PropelAuth

PropelAuth provides end-to-end managed authentication and authorization aimed specifically at B2B, multi-tenant software products. Organizations are treated as a first-class concept: end users can create organizations, invite coworkers, auto-join via work email domains, and manage membership settings through PropelAuth's hosted UIs. On top of this, the platform supplies role-based access control with default or custom roles defined globally or per organization, internal roles for a customer's support team, user impersonation with audit trails and alerting, user management and metrics dashboards, and detailed audit logs [0][1][2][4].

The enterprise feature set includes SAML and OIDC-based enterprise SSO with self-service configuration by the customer's own customers, SCIM provisioning, enforced MFA/2FA, password policies, per-organization session controls, restricted login methods, and API key authentication with rate limiting for both individual users and organizations [0][1][2]. More recently the company has positioned itself toward "AI-native" companies, marketing first-class MCP (Model Context Protocol) server authentication with OAuth 2.1 flows, dynamic client registration, custom scopes and token revocation, plus an integration MCP server that lets AI coding tools wire PropelAuth into an application [0][1][2][4].

PropelAuth is delivered in two forms: a fully managed cloud service and a self-hosted "Bring-Your-Own Auth" option that layers advanced auth features onto an existing provider without migration. Developers integrate via hosted pages and idiomatic client libraries across React, Next.js (App and Pages routers), JavaScript, FastAPI, Flask, Django REST Framework, Express, Node.js, Python, Go, Rust (Actix, Axum), .NET, Spring Boot, Remix and Laravel, with OAuth2/OpenID Connect available for other stacks. A separate PropelAuth Components library exposes frontend APIs and copyable components for teams that want to build fully custom login, account, organization-management and API-key UIs [0][1][2][4][5].

Founding story

Andrew Israel founded PropelAuth in 2021 after previously leading developer teams at Palantir, SafeGraph, Clockwise and other early-stage startups. He has said that conversations with B2B founders revealed startups were spending excessive time building auth from scratch or on top of services not designed for B2B requirements, which motivated building self-service UIs with organizations as a core concept, user administration tooling and framework libraries [6]. The company describes its founding premise as the idea that a great auth product gets out of the way, and that auth is about managing the relationship with a user rather than just logging them in [3][7].

Business model

Software-as-a-service sold to software companies: PropelAuth hosts and manages authentication infrastructure consumed through client libraries and hosted UIs, with a self-hosted "Bring-Your-Own Auth" variant for teams that already have an auth provider [0][1]. The company states it deliberately serves only B2B companies in order to avoid unnecessary features and complicated pricing structures [0][1].

Paid subscription plans for its cloud auth service. At seed stage the company ran a "Free till Funded" program giving its growth plan away at no cost to early-stage startups until they raised $1M, with no fixed duration and no restricted features [6]. A third-party data provider estimates annual revenue of about $1M [7].

Traction

Company materials claim thousands of B2B business customers [0][1]. A customer testimonial from Runbear states it launched an MVP within a week and scaled to 1,500 organizations in four months on PropelAuth [0][1]. At the time of the 2022 seed announcement the team was three people and hiring a Founding Backend Engineer and Head of Developer Relations [6]; a third-party profile currently lists 1-10 employees (5 identified across engineering, HR and operations) and an estimated $1M annual revenue [7].

Latest developments

Current marketing emphasizes authentication for AI-native companies and AI agents, including a newly launched first-class MCP server auth capability with OAuth 2.1, dynamic client registration, custom scopes and token revocation, and an Integration MCP Server that allows AI tools to add PropelAuth to an application [0][1][2][4]. Other recent product work highlighted on the blog covers secure user impersonation with access controls and audit logs, impersonation blocklists and direct links, and Member Audit Logs [6]. The company also offers a self-hosted "Bring-Your-Own Auth" product and a customizable components library for teams needing full UI control [0][1][5].