WordAuth OS

Identity infrastructure you compose

WordAuth OS is a modular auth platform with a unified Auth API, directory users, SSO, SCIM, passkeys, and our signature memorable word-pair OTP. Enable services in the dashboard — pay for what you use.

15+
Identity services
Auth, SSO, SCIM, MFA, webhooks, and more
70+
API endpoints
REST API at os.wordauth.com
6
Login methods
OTP, password, magic link, social, passkey, SSO
TS
Official SDK
wordauth npm package with full OS coverage

Everything you need for identity

WorkOS-style capabilities with WordAuth's developer experience

Unified Auth API

One API for login and signup across OTP, password, magic link, social, passkeys, and SSO — all returning the same session shape.

Modular services

Enable Auth, SSO, SCIM, MFA, sessions, webhooks, and more independently. Dependent services require Auth.

Memorable OTP

Our signature two-word codes — more memorable than digits, with the same drop-in generate/validate API.

Enterprise-ready

SAML & OIDC SSO, SCIM provisioning, RBAC, audit logs, session management, and admin portal branding.

Services you can enable

Each service adds dashboard configuration, API permissions, and docs

AuthOTPEmail & passwordMagic linkSocial loginPasskeysSSOMFAUsersRBACSessionsSCIMWebhooksAudit logsAdmin portal

How WordAuth OS works

Create an organization, enable services, issue API keys, integrate

1

Enable services

Turn on Auth plus the login methods and enterprise features your product needs.

2

Configure policies

Set session lifetime, MFA rules, SSO connections, and OTP delivery from the dashboard.

3

Call the Auth API

Use the TypeScript SDK or REST API at os.wordauth.com to run login, signup, and admin flows.

Auth API example
import { WordAuth } from "wordauth";

const wordauth = new WordAuth({
  apiKey: "sk_live_your_api_key",
  subOrgId: "your-sub-org-id",
});

const { methods } = await wordauth.auth.methods();
const { otp_id } = await wordauth.auth.login.otp.send({
  email: "[email protected]",
});
const { session } = await wordauth.auth.login.otp.verify({
  email: "[email protected]",
  otp_id,
  code: "red bird",
});

Build identity your way

Start with Auth and OTP. Add SSO, SCIM, and passkeys when you're ready.