Build anything. Ship today.
Open source auth, database, and payment infrastructure — extracted from a PCI-compliant payment platform. Drop in what you need. Leave what you don't. Your app, your way.
Pick what you need. Leave the rest.
Auth, database, payments, SDKs — all open source, all battle-tested, all designed to work together or standalone. Your custom schemas reference the same users and roles — no mapping tables, no sync jobs, no impedance mismatch.
Auth + Database
Identity from idp. Custom schemas from VibeSQL. Your app data foreign-keys to real users and roles.
Drop-In MVPs
npm install a complete auth system. Login, 2FA, sessions, RBAC, membership — working in minutes.
Custom Schemas
Define your app's tables in VibeSQL. They foreign-key to vibe_app users and roles automatically.
HSM Key Rotation
Rotate your signing keys with CryptAply — backed by Azure Key Vault with hardware security modules. Free tier.
PostgreSQL via HTTP
Full PostgreSQL 16 over REST. No drivers, no connection strings. Works from any language or agent.
Zero-Config ORM
Vibe SDK watches your schema and generates typed TypeScript classes. No Prisma, no decorators, no build step.
Open Source MVPs
Complete membership in one package
Fully open source. Use it however you want — commercial, personal, remix it, fork it. Install the MVP. Set 4 env vars. Under 10 minutes to your first login screen with auth, sessions, RBAC, audit trails, and Stripe billing already done. Your custom schemas foreign-key to real users. Agent collaboration ready.
@payez/next-mvpOpen source full-stack authentication and membership for Next.js. Login, signup, 2FA, session management, RBAC, OAuth providers, and VibeSQL integration — all wired to idp.payez.net. Use it however you want. AI agents can scaffold and customize it.
npm install @payez/next-mvppayez-react-native-mvpOpen source native mobile authentication for React Native. Zustand state management, biometric support, deep linking, automatic token refresh — same IDP, same schemas, same roles. Your mobile app shares the same user base as your web app.
git clone payez-react-native-mvpYou write components, pages, and business logic. Everything else is inherited. MIT licensed.
Your data, linked to real identity
vibesqlThe vibe_app schema gives you users, roles, and permissions out of the box. Your custom schemas — products, orders, content, whatever your app needs — foreign-key directly to those tables. No separate user tables. No sync. One source of truth.
Built on VibeSQL — full PostgreSQL 16 over HTTP. Schema changes hot-reload into typed TypeScript classes via the Vibe SDK.
-- Your custom schema links to identity
CREATE TABLE orders (
id SERIAL PRIMARY KEY,
user_id INT REFERENCES vibe_app.users(id),
product TEXT NOT NULL,
amount DECIMAL(10,2),
created_at TIMESTAMPTZ DEFAULT now()
);
-- Query with the user's identity
SELECT o.*, u.email, u.roles
FROM orders o
JOIN vibe_app.users u ON u.id = o.user_id
WHERE o.user_id = $1;The ORM that disappears
Change your VibeSQL schema, save the file — your TypeScript types update automatically. No Prisma schema files. No TypeORM decorators. No migration scripts. No build step. Fully typed CRUD, React hooks, and server components generated from your live database.
npm install @vibe/sdk// No ORM config. No schema file. Just use it.
import { useVibeCollection } from '@vibe/sdk/react';
export function OrderHistory() {
// 'orders' is fully typed from your VibeSQL schema
const { data, isLoading } = useVibeCollection('orders');
if (isLoading) return <Spinner />;
return (
<ul>
{data?.map(order => (
<li key={order.id}>
{order.product} — ${order.amount}
</li>
))}
</ul>
);
}Security Heritage
Not another auth startup. A payment platform that opened the gates.
PayEz started as payment processing infrastructure — PCI-compliant, HSM-backed, audited. The identity layer that secured those transactions is now available as idp. — and the data platform that powered them is VibeSQL. 23 months and 1,300+ commits of hardened infrastructure, now open to builders.
Rotate your JWT signing keys through a real key management UI — backed by Azure Key Vault with hardware security modules. List versions, prime new keys, monitor key health. Most auth providers don't expose this at all. We include it on every plan.
Identity + Database PricingTransparent pricing. No SSO tax.
Auth, users, roles, custom schemas, and VibeSQL included at every tier. 100K MAU + 3 SSO connections for $199/mo — competitors charge $2,500+ for the same.
Starter
- ✓10K monthly active users
- ✓Email/password + social login
- ✓Multi-factor authentication
- ✓VibeSQL custom schemas
- ✓Community support
- ✓Up to 3 applications
Pro
- ✓25K monthly active users
- ✓Custom branding & domains
- ✓Webhooks & event streams
- ✓Unlimited custom schemas
- ✓Email support (24h SLA)
- ✓Up to 10 applications
Business
- ✓100K monthly active users
- ✓3 SSO connections included
- ✓RBAC with custom roles
- ✓SCIM provisioning
- ✓Priority support (4h SLA)
- ✓Unlimited applications
Enterprise
- ✓Unlimited monthly active users
- ✓Unlimited SSO connections
- ✓Dedicated infrastructure
- ✓Custom SLAs & BAAs
- ✓99.99% uptime SLA
- ✓Dedicated success engineer
For Developers
Standard OIDC. Any backend.
idp.payez.net exposes standard OAuth 2.0 / OpenID Connect endpoints. Use the MVPs for instant frontend auth, or wire up any backend with JWKS discovery.
// .NET — standard JWT bearer auth
builder.Services
.AddAuthentication("Bearer")
.AddJwtBearer(o => {
o.Authority = "https://idp.payez.net";
o.Audience = "your-client-id";
});
// JWKS auto-discovered. Claims on HttpContext.User.
// Works with Go, Python, Node — anything OIDC.Works with everything
The MVPs give you the fastest path — install and go. But idp.payez.net is standard OIDC. JWKS, discovery, token validation. .NET, Go, Python, Node — if your framework has JWT middleware, it works.
Get API KeysNeed payments too?
cloud. is the payment processing side of PayEz — cards, ACH, vaulting, Stripe subscriptions, all PCI-compliant. Same platform, same identity layer, same API keys.
Charge, void, refund. NACHA-compliant bank transfers. End-to-end encrypted.
PCI-compliant card & ACH tokenization. User-scoped isolation.
Subscriptions, invoices, webhooks — managed server-side.
Encrypted card data, dedicated Encryption API. Built in, not bolted on.
// Same auth, now charge a card
const result = await fetch(
"https://cloud.payez.net/v1/payments/charge",
{
method: "POST",
headers: {
"Authorization": `Bearer ${session.accessToken}`,
"X-Correlation-Id": crypto.randomUUID()
},
body: JSON.stringify({
vault_token: "vtok_abc123",
amount: 4999,
currency: "usd"
})
}
).then(r => r.json());Start building. It's open source.
Grab the pieces you need — auth, database, payments, SDKs. 10K MAU free. Custom schemas from day one. No credit card required.