Auth in one prompt.
Anonymous by design.

AuthGravity is hosted, open-source, first-party passkey auth with authorization built in. Your users are a UUID and a public key, and everything else stays in your app. Point your coding agent at one URL and ship sign-in, permissions, and recovery before your coffee's done.

Try it — paste into your coding agent

Build a hello world app with Astro and AuthGravity. Details are at authgravity.org/llms.txt

Easy

npx @authgravity/cli listen mints a local sandbox in seconds: real auth against a throwaway pool, running the exact code you'll ship. When it's time to go live, connect your domain with one click through Domain Connect, or add a single CNAME yourself, and everything runs white-label on authgravity.yourapp.com. Hosted sign-in pages if you'd rather build zero UI.

Anonymous

The server stores public keys and a per-app UUID. There is nothing worth stealing. You collect what you need, when you actually need it, in your own database.

Passkeys

Spec-shaped WebAuthn with first-party cookies on your own domain, plus 12 written-down words as the recovery path for everyone and the fallback for devices without an authenticator. The whole UI is two buttons.

Authz built in

Zanzibar-style relationships and permissions on the same endpoint and session: define relations, write tuples, check on every gated action. Your agent reads the live schema straight from your llms.txt, so the docs are never stale.

EXPERIMENTAL

Person Server (AAuth)

Every user pool is also a Person Server: when an AI agent wants to act for one of your users, it has to ask. Your user approves on a consent page under your domain, can dial budgets down before granting, and can revoke anytime. Built on the AAuth IETF draft, interop-tested against live resources. Mint a sandbox and your agent has a working PS in seconds. Read the docs →