
authentik
The Okta and Auth0 alternative
From $20 / month · billed monthly · cancel anytime
Give your team one sign-in for every app. Manage SSO, MFA, and access policies across SAML, OAuth2/OIDC, and LDAP from one console.
- sso
- identity
- auth
- oauth
- oidc
- saml
- ldap
- mfa
- okta
- auth0
Screenshots
Frequently asked
- How much does it cost to host authentik?
- Hosting authentik on Zenith is $20 / month, billed monthly until you cancel.
- How long does authentik take to deploy?
- Most apps are live on your own subdomain in about two minutes after you deploy.
- Do I need to manage a server to run authentik?
- No. Zenith runs authentik for you, with no servers to provision or maintain.
- Can I use my own domain with authentik?
- Yes. Each deployment gets a Zenith subdomain, and you can map your own custom domain to it afterwards.
- Can I manage authentik with Claude or another AI agent?
- Yes. Zenith has a Model Context Protocol (MCP) server at https://zenith.hosting/mcp. Add the endpoint from Claude, Cursor or another MCP client, connect your account, and ask the agent to deploy, configure, inspect or delete your authentik deployment. The agent can read and set environment variables. Write-only secrets stay hidden; generated credentials may be returned. Deployment inspection reports live status, HTTPS reachability and summarized resource usage without exposing credentials. A paid deployment requires price approval. Deletion permanently removes the deployment and its data after separate confirmation. Setup is at https://zenith.hosting/connect.
Related apps
Pocket ID
Let people sign in with passkeys through a lightweight OIDC identity provider. Manage users and give every connected app one consistent login.
- sso
- oidc
- identity
- +3
PocketBase
Put a database, authentication, file storage, realtime subscriptions, and an admin panel in one small backend, instead of assembling separate services.
- backend
- baas
- database
- +4

