Managed Auth Infrastructure

Auth That Scales.
Pricing That Doesn't
Punish Growth.

Cognito-style user pools. Encrypted credentials vault. Per-project JWT secrets. Predictable pricing — no per-MAU surprises. We run the infrastructure so you can focus on your product.

Get Started View API

signup.sh

# Create a user in seconds
curl -X POST https://authshore.ai/api/v1/auth/signup \
  -H "X-API-Key: as_pub_abc123" \
  -H "Content-Type: application/json" \
  -d '{
    "email": "user@example.com",
    "password": "SecurePass123!",
    "userPoolId": "pool_main"
  }'

# Response
{
  "accessToken": "eyJhbG...",
  "refreshToken": "eyJhbG...",
  "user": { "id": "usr_7f3a..." }
}

Why AuthShore?

Built by engineers who got tired of "free tiers" that cost more than they save.

🔓

No Vendor Lock-In

Export every user — including password hashes — whenever you want. Your users are yours, not a vendor's leverage to keep you paying.

Cognito can't export password hashes — migrating away means forcing every user to reset their password. That "free 50K" is the bait for permanent lock-in.

🔑

Per-Project JWT Secrets

Every project gets its own isolated signing key. A breach in one project can't compromise another.

Supabase's own docs warn that shared JWT secrets across projects are a known vulnerability vector.

💰

Predictable Pricing, No Hidden Costs

Flat-rate pricing that doesn't penalise growth. No per-MAU metering, no surprise line items, no calculator needed.

Cognito's "free 50K" hides SNS charges for SMS MFA, Lambda costs for auth triggers, and CloudTrail/CloudWatch fees for logging. Auth0 users report 15× bill increases on 1.67× user growth.

🏢

Multi-Tenant by Design

Native user pool isolation for each of your customers. No row-level-security gymnastics or Lambda triggers required.

Cognito requires Lambda triggers for tenant isolation — each invocation adds cost and latency. Supabase relies on RLS policies. AuthShore isolates at the pool level, zero config.

🔒

Encrypted Credentials Vault

Store, version, and rotate your secrets with AES-256 envelope encryption. Per-environment isolation, folder organisation, .env import/export, and automatic rotation.

AWS Secrets Manager charges $0.40/secret/month + $0.05 per 10K API calls. Doppler starts at $6/user/month. AuthShore includes credentials vault in every plan.

How It Works

From zero to authenticated users in three steps.

Create a Project

as_pub_* + as_secret_*

Create User Pools

Define password policies, MFA settings, and self-signup rules per pool. Each pool is fully isolated.

pool_main, pool_admin

Authenticate

Hit the signup and signin endpoints to get JWT access + refresh token pairs for your users.

/auth/v1/signup

How AuthShore Compares

A side-by-side look at the features that matter for production auth.

Feature	AuthShore	Supabase	Cognito	Auth0	Clerk
Password Hash Export	✓	✕	✕	✕	✕
Per-Project JWT Secrets	✓	✕	✕	✓	✕
Multi-Tenant Native	✓	✕	Lambda	✓	Partial
Predictable Pricing	✓	✕	✕	✕	✕
No Hidden Infra Costs	✓	✓	✕	✓	✓
User Migration SDK	✓	✕	Partial	✓	✕
Audit Logs Included	✓	Partial	CloudTrail $	✓	✓
Credentials Vault Included	✓	✕	$0.40/secret	✕	✕
MFA Included in Price	✓	✓	SNS $	Add-on	✓

Simple, Predictable API

RESTful endpoints, standard headers, JSON everywhere. No proprietary SDK required.

# Sign up a new user
curl -X POST https://authshore.ai/api/v1/auth/signup \
  -H "X-API-Key: as_pub_abc123" \
  -H "Content-Type: application/json" \
  -d '{
    "email": "alice@example.com",
    "password": "StrongP@ss1!",
    "userPoolId": "pool_main",
    "metadata": { "plan": "pro" }
  }'

# 201 Created
{
  "accessToken":  "eyJhbGciOiJIUzI1NiIs...",
  "refreshToken": "eyJhbGciOiJIUzI1NiIs...",
  "expiresIn":    3600,
  "user": {
    "id":    "usr_7f3a9b2c",
    "email": "alice@example.com"
  }
}

# Store a secret credential
curl -X POST https://authshore.ai/api/v1/sdk/secrets \
  -H "X-API-Key: as_secret_xyz789" \
  -H "Content-Type: application/json" \
  -d '{
    "key": "DATABASE_URL",
    "value": "postgres://user:pass@host:5432/db",
    "environment": "production",
    "folder": "/backend"
  }'

# Retrieve it (decrypted)
curl https://authshore.ai/api/v1/sdk/secrets/{id} \
  -H "X-API-Key: as_secret_xyz789"

# 200 OK
{
  "key":   "DATABASE_URL",
  "value": "postgres://user:pass@host:5432/db",
  "version": 1,
  "environment": "production"
}

# Import users with pre-hashed passwords
curl -X POST https://authshore.ai/api/v1/users/import \
  -H "X-API-Key: as_secret_xyz789" \
  -H "Content-Type: application/json" \
  -d '{
    "users": [
      {
        "email": "migrated@example.com",
        "passwordHash": "$2b$12$LJ3m4...",
        "hashAlgorithm": "bcrypt",
        "userPoolId": "pool_main"
      }
    ]
  }'

# 200 OK
{
  "imported": 1,
  "skipped":  0,
  "errors":   []
}

Simple, Predictable Pricing

Auth + Credentials Vault included in every plan. No per-MAU metering.

Free

Get started, no card required

1 User Pool
100 Users
25 Credentials
1 Environment
100 API Reads/day
7-day Audit Logs
Community Support

Get Started

Starter

$29/mo

For growing products

5 User Pools
1,000 Users
200 Credentials
3 Environments
Manual Rotation
5,000 API Reads/day
30-day Audit Logs
Email Support

Start Free Trial

Professional

$99/mo

For production workloads

Unlimited User Pools
10,000 Users
2,000 Credentials
Unlimited Environments
Auto Rotation
50,000 API Reads/day
90-day Audit Logs
Priority Support