PropelAuth logo

PropelAuth

PropelAuth is a B2B SaaS authentication and multi-tenant user management platform purpose-built for organizations that sell to other organizations. It provides hosted login UIs, first-class organizations / tenants with custom roles and permissions, enterprise SSO via SAML and OIDC, SCIM directory sync, end-user API keys with validation and usage reporting, OAuth 2.0 / OpenID Connect identity-provider endpoints, and OAuth 2.1 MCP server authentication with dynamic client registration for AI agents. Backend SDKs span Node, Express, FastAPI, Flask, Django REST Framework, Python, Go, Rust, .NET, Ruby, and Cloudflare Workers; frontend SDKs cover React, JavaScript, and Next.js (App + Pages Router). A Terraform provider and official CLI back infrastructure-as-code workflows. Pricing starts free with 10,000 MAU and scales through Growth ($150/mo) and Growth Plus ($500/mo) to custom Enterprise contracts.

5 APIs 5 Capabilities 21 Features
AuthenticationIdentityB2BMulti-TenancyAuthorizationRBACSSOSCIMMCPAPI Keys

PropelAuth publishes 5 APIs on the APIs.io network, including User API, Organization API, End-User API Keys API, and 2 more. Tagged areas include Authentication, Identity, B2B, Multi-Tenancy, and Authorization.

The PropelAuth catalog on APIs.io includes 5 machine-runnable capabilities, 1 JSON-LD context, and 1 Spectral governance ruleset.

PropelAuth’s developer surface includes developer portal, documentation, getting-started guide, pricing, engineering blog, signup flow, support, and 54 more developer resources.

APIs

PropelAuth User API

Backend REST API for managing PropelAuth-managed end users. Create, fetch, query, update, delete, enable/disable, and migrate users; issue magic links and short-lived access tok...

PropelAuth Organization API

Backend REST API for managing tenant organizations in PropelAuth. CRUD on organizations, member management (add, remove, change role), invite flows, custom role mappings, and pe...

PropelAuth End-User API Keys API

Backend REST API for issuing, validating, listing, updating, and revoking end-user API keys that PropelAuth manages on behalf of your users and tenant organizations. Includes pe...

PropelAuth OAuth2 API

OAuth 2.0 / OpenID Connect identity-provider endpoints exposed by your PropelAuth Auth URL. Use PropelAuth as an OIDC provider for first-party and third-party OAuth clients, inc...

PropelAuth MCP Authentication API

OAuth 2.1 authorization-server endpoints for Model Context Protocol (MCP) clients and AI agents. Authorize with PKCE, exchange and refresh tokens, introspect access tokens, dyna...

Capabilities

PropelAuth End-User API Keys — Validation & Management

PropelAuth backend capability for validating end-user API keys at a gateway and for managing their lifecycle (issue, fetch, update, revoke). Self-contained Naftiko capability.

Run with Naftiko

PropelAuth MCP Authentication — OAuth 2.1 for AI Agents

PropelAuth OAuth 2.1 server capability for Model Context Protocol clients. Provides authorization, token, introspection, dynamic client registration, and metadata discovery so M...

Run with Naftiko

PropelAuth OAuth2 — Identity Provider

PropelAuth OAuth 2.0 / OpenID Connect identity provider capability. Authorize, exchange tokens, refresh tokens, retrieve user info, log out, and discover the OIDC configuration.

Run with Naftiko

PropelAuth Org API — Organization Management

PropelAuth backend Organization API capability covering tenant CRUD, membership, role changes, and pending invite management. Self-contained Naftiko capability.

Run with Naftiko

PropelAuth User API — User Management

PropelAuth backend User API capability covering CRUD, query, enable/disable, password, and 2FA operations on PropelAuth-managed end users. Self-contained Naftiko capability.

