
| [/llms-full.txt](/llms-full.txt) | Complete documentation for all Scalekit products in one file | Use when you need exhaustive context across multiple products or when the topic spans several areas |
| [sitemap-0.xml](https://docs.scalekit.com/sitemap-0.xml) | Full URL list of every documentation page | Use to discover specific page URLs you can fetch for targeted, page-level answers |
