Eight backend services — auth, email, AI models, memory, storage, jobs, verify and abuse control — running today across a dozen of our own products. Each comes with a real usage allowance included; you pay more only when you outgrow it.
48seconds
From asking your agent to a working sign-in page. It provisions the service, writes the code and tells you where to look.
claude mcp add --transport http smart-services \ https://app.smart-services.io/mcp \ --header "x-api-key: $SS_KEY" ✓ 8 services available to your agent
Add sign-in to this app. Email codes and Google, no passwords.
I’ll set that up with Smart Services.
Auth is on. I’ve added the provider config, the callback route and your env vars. Sign-in is live at /api/auth/signin — try it.
What you didn’t do
Your appapp_01J8QK
Monthly€20.00
€20.00/mo covers the platform and a real allowance on every service — 100 users, 1K emails/mo, 500MB. You pay more only where you outgrow it.
Download it from your dashboard with your app id and only the services you switched on already in it. Nothing to configure, nothing you don’t use.
// smart-services-client.ts — generated for your app import { SmartServices } from "./smart-services-client"; const ss = new SmartServices({ apiKey: process.env.SS_KEY }); await ss.email.send({ to: "you@example.com", subject: "It works", }); ✓ delivered in 1.2s
In the box
Re-download whenever you switch a service on — the client changes with it.
All eight services, each with real usage included. Switch on what you need and pay more only when you outgrow it.
A hosted sign-in page on your brand: one-time email codes plus Google and LinkedIn, with account linking handled. Free to your first 100 users, and a real OIDC provider — PKCE only, so there is no client secret to leak.
Included100 usersthen from €10.00/mo
Transactional email as a single POST, with delivery tracked per message. Send through us, or bring your own SMTP and keep your deliverability. Add IMAP and every message is filed to your Sent folder, so replies thread in your normal mail client.
Included1K emails/mothen from €10.00/mo
One OpenAI-shaped endpoint in front of every provider. Bring your own keys and the spend stays on your account — we never mark them up. Name a model, or name a capability and let us keep a tested one behind it.
Includedincluded
Two ways to remember: semantic chunks for search, and sourced claims that carry a verbatim citation per statement — for answers that must not invent.
Included100MBthen from €10.00/mo
S3-compatible object storage with presigned uploads and CDN delivery, so user files never touch your own server.
Included500MBthen from €5.00/mo
Register a schedule, we call your URL when it is due. Postgres is the source of truth — we lost every cron on the platform once, and never again.
Includedincluded
Check an address before you trust it: syntax, disposable-domain lists, and live MX lookups, behind a shared DNS cache.
Included1K/mothen from €5.00/mo
Sliding-window rate limits and SSRF-safe URL validation. On by default for every app — a security guard should never be something you opt into.
Includedincluded
AI models
An OpenAI-shaped endpoint in front of OpenAI, Anthropic, Google and Ollama. Bring your own keys and the spend stays on your account at your negotiated rate — we take nothing on top and never resell you tokens. The routing is the product; a margin on somebody else’s inference is not.
Capability routing
Name a capability, attach a competence test. We score every new model against it and keep the best one wired in — so a provider retirement is a config change on our side, not a 3am page on yours.
capability "extraction" ✓ qwen3.5:9b 0.94 ✓ gpt-oss:20b 0.91 ✗ deepseek-v4 retired serving qwen3.5:9b
One POST sends a message. Use our transport, or bring your own SMTP and keep the deliverability you already built — a reputation you spent years on should not be something a vendor rents back to you.
A message sent through an API is invisible to the mailbox it claims to come from. Your mail client never saw it, so when the reply arrives there is nothing to thread against and no history to quote.
Add IMAP and we file every sent message into your Sent folder. The conversation continues in the client you already use — no inbox to build, no thread view, no second place to check.
Auth
A real OIDC provider with a hosted sign-in page on your brand: one-time email codes, Google and LinkedIn, account linking handled. PKCE only — there is no client secret in the entire portfolio, so there is none to leak, rotate, or find in a repo three years from now.
An attacker who reaches a logged-in session can change the account’s email and lock the owner out. Most providers send a notice to the old address and consider the job done.
We send the old address a way to contest it. If they do, the change is reverted and we tell your app to sign that user’s other sessions out — because we cannot revoke your session cookie, only you can. Reverting the address without killing the sessions leaves the attacker signed in.
POST /your-auth-events Authorization: Bearer <RS256 JWT> { "type": "email_change.contested", "sub": "usr_01J8QK…" } → revert, and sign them out
Thirty-five years of production tech, so you don’t reinvent the wheel — eight services running today across a dozen products. We are not taking general signups while billing is being finished. Leave your address and we will come to you when we open, in the order people joined.