WorkOS API pricing
Enterprise-readiness APIs (SSO, SCIM Directory Sync, Audit Logs, AuthKit) with a famously generous free tier and clean per-connection pricing for B2B SaaS.
Free tier or trialBilled per connection / mau-based·Verified Jun 27, 2026
Free tier
Up to 1M MAU on AuthKit; $125/connection for SSO/SCIM
Plans and prices
| Plan | Price | What it covers |
|---|---|---|
| Pay as You Go | Usage-based | Self-serve, automatic volume discounts, quick deployment, dedicated Slack support |
| Annual Credits (Enterprise) | Custom | Pre-pay discounts, contractual 99.99% uptime SLA, guided migration, guaranteed support |
| AuthKit (User Management) | Free up to 1M MAUs, then $2,500/mo per additional 1M MAUs | Email+password, social login, passkeys, MFA, magic auth, enterprise SSO |
| Single Sign-On / Directory Sync | $125 per connection/mo (volume discounts to $50 at 101–200) | Per-connection pricing; 16–30 conns $100 ea, 31–50 $80, 51–100 $65, 201+ custom |
| Audit Logs | $125/mo per SIEM stream + $99/mo per 1M events retained | Log streaming to SIEM plus event retention pricing |
| Radar (Bot & Fraud Protection) / Custom Domain | Radar: free first 1k checks then $100/50k; Custom Domain $99/mo | Fraud/bot checks and CNAME custom domains for AuthKit/Admin Portal/emails |
What to watch for on the bill
- Per-connection SSO/Directory Sync pricing ($125/connection/mo) scales with customer count, not revenue, the most common complaint
- A single SSO customer can cost more than a SaaS vendor's own lowest-tier plan, blocking SSO-on-all-tiers strategies
- Audit log and SIEM streaming add-ons stack additional monthly costs
- Costs can become unpredictable as enterprise connections accumulate
The pricing page, as we saw it
Source: https://workos.com/pricing. Prices change. Confirm on the vendor page before you commit.
Compare WorkOS
Other Authentication & Identity APIs
Auth0 · Firebase Authentication · Clerk · Stytch · Supabase Auth · Okta Customer Identity · Frontegg