Terms
The rules for using the hosted AuthFlow service. Last updated 17 September 2026.
What AuthFlow is
AuthFlow is authentication for Next.js and other web apps: a hosted API, a dashboard for creating apps and keys, and two packages you install. It is free, and it is a personal project. There is no promise about uptime. The hosting goes to sleep when nothing is using it, so the first request after a quiet spell can be slow.
Your account and your key
Use a real email address you control. You are responsible for what happens under your account.
Your app’s secret key authenticates your app to AuthFlow. Keep it on your server. Anyone holding it can act as your app. It is shown once and cannot be recovered — if it leaks, create a new app and stop using the old key.
The demo
The demo is a sandbox. Accounts created in it are real accounts, but they are throwaway: they may be deleted at any time without notice. Do not put anything in it you would mind losing, and do not reuse a password you use elsewhere.
Fair use
Please do not:
- use AuthFlow to break the law, or to sign people up to something they did not agree to
- try to get at other people’s accounts or data, or work around the rate limits
- load the API heavily enough to degrade it for others — it is one small instance
- resell the hosted service as your own
Security research is welcome. If you find a flaw, report it to contact@wewiselabs.com before telling anyone else.
The packages are separate
@authflowkit/sdk and @authflowkit/ui are published under the MIT licence, and that licence is what covers your use of the code. These terms cover the hosted service only — the API, the dashboard and this site. If you run your own copy of the API, you can keep using the packages even if these terms end.
No warranty
The service comes as it is, with no guarantees. It may go down, it may lose data, and it may change or stop altogether. Do not build something on it where a failure would really hurt you, unless you have your own way to recover.
Limits of responsibility
If something goes wrong, AuthFlow and its author are not responsible for money you lose, data you lose, or costs that follow on from either. Some responsibilities cannot be signed away, and nothing here tries to.
Ending it
You can stop using AuthFlow and delete your account at any time. Your access can be paused or removed if you break these terms, or if the service shuts down. Where it is possible to warn you first, you will be warned.
Changes
These terms may change. The date at the top changes with them. If you keep using the service after a change, the new version is the one that applies to you.
Law and contact
These terms are governed by the law of Pakistan. Questions go to contact@wewiselabs.com.