Wacht is an open source framework for building AI-first SaaS products. The whole foundation, already built and designed to work together, so you can spend your time on the actual product instead of months of infrastructure plumbing.
After years of consultation work building multiple SaaS products in parallel, the same pattern kept showing up. Every project began with weeks of stitching together auth, API keys, webhooks, organization management, multi-tenancy, real-time notifications, and now agent runtimes, all from separate vendors with different SDKs, mental models, and failure modes. By the time the actual product was ready, half the work had been plumbing.
Wacht is the foundation built once and built right, designed to work together from day one.
Identity. Email, social login, passkeys, MFA, recovery flows, and enterprise SSO including SAML, OAuth, and SCIM directory sync. Multi-tenancy, organizations, and workspaces are first-class concepts.
OAuth Provider. A full OAuth 2.1 provider so you can expose your own backend for third party integrations. Create OAuth apps, define scopes, handle delegated permissions. Plugs directly into MCP servers.
API Authentication. App keys with validation, scoped permissions, and rate limiting. Full OAuth token lifecycle with refresh, revocation, and replay protection.
Realtime Notifications and Webhooks. In-app notification channels and webhook delivery as first-class features. Track deliveries, retry failures, replay events.
Agent Platform. Bring your instructions, skills, and MCP servers, pick your integrations, and Wacht handles the rest. Isolated microVMs that spin up in milliseconds, built-in memory and file system, multi-agent routing, durable task queues, and reliable state machines. Builders bring their own S3 buckets and own everything their agents produce and consume.
Prebuilt UI. Sign-in, OAuth consent, account switcher, organization and workspace management, webhook console, and agent conversation surfaces all ship ready to embed. Not starter templates, production UI with the product logic already wired in.
Most of the source is publicly available on GitHub at github.com/wacht-platform under an OSS license. Self-hosting docs are coming soon. SAML SSO is included on every plan, including the free tier.
Currently in public beta. Looking for builders who want to try it and tell us what's broken or missing.
Built with