What you can do with Stytch
Every task in plain language. Pick one, and we can help you get access.
22 things you can do
Stytch
Stytch is an authentication and identity infrastructure provider. Its Consumer and B2B APIs cover passwordless authentication (Magic Links, OTP, OAuth, WebAuthn / Passkeys, TOTP), enterprise SSO (SAML / OIDC) and SCIM, sessions, M2M client-credentials tokens, and Device Fingerprinting / fraud defense. Connected Apps lets a Stytch-secured product act as an OAuth 2.0 / OIDC Authorization Server for
22 multi-step recipesRecipes: multi-step jobs
B2B Create Organization and Invite MemberCreate an organization, then email a magic link invite to a member.B2B Create Organization and Member
Create an organization, add a member, and fetch the member by id.B2B Discovery Intermediate Session Exchange
Authenticate discovery link, then exchange the intermediate session into an organization.B2B Email Magic Link Discovery and Organization Create
Discovery magic link send, authenticate, then create an organization.B2B Email OTP Discovery and Exchange
Send a discovery email OTP, authenticate the code, then exchange into an org.B2B Email OTP Login
Send an organization email OTP and authenticate the code.B2B Organization Magic Link Login
Email an org-scoped magic link, authenticate the token, and validate the session.B2B Password Authenticate and Session
Authenticate an organization-scoped password and validate the session.B2B Recovery Codes Get and Rotate
Fetch a member's recovery codes, then rotate to a new set.B2B SMS OTP Multi-Factor Authentication
Send an SMS OTP to a member and authenticate the code to finish MFA.B2B TOTP Authenticator Enrollment
Create a member TOTP registration and authenticate the first code.Create User and Send Email Magic Link
Create a user, email a magic link, and authenticate the clicked token.Crypto Wallet Authentication
Issue a wallet challenge and authenticate the signed response.Magic Link Login or Create
Email a login-or-create magic link, authenticate the token, and verify the session.OAuth Authenticate and Session
Authenticate an OAuth token and verify the resulting session.Password Reset by Email
Email a reset link, set the new password with the token, and verify the session.Password Signup to Session
Register an email/password user, authenticate, and read the session.Revoke a User's Connected App
List a user's connected apps and revoke the first one when present.SMS One-Time Passcode Login
Send an SMS OTP and authenticate the code to obtain a session.Session Authenticate and Revoke
Authenticate a session token, list active sessions, then revoke it.User Create, Search, and Delete
Provision a user, locate them by email search, and delete the match.WhatsApp One-Time Passcode Login
Send a WhatsApp OTP and authenticate the code to obtain a session.