elvix
Every product rebuilds sign-in from scratch, badly, twice. And the mainstream identity providers ship EU user data to US servers, which is exactly the conversation European customers don't want to have.
170
Endpoints
45
Test files, real Postgres
5
Sign-in methods
3
Products running on it
Auth is the feature every team builds twice and trusts least. Password resets, OAuth edge cases, session security, GDPR exports. It's undifferentiated heavy lifting, and getting it wrong is existential.
One branded sign-in door, dropped into every app. A full identity platform, EU-hosted on my own Kubernetes, consumed through one React component and one server-side verify call.
Next.js · TypeScript · Bun · Prisma · PostgreSQL · Kubernetes · Cloudflare R2 · MCP
One component, sign-in = sign-up
- ·Apps mount a single branded <ElvixSignInForm> component: logo, brand color, every enabled method, legal links, one door for new and returning users
- ·Sessions verified server-side with one helper call, no auth code in the consuming app
- ·Access model kept deliberately flat: roles, scopes, and memberships as three plain tag sets, no policy-engine labyrinth
Five sign-in methods, one backend
- ·Email OTP, Google OAuth, GitHub OAuth, passkeys (WebAuthn), all first-class
- ·OAuth device flow (RFC 8628) so CLI tools sign in like GitHub's gh does
- ·Session management with per-app scoping, revocation, and activity trails
A published SDK, consumed first-party
- ·@elvix.is/sdk on npm: sign-in form, identity, sessions, presence, and avatar components
- ·elvix.is itself runs on the public SDK, the docs can't drift from reality because the product would break first
- ·Centralized user media: avatars and banners uploaded once, served to every consuming app
Agent-native from day one
- ·A hosted MCP server lets AI agents manage apps, users, roles, and webhooks over the wire
- ·Server-to-server API keys with rotation and grace periods for zero-downtime credential swaps
- ·GDPR Article 15 data export, OTP-gated, generated as a 24-hour download link
Run like a product, not a side project
- ·Integration tests run against a real PostgreSQL via Testcontainers and gate every deploy, no mocked databases
- ·Self-hosted on Kubernetes in the EU, no third-party identity processor in the chain
- ·Already the front door for PLMHub, Zeropost, and the elvix console itself
Live at elvix.is · 170 endpoints · Real-database tests gate every deploy · The shared front door for a product family
Want this discipline on your team?
Everything on this page is inspectable and live. A 30-minute call is the fastest way to find out if it fits your problem.