Private beta · launching soon

The trust layer for modern software

Identity, access control, feature flags, metering, and billing, five composable, multi-tenant building blocks behind one API. We're putting the finishing touches on the platform; join the early-access list to be among the first to build on it.

Request early access See the product

Multi-tenant & secure by design
Free tier at launch
No credit card to join

keystone · control plane

5 services

Composable building blocks

Unified API

Uptime SLA target

<0ms

Target p50 decision latency

Five building blocks, one platform

IdentityAccess ControlFeature FlagsMeteringBilling

The platform

Everything you need to run a serious SaaS

Adopt one block or all five. Each is independently deployable, metered, and gated, and they compose into a single control plane.

Identity

Auth, organizations, members, MFA, and API keys with multi-tenant isolation built in.

Email + password, passwordless codes, and TOTP MFA out of the box
Organizations, roles, members, and invitations
Rotating refresh tokens with reuse detection

Access Control

RBAC, ReBAC, and ABAC over a managed OpenFGA core with a fail-closed decision API.

Model resource types, roles, and relationships
Fail-closed decisions: check, batch-check, expand, list-objects
Relationship-based inheritance and resource hierarchy

Feature Flags

Multivariate flags with per-environment targeting, plus entitlements and plans.

Boolean, string, number, and JSON flags
Per-environment values with targeting + percentage rollout
Entitlement plans and per-subject overrides

Metering

Idempotent usage ingestion, windowed counters, limits, and soft/hard quota enforcement.

Idempotent event ingestion (dedup by id)
Day / month / lifetime windowed counters
Limits, per-subject overrides, and time-bounded top-ups

Billing

A rating engine for flat, seat, tiered, usage, and hybrid pricing behind a merchant of record.

Flat, seat, tiered, volume, usage, and hybrid pricing
Versioned, time-bounded plans (never mutated)
Proration, coupons, trials, and top-ups

Composable by design

Versioned contracts. Zero breaking changes.

Explore the product

Use cases

One API, composed into real products

See how the building blocks click together, walked step by step with the exact calls you'd make.

Multi-tenant SaaS

Launch a B2B SaaS in a weekend

You want to ship a multi-tenant product without spending a quarter building sign-up, organizations, roles, and paid subscriptions from scratch.

IdentityAccess ControlBilling

Usage-based pricing

Ship a usage-based AI API

You sell an API by consumption. You need scoped keys, accurate metering that survives retries, hard quotas, and invoices that tie back to real usage.

IdentityMeteringBilling

Progressive delivery

Roll out a feature, then package it

You want to ship a risky feature to a slice of traffic, kill it instantly if it breaks, and later sell it as part of a plan.

Feature Flags

Fine-grained access

Secure an internal tool with zero trust

Your internal app shares documents across teams. You need relationship-based permissions and a fast way to ask "what can this user see?"

IdentityAccess Control

Cloud storage & collaboration

Build a Dropbox-style file-sharing app

You’re building a multi-tenant storage product: workspaces and teammates, granular folder sharing, storage quotas, plan-gated features, and paid tiers. It needs all five blocks, end to end.

IdentityAccess ControlMeteringFeature FlagsBilling

Merchant marketplace

Build a Shopify-style commerce platform

You host stores for many merchants. Each needs staff accounts and roles, experiments on checkout, metered orders, and a subscription plus a per-sale transaction fee.

IdentityAccess ControlFeature FlagsMeteringBilling

Explore all use cases

Be first to build on Keystone

We're onboarding early-access teams ahead of launch. Join the waitlist and we'll reach out with your invite, identity, authorization, metering, and billing, without the multi-quarter build.

Join the waitlist Talk to us