TryMellon
Add passkeys to your stack — don't replace it.

Passkeys in your existing auth. No migration. No new user model.

Your auth stack works. TryMellon adds passkeys to it — without replacing sessions, user models, or how you manage identity. Plug in the SDK, validate the session token on your backend, done.
Your B2B customers scale to 10,000 users. Your plan price stays flat.

Read the Docs
COMPATIBLE WITH
Next.jsSvelteReactVueAngularNode.js
Terminal
npm install @trymellon/js
auth.ts
import { TryMellon } from '@trymellon/js';

// 1) Initialize client
const clientResult = TryMellon.create({
  appId: 'your-app-id',
  publishableKey: 'pk_live_...',
});

if (!clientResult.ok) throw clientResult.error;

const client = clientResult.value;

// 2) Sign in user
const result = await client.signIn({
  externalUserId: 'user_123',
});

// 3) Validate session on backend
if (result.ok) {
  console.log('Session Token:', result.value.sessionToken);
}

B2B Ready from Day 1

Scale without rewriting. Isolation and API-first already solved.

Multi-Tenancy out of the box

B2B ready from day one. Organization, member and role isolation already handled. Your customers create their own organizations; you just bill.

Organization → Projects → Apps

AI Agent Onboarding

Stop sharing raw API keys. Your AI agent hits POST /v1/onboarding/ai and provisions its own scoped credentials instantly. Built for the era of Autonomous Systems.

// Your AI agent does this automatically
POST /v1/onboarding/ai
{ "user_role": "agent", "email": "[email protected]" }
→ { "publishable_key": "pk_live_...", "app_id": "..." }

Deslizá para ver más

Event-Driven Architecture

Real-time Webhooks for Audit Logs, User behavior, and Custom B2B flows.

Security you can explain to auditors

Zero-PII defaults, scoped credentials for AI agents, and clear data ownership boundaries—designed for B2B teams that live with compliance reviews.

Cross-device authentication with WebAuthn and QR

No mobile page? No problem. Use our bridge domain to add QR-based login in minutes — switch to your own domain later with zero migration.

1Your App (Desktop)2QR Code3TryMellon Bridge4User's Phone5Session Ready

Minutes to First Login

No /mobile-auth page to build. The SDK + bridge domain handles everything.

Secure by Default

WebAuthn passkeys on mobile. Session tokens, not passwords. Zero PII stored by default on our side.

Migrate Anytime

Switch to your own domain by changing one config value. No user re-registration.

Frequently Asked Questions

What your agents can do

Decentralized, anonymous auth—even for AI agents. One API that issues scoped credentials instead of raw keys, so you can rotate and audit them centrally.

Add TryMellon and get auth that works for humans and agents.

12345
  1. Step 1

    Agent gets credentials

    POST /onboarding/ai → tenant, client_id, publishableKey

  2. Step 2

    OAuth token

    Client credentials flow → Bearer token

  3. Step 3

    Provision users

    POST /v1/users → external_user_id

  4. Step 4

    Allow origin

    PATCH application → allowed_origins

  5. Step 5

    End users sign in

    Your app uses SDK → passkeys, no passwords

How it works

From npm install to first passkey login in under 30 minutes.

Passkeys and WebAuthn for B2B SaaS and AI platforms

TryMellon is a hosted backend and JavaScript SDK that adds passkey and WebAuthn login to your product without forcing you to rebuild authentication from scratch. B2B teams use it to get multi-tenant isolation, zero-PII defaults, and predictable pricing that scales with real usage instead of MAUs. The same APIs cover both human users and AI agents: frontends call the SDK, backends validate session tokens via HTTP, and you keep full control over sessions and user models in your own services.

  1. 1

    Install the SDK

    npm install @trymellon/js

  2. 2

    Create your app

    Dashboard → create app → add your origin → copy App ID and Client ID (publishable key).

  3. 3

    Sign up & sign in

    Call client.signUp() or client.signIn().

  4. 4

    Validate on your backend

    Send session_token to your backend; call TryMellon GET /v1/sessions/validate with Authorization: Bearer <session_token>; then set your own cookie/session.

