Sign-in your users actually finish.
One API for Telegram codes, passkeys, passwords with 2FA and every method that comes next. Integrate once, switch on new methods without touching your code.
- Runs on Cloudflare’s edge
- Phone numbers hashed
- TOTP 2FA with backup codes
- Live
- 4
- In development
- 6
- 2FA
- TOTP
Four live today. Six on the way.
Ship what’s live today. When a new method leaves development it lights up behind the same endpoints — no migration.
- Live
Telegram OTP
One-time codes delivered straight to Telegram. Fast, free, already in your users’ pocket.
- Live
Passkeys
Face ID, Touch ID or a security key. Phishing-resistant WebAuthn, zero passwords.
- Live
Email & password
Classic sign-in: PBKDF2 hashing, lockout after 5 failed attempts, reset by email.
- Live
2FA (TOTP)
Codes from any authenticator app, plus one-time backup codes.
Two endpoints. That’s the integration.
Plain REST on the edge. Send a code, verify it, get a session. No SDK lock-in, no servers to run.
- 01
Get an API key
Create a project, get test and production keys.
- 02
Call /auth/login
We deliver a one-time code over the channel you choose.
- 03
Call /auth/verify
Exchange the code for a scoped, short-lived session.
# 1. Send a one-time codecurl -X POST https://api.alrevion.com/auth/login \ -H "Authorization: Bearer $ALREVION_KEY" \ -d '{"provider":"telegram","phone":"+1..."}' # 2. Exchange the code for a sessioncurl -X POST https://api.alrevion.com/auth/verify \ -d '{"phone":"+1...","code":"842105"}'import { Alrevion } from "@alrevion/sdk" const auth = new Alrevion({ key: process.env.ALREVION_KEY }) // send a Telegram OTPawait auth.login({ provider: "telegram", phone }) // verify → returns a scoped sessionconst session = await auth.verify({ phone, code })Boring where it matters.
Edge-native
Runs on Cloudflare Workers worldwide, close to wherever your users are.
Secure by default
Passkeys, Telegram codes, PBKDF2-hashed passwords with lockout and TOTP 2FA.
One API, every method
New methods appear behind the same endpoints. No rewrites when they ship.
Private by default
Phone numbers are hashed, sessions are scoped, every endpoint is rate-limited.
Start free. Pay when it works.
Pricing is being finalised — these are the plans we’re aiming for.
Hobby
Side projects and prototypes
- Up to 1,000 monthly active users
- Telegram OTP, passkeys, password + 2FA
- Community support
Start
Small businesses
- Up to 10,000 monthly active users
- Every sign-in method
- Webhooks
- Email support
Pro
Most popularGrowing products
- Up to 50,000 monthly active users
- Every sign-in method
- Webhooks & analytics
- Priority support
- Then $0.50 per 1,000 extra active users
Enterprise
Scale and compliance
- Unlimited active users
- SLA, SSO & audit logs
- Dedicated support
- On-prem options
Telegram codes are free on every plan. They’re delivered by our own Telegram bot, not Telegram Gateway — so there’s no per-code charge (Gateway charges $0.01 per code). Your user shares their phone number with the bot once.
Questions, answered.
Which methods work today?
Telegram OTP, passkeys (WebAuthn) and email or username + password are live — with password reset by email and TOTP 2FA with backup codes. Google, GitHub and Apple sign-in are being connected; SMS, WhatsApp and email magic links are in development.
Do I need to run servers?
No. Alrevion Auth runs on Cloudflare’s edge. You call a REST API; we handle delivery, verification, sessions and rate limiting.
How is user data stored?
Phone numbers are hashed, sessions are scoped and short-lived, and every endpoint is rate-limited by default.
Can I add methods later?
Yes. New methods light up behind the same endpoints. No migration and no rewrites when they ship.
Do Telegram codes cost extra?
No. Codes are sent by our own Telegram bot, so there’s no per-code fee like Telegram Gateway’s $0.01. The first time, the user shares their phone number with the bot; after that codes arrive right away. SMS, once it launches, will be billed separately at operator rates.
Is there a free tier?
Yes. The Hobby plan is free for up to 1,000 monthly active users. No credit card required.
Who counts as an active user?
Anyone who signs in at least once in a calendar month. However many times they sign in, they count once.
Ready when your users are.
Accounts open soon. Leave your email and we’ll reach out with access.