Backend API

Manage application users from trusted server code.

Use the environment-scoped AUTHIE_SECRET_KEY to manage users, invitations, sessions, roles, and private metadata for one application environment.

Server only. Never expose AUTHIE_SECRET_KEY to a browser, native bundle, log, or chat. Browser authentication uses the publishable key and Frontend API.

Use the backend SDK

import { createAuthieClient } from "@authie/backend";

const authie = createAuthieClient();

const users = await authie.users.list({ limit: 20 });
await authie.invitations.create({
  email: "new@example.com",
  roleKey: "member",
});

The SDK reads AUTHIE_SECRET_KEY and restricts every operation to that credential's workspace, application, and environment.

Available resources

List, retrieve, update, and remove application users
Manage application roles and public/private metadata
Create, list, and revoke invitations
List and revoke application sessions
Verify signed lifecycle webhooks

Provisioning applications

Application and environment provisioning is not part of the runtime Backend API. Run npx @authie/cli init from the application root; it opens browser approval, reconciles the application, and writes the correct environment values.

Continue with the Next.js quickstart or React SDK guide.