Pricing
Plans that Scale with You
Choose a free plan to start, and upgrade whenever you're ready.
Base plan
- Production-ready authentication
- Upto 50,000 MAUs
- Upto 5,000 M2M tokens / month
- Unlimited social providers
- Passkeys & Magic Links
- 3-day audit log retention
- 50,000 MAUs (Scalable)
- 5,000 M2M tokens (Scalable)
- Unlimited groups
- User session management
- No MonoCloud watermark
- 7-day audit log retention
Your total
- Pro plan$24.99
Token introspection, opaque & session-bound tokens, long-lived sessions, group-based client restrictions, Google Analytics.
$99.99 /mo
Consent-based access controls, user grants, back-channel logout, JAR & PAR, 30-day audit log retention.
$99.99 /mo
25,000 mTLS tokens and 10,000 OCSP validations per month, certificate-bound tokens, custom CAs, CRL management.
$199.99 /mo
SPIFFE X.509-SVID and JWT-SVID authentication, federated trust domain bundles, banned SVID management.
$24.99 /mo
Basic
FreeProNumber of unique users who authenticate at least once during a billing cycle.
Up to 50,000 MAUs per monthIncludes 50,000 MAUs per month$0.015 per additional MAUAllow or block signups based on emails, phone numbers, or custom regex.
Access and manage your tenant programmatically via API keys.
Includes 1Up to 3Authentication and Authorization
FreeProAllow users to sign in with a secure password.
Define custom password complexity rules and enforce reuse policies.
Allow users to authenticate using a unique username.
Allow users to sign in using social providers like Google, Apple, GitHub, and more.
Allow users to authenticate securely using device passkeys and biometrics.
Authenticate users via email magic links or one-time passcodes (OTP).
Customize OTP length, and expiration for both OTPs and Magic Links.
Authenticate users with one-time passcodes sent directly to their phones via SMS.
Up to 25 SMS per monthIncludes 25 SMS per monthMarket rate per additional SMS, or bring your own SMS providerConfigure the length and expiration duration of SMS OTPs.
Enable secure sign-ins on input-constrained devices using the OAuth 2.0 Device Authorization Grant.
Control which authenticators are permitted for each application.
The maximum number of secrets per application.
2 secrets50 secretsVerify client identity using Mutual TLS (mTLS) certificates.
mTLSConnectVerify client identity using SPIFFE X.509-SVID and JWT-SVID credentials.
Workload IdentityUse asymmetric keys in JWK format to authenticate clients.
Secure+Define your own custom shared secrets for client authentication.
Create client secrets with configurable expiration.
Create and manage custom API resources.
3 APIsUnlimitedEnable authentication for APIs.
ScaleXVerify API identity using Mutual TLS (mTLS) certificates.
ScaleXmTLSConnectUse asymmetric keys in JWK format to authenticate APIs.
ScaleXSecure+Define your own custom shared secrets for API authentication.
ScaleXCreate API secrets with configurable expiration.
ScaleXAllow APIs to securely validate and inspect access tokens.
ScaleXBind access tokens to underlying user sessions for enhanced security.
ScaleXInitiate authorization flows securely via a server-to-server backchannel.
Secure+Trigger secure sign-out via backchannel.
Secure+Log users out across multiple applications within the browser.
Ensure request integrity by signing authorization requests as JSON Web Tokens.
Secure+Require users to explicitly consent before applications access their data.
Secure+Organize users into groups to streamline role-based access control (RBAC).
Up to 2 groupsUnlimitedRestrict access to an application to members of specific groups.
ScaleXView and manage active user sessions.
Audit applications accessed by a user, including the number of active tokens, and authorization codes.
Revoke user authorized API access and scopes from applications.
Secure+Manage and revoke active tokens and authorization codes tied to a user.
Secure+Safeguard against automated credential-stuffing by limiting failed attempts per user or IP address, or both.
Configure the maximum duration of user sessions.
ScaleXConfigure the maximum duration of refresh tokens.
ScaleXBlock user access by suspending user accounts.
Read and write custom public and private metadata to user profiles.
Issue access tokens for automated backend systems, agents and non-human applications.
Up to 5,000 tokens per monthIncludes 5,000 tokens per month$0.0008 per additional tokenIssue access tokens securely bound to client certificates using mutual TLS.
Includes 25,000 mTLS tokens per month$0.002 per additional mTLS tokenmTLSConnectValidate incoming mTLS client certificates against online revocation authorities (OCSP).
Includes 10,000 OCSP checks per month$0.003 per additional checkmTLSConnectUpload and manage trust stores to validate mTLS client certificates.
Includes 1 trust store$99.99 per additional trust storemTLSConnectUpload and manage trust stores to validate SPIFFE SVIDs.
Includes 1 trust store$24.99 per additional trust storeWorkload IdentityIssue opaque access tokens that require Token Introspection for validation instead of JWT verification.
ScaleXThe total number of applications that can be registered and managed.
5UnlimitedCommunicate directly with our support team by opening an email ticket.
Access peer and staff support through our active Discord community.
Analytics
FreeProTrack authentication activities, access attempts, and administrative events for security compliance.
3-day retention7-day retentionExtendable up to 30 daysSecure+Forward authentication events to Google Analytics for monitoring and user insights.
ScaleXBranding
FreeProRemove the “Powered by MonoCloud” branding from hosted authentication pages.
Modify the appearance of your login pages to match your brand.
BasicAdvancedCreate and manage branded SMS templates for authentication messages.
Display custom Terms of Service and Privacy Policies during user sign-up.
Deliver emails through your own email delivery provider.
Deliver SMS messages through your own SMS provider.