Stytch
Stytch is a developer auth platform whose Connected Apps add OAuth-based, scoped, revocable authorization for AI agents and MCP servers.
Acquired Stytch
Acquired · October 2025
Still operating. Stytch, the developer platform for authentication and identity, agreed on October 30, 2025 to be acquired by Twilio, and the deal closed in mid-November 2025. Stytch still runs under its own name, now pitched as the identity layer for humans and AI agents inside Twilio.
Acquired by Twilio.
Is Stytch shut down?
No — Stytch is still operating. Its acquisition by Twilio was announced on October 30, 2025, and the product continues to ship. We list it in the ToolDirectory.AI graveyard's acquired-but-operating section and watch for post-acquisition changes.
What to use instead
Amazon Q Developer
Amazon Q Developer is AWS's coding assistant, spanning IDE suggestions, agentic coding, code transformation and AWS operations help.
Freemium
4.84
270
Infisical
Infisical is open-source security infrastructure for secrets, certificates and privileged access, with an Agent Vault for AI agent credentials.
Freemium
4.85
288
doubleAI
doubleAI builds Maxwell, a code execution model that watches running software, finds bottlenecks and rewrites the compiled binary at runtime.
Paid - Inquire
4.85
276
Overview
Stytch
Stytch is a developer authentication platform that supplies the authorization layer for MCP servers and AI agents. Stytch's Connected Apps product turns an application into an OAuth 2.0 and OIDC identity provider, so it can grant agents scoped, auditable, revocable access to user data instead of sharing raw credentials. For teams building Model Context Protocol servers, Stytch handles the consent screens, token lifecycle, and human-in-the-loop approval that secure agent access requires, on top of its core passwordless, SSO, MFA, and RBAC auth.
Production credibility: Founded in 2020 by Reed McGinley-Stempel and Julianna Lamb, who met building authentication at Plaid. Stytch raised a $90M Series B led by Coatue in November 2021 at a reported valuation near $1B, with roughly $146M in total funding from backers including Coatue, Benchmark, Thrive Capital, and Index Ventures. It is an established, well-funded identity company with native MCP support in its Connected Apps product.
Acquisition note (October 2025): Twilio agreed to acquire Stytch on October 30, 2025, and the deal closed in November 2025. Stytch continues to operate under its own brand as Twilio's identity platform for people and AI agents.
Key Features
- Connected Apps turns your app into an OAuth 2.0 / OIDC identity provider
- Native MCP support for scoped, revocable agent access to user data
- Agent-to-agent OAuth flows
- Granular consent management with human-in-the-loop approval
- Full token lifecycle — issue, validate, refresh, and revoke
- Trusted Auth Tokens to layer onto an existing auth provider
- Core auth: passwordless, SSO, MFA, RBAC, and device fingerprinting
Ideal Use Case
Engineering teams standing up an MCP server who need agents to access user data safely — issuing scoped tokens, capturing consent, and revoking access on demand — without re-architecting their existing identity stack to do it.
How Stytch differentiates
Most MCP listings are servers or registries; Stytch is the auth layer underneath them. Where a registry helps you find tools, Stytch governs what an agent is allowed to do once connected — scoped OAuth, consent, and revocation built for agent and MCP flows, from an established identity company rather than a new entrant. For teams whose blocker is secure, auditable agent access to user data, that is the reason it belongs in the MCP stack.
FAQ
Who owns Stytch? Twilio acquired Stytch in a deal announced on October 30, 2025 and closed in November 2025. Stytch still operates under its own name.
Q: What is Stytch? A: Stytch is a developer authentication platform. Its Connected Apps product turns your app into an OAuth 2.0 / OIDC provider, giving AI agents and MCP servers scoped, auditable, revocable access to user data.
Q: How does Stytch relate to MCP? A: Stytch provides the authorization layer for MCP servers — scoped OAuth access for agents, consent management, human-in-the-loop approval, and token issue/refresh/revoke, including agent-to-agent OAuth.
Q: Is Stytch only for MCP? A: No. Stytch is a full auth platform with passwordless login, SSO, MFA, RBAC, and device fingerprinting; the Connected Apps and MCP support sit on top of that core.
Q: Stytch vs Auth0 or WorkOS? A: All are auth platforms. Stytch is differentiated for agent and MCP use by Connected Apps — turning your app into an OAuth provider with scoped, revocable agent access and agent-to-agent flows.
Q: Is Stytch free? A: Stytch offers a free tier with usage-based and enterprise pricing above it. Check the pricing page for current limits.
tl;dr
Stytch is the auth layer for MCP and AI agents — its Connected Apps product turns your app into an OAuth 2.0 / OIDC provider, giving agents scoped, revocable, auditable access to user data with consent and full token lifecycle. Founded 2020, ~$146M raised (Coatue, Benchmark, Thrive). The authorization pick for the MCP stack, alongside core passwordless, SSO, and MFA.
Why Use Stytch
FAQ
