Skip to Content
Faable AuthPricing

Auth pricing

Faable Auth is part of the unified Faable subscription — and it is included in every plan, starting on Free. The platform fee and billing model are documented on the Pricing page; this page focuses on what each tier includes for Auth specifically.

Start building for free

What each plan includes for Auth

PlanAuth entitlements
FreeHosted login, users and sessions · database and social connections · RBAC and teams · custom login flows · up to 15,000 MAU, no credit card · 100 M2M tokens a month
HobbyEverything in Free · unlimited MAU · two-step verification (MFA) · passwordless magic link and code login · Actions · webhooks · recovery by SMS
ProEverything in Hobby · unlimited MAU · custom domain for your login · biometric passkey login (Touch ID, Face ID) · audit logs · multiple auth accounts · enterprise SSO

Monthly Active Users (MAU)

A Monthly Active User is any unique user who completes at least one successful login during a calendar month. The same user logging in from multiple devices in the same month counts once.

  • Free includes up to 15,000 MAU, forever, with no credit card — enough to launch, not just to test.
  • Hobby has no MAU limit.
  • Pro has no MAU limit, across every auth account on the subscription.

There is no per-user line on any invoice, with one exception on Pro: users who sign in through enterprise SSO beyond the 50 included. If a Free project grows past 15,000, we’ll get in touch before anything changes.

Feature gating

FeatureFreeHobbyPro
Hosted login pages✅✅✅
Database (username/password) connection✅✅✅
Social login✅✅✅
RBAC, Teams✅✅✅
Password hash import & export✅✅✅
Two-step verification (MFA)—✅✅
Passwordless (OTP / Magic Link)—✅✅
Custom login flows✅✅✅
Actions—✅✅
Webhooks—✅✅
Password recovery by SMS—€0.20/SMS€0.18/SMS
Machine-to-machine tokens100/mo100/mo incl. · €2.25 per 1,000 after100/mo incl. · €2.25 per 1,000 after
Custom Domain——✅
Passkeys as the sign-in method——✅
Audit logs——✅
Multiple auth accounts——✅
Enterprise SSO (OIDC)——50 federated MAU/mo incl. · €0.0010 after

A passkey used as a second factor is part of two-step verification, so it is on Hobby. Passkeys as the sign-in method — Touch ID or Face ID instead of a password, see Login Experience — is Pro.

What happens on a downgrade

Plan limits apply when you turn a feature on, never to what is already running. An Action created on Hobby keeps running, a custom domain that is already active keeps serving your login, and an MFA policy that is already on stays on. Your users are never locked out because a plan changed; you just cannot create new ones until you move back up.

SMS

Password recovery and phone verification can go out as a 6-digit code by SMS to a user’s verified mobile — for the university, hospital and corporate mailboxes that quarantine automated mail. On Hobby and Pro they are pay per use: every SMS sent is invoiced at the tier’s per-message price (€0.20 on Hobby, €0.18 on Pro), with no monthly allowance to track. Free is email only. When a plan cannot send — on Free, or with billing unreachable — recovery falls back to email; nobody is left without a way in. See Phone verification.

Machine-to-machine tokens

Every plan includes 100 machine-to-machine tokens a month per project: successful responses to the Client Credentials grant, including a token served again from the cache.

  • Hobby and Pro: above 100, tokens are billed at €0.00225 each, in blocks of 1,000 (€2.25 per block started), per billing period. Nothing is cut off.
  • Free: the 100 are a cap. The 101st request of the month is refused with 402 and error_code: m2m_quota_exceeded until the next month, or until you upgrade. Free never needs a credit card.

Tokens issued between Faable’s own services are not counted. Plans purchased before 24 September 2026 keep machine-to-machine tokens unmetered.

Keep the count low: a token is valid for its expires_in. Cache it in your service and request a new one only when it is about to expire, instead of one per call.

Enterprise SSO

On Pro, each of your B2B customers can sign in with its own identity provider — Okta, Entra ID, Google Workspace or any OpenID Connect provider — through an organization with verified email domains.

  • A federated MAU is a user who signs in at least once in a calendar month through an organization’s identity provider. Social logins (Google, GitHub…) are not federated MAU.
  • Every Pro project includes 50 federated MAU a month. Above that, each one costs €0.0010, per billing period. Nothing is cut off.
  • Your tenant can also be the SAML identity provider of your own applications (Slack, Notion, any SAML 2.0 app), included on Pro — see SAML for your apps. A company’s identity provider connects over OpenID Connect; inbound SAML connections are not available yet.

Last updated on

FeaturesOverview