Sign-in
Email, passkeys, and company identity providers with secure sessions.
Product / Door
Login, teams & permissions
Share a private app without building auth.
Every app starts private. Invite a person or team, assign a role, and send the URL. Sign-in, sessions, and authorization are built in.
app access healthy
TARANTULA / DOORrenewal-board
01Finance · viewer
02Customer Success · owner
03Public access · off
RESULT8 people have access
What is included
Useful defaults, ready in production.
Sharing
Invite a person, a team, or an entire workspace from one access panel.
Permissions
Enforce the same roles in the UI, server, and database.
App identity
Every deployed app gets its own identity for calling other tools safely.
Declared with the app
Permissions live beside the app.
The coding agent declares the resource beside the app. Local development and production use the same binding and permission contract.
tarantula.tsDoor
import { auth } from "tarantula";
export const access = auth({
audience: "workspace",
roles: {
viewer: ["accounts.read"],
owner: ["accounts.*"]
}
});Validated locally · ready to deploy
Small-cloud defaults
01No callback-URL setup
02No separate role sync
03One share panel for people and teams
Private alpha