Kinde vs PocketBase
Flexible authentication, user management, and feature flags
vs. Open-source backend in a single Go binary
Pricing tiers
Kinde
Free
10,500 MAU included. MFA, B2B orgs, custom domain, 2 custom roles, 1 webhook, 2 environments.
Free
Pro
Unlimited webhooks, roles, feature flags, API keys. Remove Kinde branding. SOC 2 attestation.
$25/mo
Plus
Unlimited enterprise SSO, API scopes, org-owned M2M apps, 6 environments.
$75/mo
Scale
11 environments, custom domain per org, SCIM, MFA triggers, 30-day audit logs.
$250/mo
Enterprise
Custom. Dedicated infra option, volume discounts, custom SLAs.
Custom
PocketBase
Self-Hosted
MIT-licensed single binary. Run on any VPS / Docker / bare metal. No usage caps — only limited by your server.
$0 base (usage-based)
Free-tier quotas head-to-head
Comparing free on Kinde vs self-hosted on PocketBase.
| Metric | Kinde | PocketBase |
|---|---|---|
| custom roles | 2 roles | — |
| environments | 2 envs | — |
| feature flags | 10 flags | — |
| mau included | 10500 users/month | — |
| webhooks | 1 webhooks | — |
Features
Kinde · 14 features
- API Scopes — OAuth scopes for your APIs, enforced server-side (Plus+).
- B2B Organizations — Multi-tenant orgs with user roles, invitations, feature flags per org.
- Custom Domain — Host auth at auth.yourbrand.com. Free tier includes this.
- Enterprise SSO — SAML 2.0 + OIDC enterprise connections (Plus unlimited).
- Feature Flags — Built-in feature flags with per-user/org overrides. No separate service needed.
- Kinde AI — AI-assisted query and insights over your Kinde data.
- Kinde Billing (preview) — Built-in subscription billing linked to users/orgs. Stripe under the hood.
- Machine-to-Machine — Client credentials grant for service-to-service auth.
- Multi-Factor Auth — TOTP authenticator apps, SMS, email, passkey.
- Passwordless — Email code + passkey (WebAuthn).
- Roles & Permissions — RBAC with roles → permissions. Assigned per user or per organization.
- SCIM Provisioning — Directory provisioning from IdPs (Scale tier).
- Sign-in Widget — Hosted pages + themeable widget for login/signup. Customizable with CSS.
- Webhooks — Event webhooks: user.created/updated, organization events, MFA, etc.
PocketBase · 12 features
- Access Rules — Record-level access rules (filter expressions) referencing @request and @collect…
- Admin Dashboard — Built-in web UI for schema + data management.
- Auth — Email+password, OAuth2 (Google, GitHub, Facebook, Apple, Discord, Microsoft, etc…
- Backups — Built-in backup/restore with S3 upload option.
- Built-in Mailer — SMTP integration for verification, password reset, magic link emails.
- Collections — Schema-defined record types with fields, validations, and record/admin/auth acce…
- Embedded JS Engine — JavaScript VM (goja) lets you write hooks in JS without recompiling.
- Extend as Go Library — Embed PocketBase in a larger Go app, add custom routes and events.
- File Storage — Local filesystem or S3-compatible storage with access rules.
- Hooks — Server-side Go or JavaScript hooks that run on CRUD events (OnRecordBeforeCreate…
- Migrations — JS/Go migration scripts applied on startup.
- Realtime Subscriptions — SSE-based subscriptions to collection changes.
Developer interfaces
| Kind | Kinde | PocketBase |
|---|---|---|
| SDK | Kinde Android / Kotlin, Kinde Flutter SDK, Kinde Go SDK, Kinde iOS / Swift, @kinde-oss/kinde-auth-nextjs, @kinde-oss/kinde-auth-react, @kinde-oss/kinde-nodejs-sdk, Kinde Python SDK | Go API (extend as library), pocketbase (Dart), pocketbase (JS SDK) |
| REST | Kinde Management API | REST API |
| MCP | Kinde MCP | — |
| OTHER | — | Admin Dashboard, Realtime SSE |
Staxly is an independent catalog of developer platforms. Outbound links to Kinde and PocketBase are plain references to their official websites. Pricing is verified against vendor pages at publication time — reconfirm before buying.
Want this comparison in your AI agent's context? Install the free Staxly MCP server.