At a glance — Oct 2026
Updated 2026-10-27 · forward this page: /jtbds/user-management#briefScores as of 2026-10-19 (8 days old).
- Depot Pick
- Clerk · 8.43/10 for this job (curated estimate, high confidence)
dx primary.
- Runner-up
- Auth0 (Okta) · 7.85/10
Scores higher than the pick on: Capability fit, Latency / reliability, Privacy / data retention, Maturity / track record.
- When not to use the pick
- Custom build on Supabase Auth / Cognito for cost control at massive MAU.
- Lock-in / migration
- The pick has lower stored lock-in risk than runner-up Auth0 (Okta) (6.5 vs 7).
- Sourced price (no comparable unit)
Pick: no sourced price in this job's unit (no_sourced_price).
No cheapest SKU (no_comparable_unit_for_job). No price was invented.
- Free option
- No free resource lists this job. A cheap paid SKU is not a free option.
- Failure modes to watch
- Identity confusion: Bind every tool call to a user or tenant id. Refuse the call if that id changed mid-task. For a public bot, the operator owns the words the bot shows.
Cite: Agent Provider Depot, Depot Pick for user-management: clerk, scores as of 2026-10-19. Agents: GET /api/decide?jtbd=user-management
Clerk
dx primary.
Pricing (directional): Bills monthly retained users (MRU: a user who returns at least one day after signing up), not MAU (https://clerk.com/pricing, fetched 2026-10-21): Hobby free up to 50,000 MRU per app; Pro $25/mo and Business $300/mo include 50,000 MRU per a…
Lock-in risk: higher = more lock-in (worse). Overall already inverts this dimension.
Depot default auth for agent products with users. WorkOS when enterprise SSO is the main job.
Quote for User management UI & orgs
Depot Pick stays Clerk. Prices below are sourced SKU rows only (as of 2026-10-27). Input and output are not blended. GET /api/quote?jtbd=user-management
Nothing was compared. no comparable sourced unit for this job; chat input $/1M and other units were not borrowed pickIsPriceWinner is null.
Sourced price unavailable for the Depot Pick. No row in the pricing index.
4 of 4 candidates have no sourced price row. 4 are excluded from the Matching price comparison (none). no comparable sourced unit for this job; chat input $/1M and other units were not borrowed
Runners-up
Auth0 (Okta)
Enterprise identity Swiss Army knife. For startups, Clerk/WorkOS usually hurt less.
Supabase (pgvector)
Depot default for most agent apps under ~25–50M vectors. Don't add Pinecone until Postgres actually hurts.
Stytch
Auth pick when agents/M2M + org SSO matter more than Clerk's consumer UI kit. Watch Twilio integration…
When NOT to use the top pick
Custom build on Supabase Auth / Cognito for cost control at massive MAU.
Full ranking (score table)
Ranked with this JTBD's weights. Scores are curated estimates unless marked otherwise. Agents: prefer /api/decide then this table for tie-breaks.
| # | Provider | Overall | Fit | $/perf | Latency | DX | As of |
|---|---|---|---|---|---|---|---|
| 1 | Supabase (pgvector) | 8.6 | 8.5 | 9.0 | 8.6 | 9.4 | 2026-09-14 |
| 2 | ClerkDepot Pick | 8.4 | 9.0 | 8.0 | 9.0 | 9.8 | 2026-10-19 |
| 3 | Stytch | 8.3 | 8.6 | 8.8 | 8.4 | 8.8 | 2026-09-14 |
| 4 | Auth0 (Okta) | 7.8 | 9.2 | 5.5 | 9.2 | 7.5 | 2026-09-14 |
Score methodology for this job
dx primary.
capabilityFit: 25%pricePerformance: 18%latencyReliability: 15%developerDx: 15%privacyPosture: 10%lockInRisk: 7%maturity: 10%