-
+
+
+
+
+ +**The user infrastructure platform.** + +Hexclave handles everything around your users: authentication, teams, +payments, emails, analytics, and much more. Start in minutes on the hosted +cloud. Your data is always yours to export and self-host. + +[Website](https://hexclave.com) ยท [Docs](https://docs.hexclave.com) ยท [Dashboard](https://app.hexclave.com) ยท [Discord](https://discord.hexclave.com) + + + + +
-## Table of contents
+---
-
-
+
+
+
+
++ +**The user infrastructure platform.** + +Hexclave handles everything around your users: authentication, teams, +payments, emails, analytics, and much more. Start in minutes on the hosted +cloud. Your data is always yours to export and self-host. + +[Website](https://hexclave.com) ยท [Docs](https://docs.hexclave.com) ยท [Dashboard](https://app.hexclave.com) ยท [Discord](https://discord.hexclave.com) + + + + +
+ 
+
-- [How is this different from X?](#how-is-this-different-from-x)
-- [โจ Features](#-features)
-- [๐ฆ Installation & Setup](#-installation--setup)
-- [๐ฑ Some community projects built with Hexclave](#-some-community-projects-built-with-hexclave)
- - [Templates](#templates)
- - [Examples](#examples)
-- [๐ Development & Contribution](#-development--contribution)
- - [Requirements](#requirements)
- - [Setup](#setup)
- - [Useful commands](#useful-commands)
-- [โค Contributors](#-contributors)
+## Get started
-
+Setting up Hexclave is one prompt. Paste this into your coding agent of choice:
-## How is this different from X?
-
-Ask yourself about `X`:
-
-- Is `X` open-source?
-- Is `X` developer-friendly, well-documented, and lets you get started in minutes?
-- Besides authentication, does `X` also do authorization and user management (see feature list below)?
-
-If you answered "no" to any of these questions, then that's how Hexclave is different from `X`.
-
-## โจ Features
-
-To get notified first when we add new features, please subscribe to [our newsletter](https://stack-auth.beehiiv.com/subscribe).
-
-| | |
-|-|:-:|
-|
+`
Authentication components that support OAuth, password credentials, and magic links, with shared development keys to make setup faster. All components support dark/light modes. | 
|
-| Idiomatic Next.js APIs
We build on server components, React hooks, and route handlers. |  | -|User dashboard
Dashboard to filter, analyze, and edit users. Replaces the first internal tool you would have to build. |  | -|Account settings
Lets users update their profile, verify their e-mail, or change their password. No setup required. |
|
-| Multi-tenancy & teams
Manage B2B customers with an organization structure that makes sense and scales to millions. |
|
-| Role-based access control
Define an arbitrary permission graph and assign it to users. Organizations can create org-specific roles. |
|
-| OAuth Connections
Beyond login, Hexclave can also manage access tokens for third-party APIs, such as Outlook and Google Calendar. It handles refreshing tokens and controlling scope, making access tokens accessible via a single function call. |
|
-| Passkeys
Support for passwordless authentication using passkeys, allowing users to sign in securely with biometrics or security keys across all their devices. |
|
-| Impersonation
Impersonate users for debugging and support, logging into their account as if you were them. |
|
-| Webhooks
Get notified when users use your product, built on Svix. |
|
-| Automatic emails
Send customizable emails on triggers such as sign-up, password reset, and email verification, editable with a WYSIWYG editor. |
|
-| User session & JWT handling
Hexclave manages refresh and access tokens, JWTs, and cookies, resulting in the best performance at no implementation cost. |
|
-| M2M authentication
Use short-lived access tokens to authenticate your machines to other machines. |
|
-
-
-## ๐ฆ Installation & Setup
-
-To install Hexclave in your Next.js project (for React, JavaScript, or other frameworks, see our [complete documentation](https://docs.hexclave.com)):
-
-1. Run Hexclave's installation wizard with the following command:
- ```bash
- npx @hexclave/cli@latest init
- ```
-
-2. Then, create an account on the [Hexclave dashboard](https://app.hexclave.com/projects), create a new project with an API key, and copy its environment variables into the .env.local file of your Next.js project:
- ```
- NEXT_PUBLIC_STACK_PROJECT_ID=
-### Useful commands
+###  Authentication
-```sh
-# NOTE:
-# Please see the dev launchpad (default: http://localhost:8100) for a list of all running services.
