Open beta — bring your own OAuth credentials
The free, LLM-friendly
Auth0 alternative.
Drop-in identity for your apps. Bring your own Google, GitHub or OIDC credentials — users see your brand, not ours.
How AuthCog works
One identity provider, every protocol. Connect any number of relying sites under your account.
One subdomain per site
Each app gets {name}.authcog.com with its own JWT secret, providers and consent screen.
Any provider
Built-in Google, Facebook, GitHub, Microsoft. Custom OAuth2/OIDC via JSON. SAML through BoxyHQ.
Per-site consent
Users explicitly authorize each relying site. GDPR-friendly, audit-ready.
Verify a token in 3 lines
const res = await fetch('https://api.authcog.com/v1/tokens/verify', {
method: 'POST',
body: JSON.stringify({ token, site_subdomain: 'my-app' }),
})
const { email, sub } = await res.json()