Auth

Identity and credentials — Better Auth users, sessions, API keys, and organization membership. Module roles and approval policy tables live in the access domain.
NameDescription
Sign-in accountsA sign-in identity linked to a user and a provider, such as email and password or OAuth.
API keysA secret credential that authenticates a user over RPC, MCP, and CLI with that user's permissions.
SessionsA period of authenticated access, with expiration and client details used for revocation and audit.
UsersAn identity that signs in or authenticates with a token, with a name, a language, and an appearance.