rocketkind
Security

Stytch

Stytch is a hosted authentication service: the users of your application, the passwordless sign-in links and one-time passcodes they authenticate with, and the sessions they stay signed in on.

Authentication

  • Project ID and secret

Actions

Generic API request. Call any Stytch Consumer API endpoint on this connection, for the case where no shipped action covers it yet — passwords, OAuth, TOTP, WebAuthn or session authentication, for example. The connection supplies the base URL, the authentication and the egress route, so only the path, query and body are yours to fill.

  • Authenticate magic linkVerify the token from a clicked magic link and learn which user it belongs to.
  • Authenticate OTPDestructiveCheck a one-time passcode the user typed against the email it was sent to, and learn which user it belongs to.
  • Create userCreate a Stytch user from an email address and/or phone number, with optional name, roles, metadata and your own externalid, without sending them anything.
  • Delete userDestructivePermanently delete a Stytch user together with every email, phone number, session and registered factor they hold.
  • Get userRead one Stytch user by userid (or externalid): their emails and phone numbers with verification state, name, status, roles, metadata and every registered authentication factor.
  • List user sessionsList a user's active Stytch sessions — where and when each started, when it expires and which factors authenticated it.
  • Revoke sessionDestructiveEnd one Stytch session immediately, signing that device out; its session token and JWT stop authenticating at once.
  • Search usersSearch the Stytch project's users, optionally filtered by email, phone, status, verification state, sign-up date and more, one page at a time.
  • Send email OTPEmail a one-time passcode to an address, creating the Stytch user first if the address is new (login or create).
  • Send magic linkEmail a sign-in link to an address, creating the Stytch user first if the address is new (login or create).
  • Update userDestructiveUpdate a Stytch user's name, roles, externalid or trusted/untrusted metadata.

Product names, logos and brands are the property of their respective owners and are used here for identification only. Their use does not imply endorsement by, or affiliation with, those owners.