Run with Naftiko

Features

Hosted, customizable login UIs for B2B SaaS
First-class organizations / tenants with custom roles and granular permissions (RBAC)
End-user API keys (personal and org-scoped) with validation, usage stats, and import of legacy keys
Enterprise SSO via SAML and OIDC with self-service per-organization setup (Okta, Entra ID, etc.)
SCIM directory sync for enterprise customers (Growth Plus and Enterprise tiers)
MCP server authentication via OAuth 2.1, PKCE, dynamic client registration, and token introspection
User impersonation with audit trail and alerting
Multi-factor authentication (TOTP) enforceable per organization
Magic links and password authentication with configurable password policies
Per-organization 2FA enforcement and session controls
OAuth 2.0 / OpenID Connect identity-provider endpoints including discovery
User migration from external auth providers (bcrypt, argon2, scrypt, pbkdf2, firebase scrypt)
Separate staging environment included on Growth tier and above
Custom domain on the free tier
Backend SDKs for Node, Express, FastAPI, Flask, Django REST Framework, Python, Go, Rust, .NET, Ruby, and Cloudflare Workers
Frontend SDKs for React, JavaScript, and Next.js (App + Pages Router)
Official PropelAuth CLI and Terraform provider for infrastructure-as-code
Postman collection for the entire backend API
10,000 MAU included on every tier; overage $0.05/MAU on Growth and Growth Plus
Advanced API Keys add-on for 5,000,000 monthly validations
Bring-Your-Own-Auth deployment mode (`byo.propelauth.com`)

Semantic Vocabularies

Propelauth Context

0 classes · 4 properties

JSON-LD

API Governance Rules

PropelAuth API Rules

7 rules · 1 errors 6 warnings

SPECTRAL

Resources

🌐
Portal
Portal
🔗
Documentation
Documentation
🚀
GettingStarted
GettingStarted
🔗
Documentation
Documentation
🔗
Documentation
Documentation
🔗
Documentation
Documentation
🔗
Documentation
Documentation
🔗
Documentation
Documentation
🔗
Documentation
Documentation
🔗
Documentation
Documentation
💰
Pricing
Pricing
🟢
StatusPage
StatusPage
🟢
StatusPage
StatusPage
📰
Blog
Blog
📜
TermsOfService
TermsOfService
📜
PrivacyPolicy
PrivacyPolicy
📝
SignUp
SignUp
🔗
Documentation
Documentation
🔗
Documentation
Documentation
💬
Support
Support
👥
GitHubOrganization
GitHubOrganization
📦
SDK
SDK
📦
SDK
SDK
📦
SDK
SDK
📦
SDK
SDK
📦
SDK
SDK
📦
SDK
SDK
📦
SDK
SDK
📦
SDK
SDK
📦
SDK
SDK
📦
SDK
SDK
📦
SDK
SDK
📦
SDK
SDK
📦
SDK
SDK
📦
SDK
SDK
📦
SDK
SDK
📦
SDK
SDK
🔧
Tool
Tool
🔧
Tool
Tool
🔧
Tool
Tool
🔧
Tool
Tool
🔧
Tool
Tool
🔗
Documentation
Documentation
💻
CodeExamples
CodeExamples
💻
CodeExamples
CodeExamples
💻
CodeExamples
CodeExamples
💻
CodeExamples
CodeExamples
💻
CodeExamples
CodeExamples
💻
CodeExamples
CodeExamples
💻
CodeExamples
CodeExamples
💻
CodeExamples
CodeExamples
💻
CodeExamples
CodeExamples
💻
CodeExamples
CodeExamples
💻
CodeExamples
CodeExamples
💻
CodeExamples
CodeExamples
💻
CodeExamples
CodeExamples
🔗
Plans
Plans
🔗
RateLimits
RateLimits
🔗
FinOps
FinOps
🔗
Vocabulary
Vocabulary
🔗
SpectralRuleset
SpectralRuleset

