Drop-in client
A small hosted JavaScript client handles tokens, sessions, and auth state.
Back to overview
app sign-in
Add sign-in without running an auth service.
Register a browser, mobile, or server app, and app.nz handles accounts, consent, sessions, and profiles.
import { createAuthClient } from 'https://app.nz/appnz-auth.js'What you get
Everything you need
Everyday use
One API
CLI access
Always tested
Safe public clients
Public apps use Authorization Code + PKCE. No secrets in browsers.
Scoped by consent
Each app gets only the profile, credit, or key scopes the user approved. Redirect URIs must match exactly.