Skip to main content
The Auth primitive manages authentication for a fullstack app’s managed backend: read/update the auth configuration (providers, redirect URLs, signup policy) and perform admin user management (create, list, delete end-users).
Requires a fullstack app (naive.apps.create({ name, type: "fullstack" })). Admin user management uses the project service-role key — privileged operations. Gate or disable the auth primitive per user in the Account Kit when you don’t want an agent touching end-user accounts.

Two ways to use it

Omit { appId } to auto-resolve the user’s single fullstack app; pass it when they own several.

Auth configuration

Admin user management

This is the auth service’s admin API — for an app’s own runtime auth (sign-in, sessions) the deployed app uses the public anon key client-side; this primitive is the server-side admin surface.

REST

Your own project uses /v1/apps/<app-id>/…; an end-user’s project uses /v1/users/<user-id>/apps/<app-id>/…. See the Auth API reference.

Billing

Free — no per-operation credit cost. Account Kits can enable/disable the auth primitive per user.