Sources

Raw ↑
aid: propelauth
url: https://raw.githubusercontent.com/api-evangelist/propelauth/refs/heads/main/apis.yml
apis:
- aid: propelauth:propelauth-user-api
  name: PropelAuth User API
  tags:
  - Authentication
  - Users
  - B2B
  - Identity
  humanURL: https://docs.propelauth.com/reference/api/user
  properties:
  - url: https://docs.propelauth.com/reference/api/user
    type: Documentation
  - url: https://docs.propelauth.com/reference/api/getting-started
    type: GettingStarted
  - url: openapi/propelauth-user-api-openapi.yml
    type: OpenAPI
  - url: json-schema/propelauth-user-schema.json
    type: JSONSchema
  - url: json-ld/propelauth-context.jsonld
    type: JSONLD
  - url: examples/propelauth-create-user-example.json
    type: Example
  - url: examples/propelauth-create-magic-link-example.json
    type: Example
  - type: NaftikoCapability
    url: capabilities/user-management.yaml
  description: Backend REST API for managing PropelAuth-managed end users. Create, fetch, query, update, delete,
    enable/disable, and migrate users; issue magic links and short-lived access tokens; manage 2FA and force-logout
    sessions. Authenticated with a PropelAuth Backend Integration API key as a Bearer token.
- aid: propelauth:propelauth-org-api
  name: PropelAuth Organization API
  tags:
  - Authentication
  - Organizations
  - Multi-Tenancy
  - B2B
  humanURL: https://docs.propelauth.com/reference/api/org
  properties:
  - url: https://docs.propelauth.com/reference/api/org
    type: Documentation
  - url: openapi/propelauth-org-api-openapi.yml
    type: OpenAPI
  - url: json-schema/propelauth-org-schema.json
    type: JSONSchema
  - url: json-ld/propelauth-context.jsonld
    type: JSONLD
  - url: examples/propelauth-create-org-example.json
    type: Example
  - type: NaftikoCapability
    url: capabilities/org-management.yaml
  description: Backend REST API for managing tenant organizations in PropelAuth. CRUD on organizations, member
    management (add, remove, change role), invite flows, custom role mappings, and pending invite revocation. The
    multi-tenant core of every B2B SaaS PropelAuth deployment.
- aid: propelauth:propelauth-api-keys-api
  name: PropelAuth End-User API Keys API
  tags:
  - Authentication
  - API Keys
  - Machine-to-Machine
  - B2B
  humanURL: https://docs.propelauth.com/reference/api/apikey
  properties:
  - url: https://docs.propelauth.com/reference/api/apikey
    type: Documentation
  - url: openapi/propelauth-api-keys-api-openapi.yml
    type: OpenAPI
  - url: json-schema/propelauth-api-key-schema.json
    type: JSONSchema
  - url: examples/propelauth-validate-api-key-example.json
    type: Example
  - type: NaftikoCapability
    url: capabilities/api-key-validation.yaml
  description: Backend REST API for issuing, validating, listing, updating, and revoking end-user API keys that
    PropelAuth manages on behalf of your users and tenant organizations. Includes personal and org-scoped keys,
    imported legacy keys, and per-key usage reporting. Up to 5M validations / month with the Advanced API Keys
    add-on.
- aid: propelauth:propelauth-oauth2-api
  name: PropelAuth OAuth2 API
  tags:
  - Authentication
  - OAuth 2.0
  - OpenID Connect
  - Identity Provider
  humanURL: https://docs.propelauth.com/reference/api/oauth2
  properties:
  - url: https://docs.propelauth.com/reference/api/oauth2
    type: Documentation
  - url: openapi/propelauth-oauth2-api-openapi.yml
    type: OpenAPI
  - type: NaftikoCapability
    url: capabilities/oauth2-identity-provider.yaml
  description: OAuth 2.0 / OpenID Connect identity-provider endpoints exposed by your PropelAuth Auth URL. Use
    PropelAuth as an OIDC provider for first-party and third-party OAuth clients, including no-code / low-code and
    OIDC-aware backends. Authorize, token exchange, refresh, userinfo, logout, and OIDC discovery.
- aid: propelauth:propelauth-mcp-api
  name: PropelAuth MCP Authentication API
  tags:
  - Authentication
  - MCP
  - OAuth 2.1
  - AI Agents
  - Beta
  humanURL: https://docs.propelauth.com/mcp-authentication/overview
  properties:
  - url: https://docs.propelauth.com/mcp-authentication/overview
    type: Documentation
  - url: openapi/propelauth-mcp-api-openapi.yml
    type: OpenAPI
  - type: NaftikoCapability
    url: capabilities/mcp-authentication.yaml
  description: OAuth 2.1 authorization-server endpoints for Model Context Protocol (MCP) clients and AI agents.
