Hexclave is a free, open source identity & access management (iam) project written in TypeScript and released under a custom open-source licence. It has 6,861 GitHub stars, 522 forks and 65 open issues, and was last pushed 7 hours ago. On this registry it ranks #9 of 11 tracked projects in Identity & Access Management (IAM), with 5 head-to-head comparisons available. It gained 2 stars over the last 6 tracked days.

What is Hexclave?

What it is

Hexclave is an open-source user infrastructure platform written in TypeScript and distributed under a license the repository metadata lists as NOASSERTION, while the README badge states MIT / AGPLv3. It describes itself as handling everything around a product's users: authentication, teams, payments, emails, analytics, and more. The project lives in the JavaScript and TypeScript ecosystem, shipping SDKs for Next.js, React, and plain JavaScript, and it is positioned against hosted identity and user-management services such as Auth0 and Clerk, both of which appear in its topic list.

The concrete problem it solves is the assembly work that surrounds every product's user model. Rather than stitching together separate vendors for login, workspace membership, role checks, subscriptions, transactional email, and event tracking, Hexclave ships these as a catalog of apps that share one user model and are switched on as a product needs them. The repository states that the developer chooses the frontend, backend, and database, and Hexclave handles the rest, which means the same identity and billing primitives can be reused across features instead of reimplemented per integration.

Key capabilities

  • Authentication with passkeys, OAuth, and CLI auth, delivered as a single drop-in component whose methods toggle from the dashboard without code changes.
  • Teams support with workspaces, email invites, roles, and a workspace switcher that remembers the selected workspace; invites auto sign up new users.
  • RBAC with nested roles and one permission check that behaves identically on server and client, defined in the dashboard and checked in code.
  • API keys for both users and teams, with automatic revocation of leaked keys and the full secret shown only once, since plaintext is not retained after creation.
  • Payments covering subscriptions, one-time charges, and usage metering with credits, billing either a person or a team through one model.
  • Emails for transactional and marketing sends from one API, with an AI template editor, shared theming, and open and click tracking.
  • Analytics with live active user counts and session replays, plus dashboards built from plain-English questions or saved SQL queries.
  • Webhooks that are signed and tamper-proof, with retries and backoff handled automatically and endpoints managed from the dashboard.

Who uses it and how

  • Product teams building multi-tenant SaaS that need workspaces, invites, and role-gated permissions on top of a shared user model.
  • Next.js and React developers who want authentication and billing wired into an existing application through the provided SDKs.
  • Teams replacing a hosted identity provider, given the explicit Auth0 and Clerk topics, while keeping control of the frontend, backend, and database.
  • Operators who need subscription and usage-based billing alongside API key issuance for user-facing or team-facing APIs.
  • Engineering teams running a pre-production checklist covering domain setup, locked callbacks, and rotated secrets before launch.

Getting started

The README presents setup as a single prompt pasted into a coding agent: read skill.hexclave.com and set up Hexclave in the project. AI agents can instead fetch current integration instructions by curling https://skill.hexclave.com?question=&context=, and deployment is offered as either cloud or self-hosted

project readme (upstream, from github) — read inline

Hexclave


The user infrastructure platform.

Hexclave handles everything around your users: authentication, teams, payments, emails, analytics, and much more. Get started with our AI prompt below.

Website · Docs · Dashboard · Discord

License SDKs Deploy


Get started

Setting up Hexclave is one prompt. Paste this into your coding agent of choice:

Read skill.hexclave.com and help me setup hexclave in this project

For AI agents

If you're an AI coding agent, use your web fetch tool or curl the skill documentation for up-to-date integration instructions:

curl -sSL "https://skill.hexclave.com?question=<your-question>&context=<your-context>"

What's included

Hexclave ships as a catalog of apps you switch on as your product needs them. Each one is built on the same user model, and new apps land regularly.

  Authentication

Authentication that just works with passkeys, OAuth, and CLI auth. Drop in one component and ship the whole flow; auth methods toggle from the dashboard with no code changes needed.

  Teams

Build for teams, not just users, with workspaces, email invites, and roles that actually gate the work. The workspace switcher remembers selection, invites auto sign up new users, and permissions hold up under audit.

  RBAC

Permissions, sorted: roles that nest and one permission check that works the same on server or client. Define them in the dashboard, check them anywhere in your code.

  API Keys

API keys without the footguns: leaked keys get auto-revoked, work for users and teams, and show the full secret only once. We never keep the plaintext after creation.

  Payments

Payments without the plumbing for subscriptions, one-time charges, and usage metering with credits. Bill a person or a whole team with one model, no separate codepath.

  Emails

Email that delivers and tells you so, handling transactional and marketing sends from one API. Edit templates with an AI editor, theme once, and track every open and click.

  Analytics

Know your users with no data stack required, with live active user counts and session replays out of the box. Ask in plain English to build dashboards or write SQL to save queries, all with one flag enabled.

  Webhooks

React to every user event in real time with signed, tamper-proof webhooks. Retries and backoff are handled for you; verify in five lines and manage endpoints from the dashboard.

  Data Vault

A safe for the secrets your users hand you, locked with your secret so we never see the plaintext. Store and retrieve tokens in two lines each, server-only by design.

  Launch Checklist

Run through the must-do checks before flipping to production: domain setup, callbacks locked, secrets rotated. The progress tracker keeps your team aligned so nothing critical slips through on launch day.

Contributing

Hexclave is open source, and contributions are welcome. Read CONTRIBUTING.md to get started, and say hello in Discord before picking up anything large. Found a security issue? Email [email protected].

❤ Contributors

Contributors

Frequently asked questions

Is Hexclave free to use?

Hexclave is open source. There is no licence fee and no seat count — you can self-host it or, where the project offers one, pay a vendor for a managed version instead.

What does Hexclave do?

Modular auth, payments, emails, and analytics for your product

What is Hexclave written in?

Hexclave is primarily written in TypeScript. Its source is publicly available at https://github.com/hexclave/hexclave, and it has 6,861 GitHub stars.