STOP BUILDING AUTH.
A production-ready authentication engine — complete with session management, a full OAuth2/OIDC provider, API key generation, and a full admin dashboard. Ship your app, not your auth stack.
What's inside
No stitching together libraries. No missing pieces. Forge Core is a complete auth layer — backend API and admin UI — ready to run.
Complete sign-up, sign-in, email verification, and password reset — production-ready from day one.
View, inspect, and revoke active sessions across your entire user base — including every app a member signed into with "Sign in with Forge."
Create time-limited programmatic access keys with metadata tracking and expiration management.
A full OAuth2/OIDC provider — PKCE-mandatory, JWKS key rotation, back-channel logout. Let other apps sign in with a Forge account.
An admin-grade member directory with infinite scroll. Built to handle user lists at any scale.
Transactional email via Resend — built in. Verification and reset flows work out of the box.
Per-client request limits on every OAuth2 endpoint, tunable straight from Settings — one noisy integrator can't starve another.
Every security-relevant action — token issuance, consent, admin actions, revocations — recorded to a queryable, retention-tuned event log.
A fully-built Forge UI dashboard for zero-code auth management — Cmd+K search across everything, a live notifications feed, no custom UI required.
Getting started
From zero to production-ready authentication without writing a single auth line.
Launch the Forge Core API. One service handles your entire authentication layer.
Integrate via REST API. Works with any framework, any platform, any language.
Manage users, sessions, and API keys from the Forge dashboard — or programmatically.
REST API
Every endpoint documented via OpenAPI. Drop Forge Core into your stack and call it — there's nothing to wire from scratch.
Open Dashboard