Stytch

What it does

Stytch is a customer identity and access management (CIAM) platform delivered as backend APIs and frontend SDKs rather than a hosted login portal, giving developers a single integration for authentication, authorization, and fraud prevention. The platform spans consumer authentication, multi-tenant B2B SaaS authentication, and identity for AI agents: its Connected Apps capability turns an application into an OAuth identity provider so AI agents and Model Context Protocol (MCP) clients can authenticate with scoped, revocable permissions.

How it works

Applications call Stytch's REST APIs directly or embed its JavaScript, React, and mobile SDKs and prebuilt UI components. Consumer flows support passkeys, magic links, one-time passcodes, passwords, and social login across 15 OAuth providers, while B2B flows add organization-level multi-tenancy with SAML and OIDC single sign-on, SCIM provisioning, role-based access control, and just-in-time provisioning, configurable through an embeddable Admin Portal. An optional Device Fingerprinting add-on scores requests in under 100 milliseconds to block bots, credential stuffing, and account takeover. Tome migrated tens of millions of users to the platform from Auth0 in under a month.

Credentials and traction

SOC 2 Type II attested and ISO 27001 certified, with compliance documentation including CAIQ and PCI-DSS materials available through the Twilio Trust Center. The platform has powered hundreds of millions of end users and thousands of applications; named customers include HubSpot, Replit, Descript, and Bitcoin.com. Stytch targets development teams from startups through enterprises that need consumer authentication, enterprise-ready B2B single sign-on, and AI agent identity.