About
Auth + billing infrastructure, built in the open.
Rekey is a self-hostable, multi-tenant service that puts user auth and provider-agnostic billing behind one API. A user's login and their current plan live in the same tenant model, so the two stop drifting apart. You run it yourself with one docker compose command, and the data stays in your Postgres. It's from a small team, MIT licensed, and you can read the source before you trust it.
Design pillars
- One record for who a user is and what they pay for
- A user's login and their subscription state live in one record. Access checks read what payment webhooks write, so there's never a second copy to reconcile — or to drift.
- Bring your own payment processor
- Stripe, PayPal, and Razorpay sit behind one BillingProvider interface, set per Application. You change a config value, not your billing code, and you keep your own processor account. Provider-specific fields live in metadata, and routing can pick a provider by country.
- You run it, you own the data
- docker compose --profile full up boots the API, Postgres, Redis, and the panel. There's no per-MAU meter, the Postgres is yours, and it's MIT licensed with the source on GitHub.
- Built for agents — read and operate
- A user's agent reads their own account over scoped OAuth 2.1 (read-only) — that end-user MCP is off by default, so you enable it per Application in the panel. A separate operator MCP lets your own agent run the workspace — read metrics, create apps, configure billing, cancel subscriptions — behind explicit, scoped consent (read / write / admin). No static admin key changes hands.
Where things stand
- · Available today: self-host, the npm SDKs (`@rekey.dev/node`, `@rekey.dev/react`, `@rekey.dev/nextjs`, `@rekey.dev/cli`, `@rekey.dev/mcp`), and the API.
- · Two ways to run it: self-host for free under the MIT license, or have us run it on Rekey Cloud at $99 per workspace per month. Enterprise terms or a free trial? Get in touch.
- · Source: MIT licensed, a Docker Compose stack you build from source, code at github.com/rekey-dev/rekey.
- · Billing: Stripe, PayPal, and Razorpay behind one BillingProvider interface, with geographic routing by country.
- · Auth: email and password, OAuth (Google, GitHub, plus more via OIDC), MFA, refresh-token rotation, and passkeys for register and sign-in. SAML and SCIM are planned.
- · Planned, not built: trials and proration, bulk user export, SAML, LDAP, and SCIM.