Identity, verification, and contact — one API.
A Clerk-style identity server for your apps: password and QuickHash verification, WhatsApp OTP, a drop-in contact widget, org-scoped API keys, and an admin panel — all self-hosted with MongoDB.
Identity verification
Verify usernames, emails, and passwords with bcrypt-backed hashing — or stateless QuickHash replay for fast client-side checks.
WhatsApp OTP
One-time passcodes delivered over WhatsApp with a 5-minute TTL, resend cooldowns, and wrong-answer lockout.
Contact widget
Drop in the Clerk-style contact + auth widget and start collecting messages on your site in minutes.
API keys & quotas
Org-scoped keys with a daily operation budget. Raw keys are never stored — only SHA-256 digests.
Multi-tenant by design
One account across many organizations. Sessions are HS256 JWTs with central revocation, not opaque tokens.
Admin & analytics
A super-admin panel to see every organization, plan, message, and enquiry across the platform.
Security posture
- bcrypt (cost 10) + SHA-256 key hashing
- HS256 short-lived JWTs · central revocation
- Org-scoped data with final ownership re-checks
- OAuth redirect allowlist · verified-email gate
- CSPRNG OTP codes · attempt lockout
Start building on self-IAM
Sign in to manage API keys and users, explore the API playground, or check out the pricing plans.