Tokens your backend can trust and rotate.

Issue per-tenant ES256 JWTs, publish a JWKS endpoint, and connect Convex without a second identity bridge.

Start free Read the docs

JWKS /.well-known/jwks.json

ES256per-tenant signing keys

1 / 1Free / Starter templates

Unlimited / UnlimitedPro / Scale templates

Built all the way through

More than a sign-in method.

Keys

Each tenant signs independently

Per-tenant ES256 keys keep issuer boundaries clear.

Verification

JWKS supports safe rotation

Verifiers discover the right public key through the standard JWKS endpoint.

Convex

One provider bridges auth

ConvexProviderWithAuthOwl connects your existing AuthOwl session to Convex.

Developer experience

Wire AuthOwl into the Convex provider tree.

components/providers.tsx

import { AuthOwlProvider } from '@authowl/react'
import { ConvexProviderWithAuthOwl } from '@authowl/convex'

<AuthOwlProvider publishableKey={key} apiUrl={apiUrl}>
  <ConvexProviderWithAuthOwl client={convex}>
    {children}
  </ConvexProviderWithAuthOwl>
</AuthOwlProvider>

What you get

Tokens use per-tenant ES256 signing keys.

The JWKS endpoint lives at /.well-known/jwks.json.

Template limits are 1 on Free, 1 on Starter, and Unlimited on Pro and Scale.

Plan availability

Included on every plan - Free through Scale.

FreeStarterProScale

See pricing

Give every service a verifiable identity.

Issue rotation-safe tokens and connect Convex from the same auth project.

Create your project Read the docs

Tokens your backend can trust and rotate.

More than a sign-in method.

Each tenant signs independently

JWKS supports safe rotation

One provider bridges auth

Wire AuthOwl into the Convex provider tree.

Build the complete sign-in journey.

Organizations & RBAC

Attack protection

Audit logs & consent

Give every service a verifiable identity.