Skip to content
Agents tracked: 444 Releases (7d): 644 Agent status: 3 with issuesSince last limit reset: Claude 31d · Codex 3d Updated Oct 23, 2026
AgentGid
✦ Ask

App and agent security · by MonoCloud (India) LLP

MonoCloud

A hosted sign-in and user-management service with branded login pages, social login, passkeys, magic links, groups and machine-to-machine tokens, plus SDKs for Next.js, React, plain JS, Node (Express/Fastify) and ASP.NET Core and a management API.

You add login, sessions and API token checks to an app with an SDK instead of building password storage, social providers and passkeys yourself, and the free plan covers up to 50,000 monthly active users.

APIFree tierCommercial OK

Open monocloud.com ↗ agent.md

For your project

Official API
Official API · Free tier Free: up to 50,000 MAUs and 5,000 M2M tokens a month; 1 tenant API key on Free, up to 3 on Pro
“Tenant API Keys Access and manage your tenant programmatically via API keys.” monocloud.com/pricing
Key
Needed
“Tenant API Keys Access and manage your tenant programmatically via API keys.” monocloud.com/pricing
Formats
JSON
Data download
Not stated
Price
Free tier · from $24.99/mo $0/month: up to 50,000 MAUs, 5,000 M2M tokens a month, 2 groups, unlimited social providers, passkeys and magic links, 3-day audit logs, MonoCloud watermark on login pages
“Pro Plan Popular Built for teams moving from prototype to production $24.99 per month 50,000 MAUs Scalable” monocloud.com/pricing
License
MonoCloud Terms and Conditions Hosted auth service for your apps; free-plan login pages carry a MonoCloud watermark (removed on Pro); SDKs are MIT on GitHub
Commercial use
Commercial use OK
“Built for teams moving from prototype to production $24.99 per month” monocloud.com/pricing
Credit
Not stated
Embedding
Embedding with conditions
“Allowlist & Blocklist controls No MonoCloud watermark Passkeys, Magic Links & Phone Code” monocloud.com/pricing
Using the website
Free tier

Read on MonoCloud's own pages on Oct 24, 2026 · license or terms · API docs · pricing. Check the license page before you ship.

For your agent

  • Install the framework SDK (@monocloud/auth-nextjs, @monocloud/auth-react, @monocloud/auth-web-js, @monocloud/backend-node/express or /fastify, NuGet MonoCloud.Authentication.Api); use @monocloud/management or MonoCloud.Management with a tenant API key for user admin; coding agents can load the official skills with `npx skills add monocloud/agent-skills` (MIT).
  • Keep tenant API keys and client secrets server-side in environment variables
  • Free plan shows a MonoCloud watermark on login pages; removing it needs Pro
  • Past 50,000 MAUs on Pro, each extra MAU is billed ($0.015)

Paste into your agent: Read https://agentgid.com/resources/monocloud/agent.md before using MonoCloud.

Quick answers

Does MonoCloud have an API?

Yes. MonoCloud has an official API documented at https://www.monocloud.com/docs/apis/management.

Does the MonoCloud API need a key?

Yes, you need an API key. Limits: Free: up to 50,000 MAUs and 5,000 M2M tokens a month; 1 tenant API key on Free, up to 3 on Pro

Is MonoCloud free?

Yes, there is a free tier: $0/month: up to 50,000 MAUs, 5,000 M2M tokens a month, 2 groups, unlimited social providers, passkeys and magic links, 3-day audit logs, MonoCloud watermark on login pages Paid plans start at $24.99 a month.

Can I use MonoCloud in a commercial project?

Yes. Its terms say: "Built for teams moving from prototype to production $24.99 per month"

Can I embed MonoCloud in my site?

Yes, with conditions; see the quote on this page.

What you can build

  • A Next.js SaaS starter with passkey and social sign-in plus group-based route protection
  • An Express or Fastify API that validates MonoCloud access tokens and enforces scopes
  • An admin script that lists and manages tenant users through the Management SDK

Alternatives in App and agent security

All 5 →

ClawSecure Before you let a third-party skill or MCP server touch your files and keys, you can look up or run an audit and have your agent check a clearance verdict and content hash in one API call. API, no keyFree tierLicense unclear AEVS (Agent Execution Verification System) A model saying it refunded a customer is not proof; AEVS gives you a checkable record of which tool ran, with what inputs and output, without changing your tools. APIOpen sourceLicense unclear Arcjet You add bot blocking, rate limits and prompt-injection checks as a few lines inside a route handler or agent tool call instead of putting a proxy or WAF in front of the app. APIFree tierCommercial: conditions DCP (Delegated Custody Protocol) Agents can sign, pay or call an API without ever reading the raw key from a .env file, and anything over a limit waits for your approval on desktop, Telegram or phone. Open sourceFree tierCommercial OK

Something wrong or out of date? Tell us.