Example scenarios

For B2B SaaS teams

B2B SaaS: cross-device auth in one sprint

Problem: Password-based login with inconsistent 2FA across customers; cross-device auth required custom flows per tenant.

Solution: Installed the SDK, enabled QR default bridge, wired session validation to existing middleware — tenants kept their own user models.

What changed: New tenants enable cross-device auth via a config flag instead of an engineering project.

For AI platform teams

AI agents: scoped credentials without raw API keys

Problem: Secrets scattered across prompts and config files; rotating a leaked key meant redeploying multiple agents.

Solution: Each agent calls POST /v1/onboarding/ai to self-provision scoped credentials; session tokens validated on the backend before any action.

What changed: Incident response is one revocation call instead of a prompt trawl and redeployment.

See it in action

Try a passkey flow right here. No account needed.

Try it now — no signup needed

This demo uses sandbox mode. Your passkey is not stored.

Uses your device's biometric or PIN. Nothing is stored.

  1. SDK initialized
  2. Challenge created
  3. Passkey ceremony
  4. Verify signature
  5. Session created

Enterprise Identity. Predictable Pricing.

Per-MAU micro-charges penalize growth. We provide realistic, tiered infrastructure limits.

The pricing examples on this page, including the “Cost for 10K Users” comparison row, are snapshots based on publicly available pricing pages for TryMellon, Clerk, and Auth0 as of March 2026. They are meant to illustrate the shape of costs for a typical B2B team evaluating passwordless auth vendors, not as a contractual quote for any provider. Each vendor may change prices, tiers, or discounts at any time, and your actual bill will depend on usage, region, and any custom agreements you sign. For TryMellon, the Starter, Growth, Scale, and Enterprise tiers described here are the default SaaS plans; the dashboard and docs always contain the most current details and should be treated as the source of truth.

Starter

POCs and Sandboxes. Real passkeys, no credit card.

$0 forever
  • 1,000 users
  • Passkeys + session validation
  • Community support
Start building

For POCs and Sandboxes.

Most Popular

Growth

B2B ticket: unlimited Webhooks and AI agents.

$79 /mo
  • Up to 10,000 users
  • Unlimited Apps
  • Unlimited Webhooks & AI agent onboarding
  • Entity Enrollment (Keys & Padlock)
  • Audit logs + Email fallback
  • Cross-device QR on up to 5 apps — 10,000 sessions/mo
  • Standard Support

Scale

Usage-based for teams that scale.

$159 /mo
  • Up to 100,000 users (metered beyond)
  • Unlimited Apps
  • Entity Enrollment (Keys & Padlock)
  • Cross-device QR on up to 10 apps — 100,000 sessions/mo
  • Priority support
  • Data export API (GDPR)

Base $159/mo + metered per user above 100k.

Enterprise

Unlimited. Dedicated. Compliant.

Custom
  • Unlimited users & agents
  • Entity Enrollment (Keys & Padlock)
  • SLA + Dedicated Account Manager
  • Custom webhook SLAs
  • Custom legal contracts
Talk to us

Sales inquiries by email only.

Built for Scale, not MAU traps

One auth layer for humans and AI. Zero-PII, cross-device QR, and AI agent onboarding without raw API keys—with pricing that scales with real usage.

FeatureTryMellonClerkAuth0
Cost for 10K users (typical B2B tier)$79/mo$220/mo$735/mo
Predictable B2B pricing (no per-MAU surprise bills)
AI agent onboarding (scoped credentials, no raw API keys)
Zero-PII defaults for B2B
Cross-device QR auth (bridge domain included)
Entity Enrollment (Keys & Padlock)
Passkeys / WebAuthn
B2B multi-tenancy (orgs, apps, allowed origins)
Email fallback & device recovery
Event-driven webhooks & audit logs
User data report & deletion (GDPR)
Cross-device registration QR (add passkey from trusted device)
Zero-dependency SDK (no transitive supply-chain exposure)

Ship passkey auth this sprint.

Install the SDK, register the first passkey, validate the session on your backend — under 30 minutes. Free up to 1,000 users, no credit card.

Free for up to 1,000 total users. No monthly active limits. No credit card required.