Start with what your application needs. Each feature connects its supported approaches to the packages, frontend bindings, server adapters, frameworks, and integrations that make it work.
Compose credentials, magic links, sessions, passkeys, MFA, and connected-provider access without handing application identity to a framework.
Supported approaches
Email and password
Magic links
Sessions
Split-origin browser sessions
Passkeys and MFA
Auth.js provider sign-in
OAuth connections
Works with
Model organizations, memberships, invitations, ownership, active-account switching, and fail-closed data scope.
Supported approaches
Memberships and roles
Invitations
Active-account switching
Ownership transfer
Recoverable deletion
Render typed application email and deliver it through explicit SES, Mailgun, Postmark, Resend, SendGrid, SMTP, or capture-test providers.
Supported approaches
Rendered application email
Provider templates
Carry typed domain events, operation context, transactional delivery, and replay-safe processing across application boundaries.
Supported approaches
Domain events
Event storage and replay
Background jobs and workflows
Publish RSS, Atom, JSON Feed, sitemaps, and related discovery surfaces from portable feed contracts.
Supported approaches
RSS, Atom, and JSON Feed
Sitemaps and discovery
Works with
Apply fail-closed limits with trustworthy subjects and explicit Redis, Prisma, or Durable Object storage.
Supported approaches
Request limits
Distributed counters
Works with
Collect consent-aware application events and deliver them through explicit browser and server boundaries.
Supported approaches
Browser analytics
Server delivery
Authorize, encrypt, refresh, and revoke third-party credentials without moving provider APIs or product workflows into a generic abstraction.
Supported approaches
OAuth connections
Named providers
AT Protocol sessions
Register application devices, manage push destinations, establish bounded trust, and revoke device-backed access from one explicit identity boundary.
Supported approaches
Device registration and inventory
Push destinations
Trusted-device sessions
Authenticate browser extensions, CLIs, desktop apps, and mobile clients through system-browser authorization, PKCE, rotation, and device-aware revocation.
Supported approaches
Authorization code with PKCE
Native and extension callbacks
Device authorization flow
Token rotation and revocation
Establish same-user peer trust across mobile, desktop, and extension surfaces through a versioned protocol with selectable discovery and transport profiles.
Supported approaches
Peer trust establishment
Discovery profiles
Transport profiles
Build Playstack-connected browser extensions with MV3-safe runtime state, typed messaging, portable storage, and system-browser authentication.
Supported approaches
Extension authentication
MV3 runtime lifecycle
Typed messaging and storage
Extension policy and linting
Synchronize subscription state, project purchased access into stable grants, and enforce capabilities without scattering plan-name checks through application code.
Supported approaches
Subscription lifecycle
Entitlement projection
Request enforcement
No-card product trials
Billing operations
Issue scoped machine credentials, authenticate them at the server boundary, and record security-relevant actions without turning logs into policy.
Supported approaches
API key lifecycle
Scoped machine authentication
Structured audit recording
Compose server-authored products, one-time checkout, finite stock, immutable orders, and physical fulfillment without turning one provider into the domain model.
Supported approaches
Catalog and quotes
One-time checkout
Refunds and reconciliation
Physical fulfillment
Define typed notifications, resolve recipient preferences, deliver across explicit channels, and retain one provider-independent history of every send.
Supported approaches
Typed notification definitions
In-app inbox
Multi-channel delivery
Delivery history and feedback
Works with
Build waitlists, newsletters, release lists, and preference centers with explicit consent, segmentation, confirmation, and delivery boundaries.
Supported approaches
Subscription lifecycle
Consent and preferences
Segmentation
Broadcast delivery
Model portable content operations and compose AI-assisted generation through explicit providers, schemas, policy, and application-owned publication workflows.
Supported approaches
Content contracts
Structured AI generation
Content workflows
Use namespaced portable caches with typed serialization, tag invalidation, and explicit stampede-protection capabilities across Redis, Workers, and local runtimes.
Supported approaches
Namespaced key-value caching
Stampede-protected remember
Tag invalidation
Store and retrieve application objects through explicit filesystem, S3, or R2 providers with validated keys, metadata, streaming bodies, and signed access.
Supported approaches
Portable object storage
Signed download and upload access
Local and test storage
Build product-specific search on portable query, ranking, transport, and framework contracts without coupling records to a provider.
Supported approaches
Weighted lexical search
MiniSearch indexing
Next and Nest bindings
Share durable local mutations and synchronization semantics across web, Expo, and desktop clients while keeping product policy explicit.
Supported approaches
Atomic local mutations
Portable synchronization
Platform storage
Verify provider requests from raw bytes, claim events transactionally, enqueue normalized work exactly once, and keep provider parsing outside domain handlers.
Supported approaches
Raw-request verification
Transactional receipt claims
Provider normalization
Carry stable application errors across server and client boundaries, report normalized failures, and retain framework-native recovery without leaking sensitive context.
Supported approaches
Stable application errors
NestJS error boundary
React recovery boundaries
Provider-independent reporting
Authenticate GitHub App installations and compose application-owned repository access workflows with scoped, short-lived tokens.
Supported approaches
Installation authentication
Repository access provisioning
Reconciliation workflows
Compose authenticated realtime channels, resumable client state, WebRTC session control, and ICE or relay infrastructure without conflating events, signalling, and media.
Supported approaches
Authenticated realtime channels
WebRTC sessions and signalling
ICE and relay coordination
Issue signed licenses, activate device-bound seats, verify access offline, rotate refresh credentials, and revoke grants without coupling product policy to the token protocol.
Supported approaches
Offline license verification
Issuance and activation
Refresh and revocation
Entitlement projection
Compose installability, application-shell caching, update coordination, and push registration without confusing a service worker with local-first application data.
Supported approaches
Manifest and installation
Application-shell caching
Safe update coordination
Web Push registration
Compose application-owned React and Next surfaces from Chakra themes, controlled App UI and initial admin sections.
Supported approaches
Theme composition
Prebuilt and custom administration
Share locale policy and message catalogs across application UI, APIs and delivery without choosing a translation vendor.
Supported approaches
Locale and catalog contracts
UI and API composition
Works with
By
