🏢Tenant-scoped usersThe same email can sign up under different tenants as separate users. Sessions, accounts, and verification records are scoped by tenant.
👥Platform membershipPlatform users get owner / admin / member roles on tenants they manage, with a full membership CRUD API.
✉️Invites & policiesOptional invite-only sign-up and email-domain allowlists. Tenant-scoped email verification via GET /tenant/verify-email.
🔐Per-tenant OAuthStore OAuth client credentials per tenant in the database, encrypted at rest. Fall back to global providers when no tenant config exists.
🛠Management APIsCreate, update, list, and delete tenants, members, invites, and OAuth configs through typed Better Auth endpoints.
🔌Better Auth nativeAdds schema, endpoints, and a client plugin that integrate with Better Auth's adapter, session, and social provider systems.