    Authorize with PKCE, exchange and refresh tokens, introspect access tokens, dynamically register MCP clients
    (RFC 7591), and discover OAuth 2.1 server metadata. Secure MCP servers with PropelAuth identities and
    organization-scoped permissions.
name: PropelAuth
tags:
- Authentication
- Identity
- B2B
- Multi-Tenancy
- Authorization
- RBAC
- SSO
- SCIM
- MCP
- API Keys
kind: contract
image: https://kinlane-productions2.s3.amazonaws.com/apis-json/apis-json-logo.jpg
access: 3rd-Party
common:
- url: https://www.propelauth.com
  type: Portal
- url: https://docs.propelauth.com
  name: PropelAuth Docs
  type: Documentation
- url: https://docs.propelauth.com/getting-started
  name: Getting Started
  type: GettingStarted
- url: https://docs.propelauth.com/reference
  name: Reference Documentation
  type: Documentation
- url: https://docs.propelauth.com/reference/api/getting-started
  name: Backend API — Getting Started
  type: Documentation
- url: https://docs.propelauth.com/reference/api/user
  name: User API Reference
  type: Documentation
- url: https://docs.propelauth.com/reference/api/org
  name: Organization API Reference
  type: Documentation
- url: https://docs.propelauth.com/reference/api/apikey
  name: API Keys Reference
  type: Documentation
- url: https://docs.propelauth.com/reference/api/oauth2
  name: OAuth2 API Reference
  type: Documentation
- url: https://docs.propelauth.com/mcp-authentication/overview
  name: MCP Authentication Overview
  type: Documentation
- url: https://www.propelauth.com/pricing
  name: PropelAuth Pricing
  type: Pricing
- url: https://status.propelauth.com/
  name: PropelAuth Status
  type: StatusPage
- url: https://status.propelauth.com/default/history.rss
  name: PropelAuth Status RSS
  type: StatusPage
- url: https://www.propelauth.com/blog
  name: PropelAuth Blog
  type: Blog
- url: https://www.propelauth.com/legal/terms-of-service
  type: TermsOfService
- url: https://www.propelauth.com/legal/privacy-policy
  type: PrivacyPolicy
- url: https://auth.propelauth.com/en/signup
  name: Sign Up
  type: SignUp
- url: https://byo.propelauth.com
  name: Bring Your Own Auth
  type: Documentation
- url: https://docs.propelauth.com/files/PropelAuth.postman_collection.json
  name: Postman Collection
  type: Documentation
- url: [email protected]
  type: Support
- url: https://github.com/PropelAuth
  type: GitHubOrganization
- url: https://github.com/PropelAuth/react
  name: React SDK
  type: SDK
- url: https://github.com/PropelAuth/javascript
  name: JavaScript SDK
  type: SDK
- url: https://github.com/PropelAuth/nextjs
  name: Next.js SDK (App + Pages Router)
  type: SDK
- url: https://github.com/PropelAuth/node
  name: Node.js SDK
  type: SDK
- url: https://github.com/PropelAuth/express
  name: Express Middleware
  type: SDK
- url: https://github.com/PropelAuth/propelauth-fastapi
  name: FastAPI SDK
  type: SDK
- url: https://github.com/PropelAuth/propelauth-flask
  name: Flask SDK
  type: SDK
- url: https://github.com/PropelAuth/propelauth-py
  name: Python SDK
  type: SDK
- url: https://github.com/PropelAuth/propelauth-django-rest-framework
  name: Django REST Framework SDK
  type: SDK
- url: https://github.com/PropelAuth/propelauth-go
  name: Go SDK
  type: SDK
- url: https://github.com/PropelAuth/rust
  name: Rust Crate
  type: SDK
- url: https://github.com/PropelAuth/dotnet
  name: .NET SDK
  type: SDK
- url: https://github.com/PropelAuth/propelauth-rb
  name: Ruby SDK
  type: SDK
- url: https://github.com/PropelAuth/cloudflare-worker
  name: Cloudflare Worker SDK
  type: SDK
- url: https://github.com/PropelAuth/frontend-apis
  name: Frontend APIs
  type: SDK
- url: https://github.com/PropelAuth/node-apis
  name: Node Backend APIs
  type: SDK
- url: https://github.com/PropelAuth/cli
  name: PropelAuth CLI
  type: Tool
- url: https://github.com/PropelAuth/terraform-provider-propelauth
  name: Terraform Provider
  type: Tool
- url: https://github.com/PropelAuth/byo-go
  name: BYO Auth (Go)
  type: Tool
- url: https://github.com/PropelAuth/propelauth-byo-java
  name: BYO Auth (Java)
  type: Tool
- url: https://github.com/PropelAuth/base-elements
  name: React Base Elements
  type: Tool
- url: https://github.com/PropelAuth/documentation
  name: Documentation Source
  type: Documentation
- url: https://github.com/PropelAuth/react-frontend-starter
  name: React Frontend Starter
  type: CodeExamples
- url: https://github.com/PropelAuth/express-backend-starter
  name: Express Backend Starter
  type: CodeExamples
