Your app already has users.
Now it has agents.
Point the client at an instance. Unlimited SSO, same bill.
Get an instanceunlimited SSO
card or PO
Unlimited users. Unlimited SSO. Flat price. Hobby is $0 on a work email. Business $999. Scale $15,000/yr. Enterprise quoted. The pack is on /buy.
One plane. People, services, and agents.
| Kind | Holds | How they arrive | The path |
|---|---|---|---|
| People | a session | email, passkey, SSO | revoke |
| Services | a token | minted once | revoke |
| Agents | a scoped token | MCP auth | revoke |
Your Postgres. Nothing phones home.
Nobody can put your login behind a renegotiation.
| Move | What it means |
|---|---|
| Dump | Users, sessions and secrets live in a database you hold. Hosted or on your metal. |
| Leave | Leaving is a pg_dump. The format is ordinary PostgreSQL. Restore it. Boot. We are not in the path. |
| Same build | An enterprise licence runs the artifact we host. The wire does not change. |
No compliance certification is claimed. Hosted signup provisions the instance. On-prem is a licence, not a free download. The compatibility receipt is public, if you want the dated checks.
Read the compatibility receiptChange one URL.
The stock client keeps working. Point its baseURL at a Signet instance. The code you ship does not change. The published run is dated 2026-07-25.
Holding live users? The cutover is a written runbook: user rows, password hashes and live sessions copy across. Nobody resets a password. If you roll back, every pre-cutover session is still valid.
// your existing better-auth client
- baseURL: "https://your-current-auth.example.com"
+ baseURL: "https://auth.yourcompany.com"
// the published compatibility suite, dated 2026-07-25
// recorded 2026-07-25 against better-auth 1.6.23What ships today.
All of this works today. Two things are not finished: SAML SSO is proven against a conformance identity provider but not yet against the commercial ones, and the OAuth provider surface ships its core flow only. The full ledger is on the product page.
$299 a month. Same bill.
One enterprise customer or forty. Unlimited users and unlimited enterprise SSO connections are included. The next deal adds revenue, not a line item. Most vendors bill SSO per connection. Signet does not. The price is effective 2026-08-07.
Enterprise, with air-gap and a named contract, is quoted. The pack is on /buy.