Platform features

End-user login and signup with a unified session response.

• GET /v1/auth/methods — discover enabled methods
• OTP, password, magic link, passkey, social, and SSO flows
• Open signup support for self-serve registration
• Browser OAuth/SAML callbacks for social and SSO

Manage users across organizations.

• Create, update, bulk import, and assign users
• Organization scoping for multi-tenant products
• External ID support for migrations
• Pairs with SCIM for automated provisioning

Enterprise SSO and automated user lifecycle.

• SAML and OIDC connection management
• Group-to-role mapping
• SCIM 2.0 provisioning endpoints
• Connection test and metadata APIs

Session control, MFA, and observability.

• Session listing and revocation APIs
• Configurable MFA policy
• Audit log export
• Webhook events for auth lifecycle

Memorable verification codes as a first-class service.

• Generate and validate word pairs via API
• Email and SMS delivery channels
• Auth-wrapped OTP login/signup flows
• Configurable TTL and delivery settings

API keys, SDK, and interactive docs.

• Full-access API keys by default with optional scoping
• Official TypeScript SDK (wordauth on npm)
• Interactive API reference per service
• Dashboard playground for OTP testing