- url: https://github.com/PropelAuth/flask-backend-starter
  name: Flask Backend Starter
  type: CodeExamples
- url: https://github.com/PropelAuth/fastapi-backend-starter
  name: FastAPI Backend Starter
  type: CodeExamples
- url: https://github.com/PropelAuth/python-chalice-backend-starter
  name: Python Chalice Backend Starter
  type: CodeExamples
- url: https://github.com/PropelAuth/rust-axum-starter
  name: Rust Axum Starter
  type: CodeExamples
- url: https://github.com/PropelAuth/redwood
  name: RedwoodJS Starter
  type: CodeExamples
- url: https://github.com/PropelAuth/postgraphile-propelauth-starter
  name: PostGraphile Starter
  type: CodeExamples
- url: https://github.com/PropelAuth/nextjs-example-app
  name: Next.js Example App
  type: CodeExamples
- url: https://github.com/PropelAuth/react-express-comment-example
  name: React + Express Comment Example
  type: CodeExamples
- url: https://github.com/PropelAuth/demo-genai-api-keys
  name: GenAI API Keys Demo
  type: CodeExamples
- url: https://github.com/PropelAuth/demo-b2b-coupon-generator
  name: B2B Coupon Generator Demo
  type: CodeExamples
- url: https://github.com/PropelAuth/windows-login-pages
  name: Windows Login Pages
  type: CodeExamples
- url: plans/propelauth-plans-pricing.yml
  type: Plans
- url: rate-limits/propelauth-rate-limits.yml
  type: RateLimits
- url: finops/propelauth-finops.yml
  type: FinOps
- url: vocabulary/propelauth-vocabulary.yml
  type: Vocabulary
- url: rules/propelauth-rules.yml
  type: SpectralRuleset
- type: Features
  data:
  - Hosted, customizable login UIs for B2B SaaS
  - First-class organizations / tenants with custom roles and granular permissions (RBAC)
  - End-user API keys (personal and org-scoped) with validation, usage stats, and import of legacy keys
  - Enterprise SSO via SAML and OIDC with self-service per-organization setup (Okta, Entra ID, etc.)
  - SCIM directory sync for enterprise customers (Growth Plus and Enterprise tiers)
  - MCP server authentication via OAuth 2.1, PKCE, dynamic client registration, and token introspection
  - User impersonation with audit trail and alerting
  - Multi-factor authentication (TOTP) enforceable per organization
  - Magic links and password authentication with configurable password policies
  - Per-organization 2FA enforcement and session controls
  - OAuth 2.0 / OpenID Connect identity-provider endpoints including discovery
  - User migration from external auth providers (bcrypt, argon2, scrypt, pbkdf2, firebase scrypt)
  - Separate staging environment included on Growth tier and above
  - Custom domain on the free tier
  - Backend SDKs for Node, Express, FastAPI, Flask, Django REST Framework, Python, Go, Rust, .NET, Ruby, and Cloudflare Workers
  - Frontend SDKs for React, JavaScript, and Next.js (App + Pages Router)
  - Official PropelAuth CLI and Terraform provider for infrastructure-as-code
  - Postman collection for the entire backend API
  - 10,000 MAU included on every tier; overage $0.05/MAU on Growth and Growth Plus
  - Advanced API Keys add-on for 5,000,000 monthly validations
  - Bring-Your-Own-Auth deployment mode (`byo.propelauth.com`)
  sources:
  - https://www.propelauth.com
  - https://www.propelauth.com/pricing
  - https://docs.propelauth.com
  - https://docs.propelauth.com/reference/api/getting-started
  - https://github.com/PropelAuth
  updated: '2026-05-25'
created: '2026-05-25T00:00:00.000Z'
modified: '2026-05-25'
position: Providing
description: PropelAuth is a B2B SaaS authentication and multi-tenant user management platform purpose-built for
  organizations that sell to other organizations. It provides hosted login UIs, first-class organizations / tenants
  with custom roles and permissions, enterprise SSO via SAML and OIDC, SCIM directory sync, end-user API keys with
  validation and usage reporting, OAuth 2.0 / OpenID Connect identity-provider endpoints, and OAuth 2.1 MCP server
  authentication with dynamic client registration for AI agents. Backend SDKs span Node, Express, FastAPI, Flask,
  Django REST Framework, Python, Go, Rust, .NET, Ruby, and Cloudflare Workers; frontend SDKs cover React,
  JavaScript, and Next.js (App + Pages Router). A Terraform provider and official CLI back infrastructure-as-code
  workflows. Pricing starts free with 10,000 MAU and scales through Growth ($150/mo) and Growth Plus ($500/mo) to
  custom Enterprise contracts.
maintainers:
- FN: Kin Lane
  email: [email protected]
  X: apievangelist
  url: https://apievangelist.com
specificationVersion: '0.16'