+Authentication that just works with passkeys, OAuth, and CLI auth. Drop in one component and ship the whole flow; auth methods toggle from the dashboard with no code changes needed.
-# Installation commands
-pnpm install: Installs dependencies
+ |
+
+
+ |
+
-# Build commands
-pnpm build: Builds all projects, including apps, packages, examples, and docs. Also runs code-generation tasks. Before you can run this, you will have to copy all `.env.development` files in the folders to `.env.production.local` or set the environment variables manually.
-pnpm build:packages: Builds all the npm packages.
-pnpm codegen: Runs all the code-generation tasks, eg. Prisma client and OpenAPI docs generation.
+###  Teams
-# Development commands
-pnpm dev: Runs the development servers of the main projects, excluding most examples. On the first run, requires the packages to be built and codegen to be run. After that, it will watch for file changes (including those in code-generation files). If you have to restart the development server for anything, that is a bug that you can report.
-pnpm dev:full: Runs the development servers for all projects, including examples.
-pnpm dev:basic: Runs the development servers only for the necessary services (backend and dashboard). Not recommended for most users, upgrade your machine instead.
+Build for teams, not just users, with workspaces, email invites, and roles that actually gate the work. The workspace switcher remembers selection, invites auto sign up new users, and permissions hold up under audit.
-# Environment commands
-pnpm start-deps: Starts the Docker dependencies (DB, Inbucket, etc.) as Docker containers, and initializes them with the seed script & migrations. Note: The started dependencies will be visible on the dev launchpad (port 8100 by default).
-pnpm stop-deps: Stops the Docker dependencies (DB, Inbucket, etc.) and deletes the data on them.
-pnpm restart-deps: Stops and starts the dependencies.
+ |
+
+
+ |
+
-# Testing commands
-pnpm test  RBAC
-# Various commands
-pnpm explain-query: Paste a SQL query to get an explanation of the query plan, helping you debug performance issues.
-pnpm verify-data-integrity: Verify the integrity of the data in the database by running a bunch of integrity checks. This should never fail at any point in time (unless you messed with the DB manually).
-```
+Permissions, sorted: roles that nest and one permission check that works the same on server or client. Define them in the dashboard, check them anywhere in your code.
-Note: When working with AI, you should keep a terminal tab with the dev server open so the AI can run queries against it.
+ |
+
+
+ |
+
+
+###  API Keys
+
+API keys without the footguns: leaked keys get auto-revoked, work for users and teams, and show the full secret only once. We never keep the plaintext after creation.
+
+ |
+
+
+ |
+
+
+###  Payments
+
+Payments without the plumbing for subscriptions, one-time charges, and usage metering with credits. Bill a person or a whole team with one model, no separate codepath.
+
+ |
+
+
+ |
+
+
+###  Emails
+
+Email that delivers and tells you so, handling transactional and marketing sends from one API. Edit templates with an AI editor, theme once, and track every open and click.
+
+ |
+
+
+ |
+
+
+###  Analytics
+
+Know your users with no data stack required, with live active user counts and session replays out of the box. Ask in plain English to build dashboards or write SQL to save queries, all with one flag enabled.
+
+ |
+
+
+ |
+
+
+###  Webhooks
+
+React to every user event in real time with signed, tamper-proof webhooks. Retries and backoff are handled for you; verify in five lines and manage endpoints from the dashboard.
+
+ |
+
+
+ |
+
+
+###  Data Vault
+
+A safe for the secrets your users hand you, locked with your secret so we never see the plaintext. Store and retrieve tokens in two lines each, server-only by design.
+
+ |
+
+
+ |
+
+
+###  Launch Checklist
+
+Run through the must-do checks before flipping to production: domain setup, callbacks locked, secrets rotated. The progress tracker keeps your team aligned so nothing critical slips through on launch day.
+
+ |
+
+
+ |
+