Magic vs SuperTokens
Magic
magic.linkSuperTokens
supertokens.comSide by side
| Figure | Magic | SuperTokens |
|---|---|---|
| Price from | $99/mo | $0.01/mo |
| Free plan | — | Yes |
| Free trial | — | — |
| Open source | — | Yes |
| Web | Yes | Yes |
| Linux | — | Yes |
| iOS | Yes | Yes |
| Android | Yes | Yes |
| API | Yes | Yes |
| Self-hosted | — | Yes |
| Plans published | 3 | 6 |
| Spec score · Passwordless Authentication Software | 7.8 (#16) | 8.7 (#6) |
| Compliance | Magic lists SOC 2 Type 2, ISO 27001:2022, CCPA, and GDPR among its security and compliance practices. | The pricing page lists SOC 2 compliance among the core features. |
| Customization | Magic offers white-label APIs and embedded wallet widgets with branding control. | Prebuilt UI components can be customized, and hooks or overrides can add logic before or after authentication APIs. |
| Product | Magic provides embedded wallet infrastructure and server-side wallet management for Web3 applications. | SuperTokens is an open-source authentication provider for adding customizable authentication and session management to applications. |
| Security | Magic says its TKMS uses distributed key shards, Trusted Execution Environments, and AWS KMS, with key recombination inside the TEE. | The product page says SuperTokens is SOC 2 compliant and describes more than 100 controls and tests. |
| Support | The Developer plan includes email and community support, while Startup includes prioritized support. | Professional support can include migration and implementation assistance, several support channels, and guaranteed response times from 2 hours to 2 days. |
Plans
SuperTokens
- Self-hostedFree
- Self-hosted open sourceFree
- Account Linking add-on$0.01 a month
- Multi-factor authentication add-on$0.01 a month
- Cloud$0.02 a month
- Dashboard users$20 a month
In their own words
SuperTokens
SuperTokens is an open-source authentication provider for developers adding sign-in and session management to applications. It supports email and password, passwordless email or SMS codes, magic links, social login, and passkeys. Enterprise options include tenant-specific login methods, separate user pools, and enterprise SSO. Developers can adapt the prebuilt interface and add logic before or after API operations with hooks and overrides. Backend SDKs communicate with SuperTokens Core; frontend SDKs call authentication routes exposed by the application backend. Core can be self-hosted, with open-source features free at any scale and no MAU limit. A managed Cloud plan is also available, free under 5K MAUs and then $0.02 per MAU. Other paid or sales-led features include multi-tenancy, cross-domain unified login, machine-to-machine authentication, availability zones with uptime SLAs, and Attack Protection Suite. That suite can detect risky authentication activity and prompt extra verification or block attempts. Integrations include Next.js, NestJS, GraphQL, Capacitor, AWS Lambda, Vercel, Hasura, and Supabase. SuperTokens says it is SOC 2 compliant and describes more than 100 controls and tests.