For developers

TypeScript SDK, OAuth 2.1, REST + OpenAPI. Ship a managed AI app in an afternoon — no servers, no Stripe, no infra.

~/your-app
npm install @proma-dev/sdk

One package. Auth, credits, AI calls, and React hooks in the same install. Zero infrastructure to run.

TypeScriptOAuth 2.1 / PKCEREST + OpenAPIPay per result

~6

lines to login

0

servers to run

< 5 min

install → first call

OAuth 2.1

standard, not magic

Pick your stack

import {
  PromaProvider,
  usePromaAuth,
  useOAuthCallback,
} from '@proma-dev/sdk/react'

// 1. Wrap once. Auth + billing wired up.
<PromaProvider
  clientId={process.env.NEXT_PUBLIC_PROMA_CLIENT_ID!}
  redirectUri="https://yourapp.com/callback"
  scopes={['profile', 'credits', 'ai:chat']}
>
  <App />
</PromaProvider>

// 2. Use anywhere.
function Composer() {
  const { user, login, client } = usePromaAuth()
  if (!user) return <button onClick={() => login()}>Sign in</button>

  const reply = await client.ai.chatText([
    { role: 'user', content: 'Pitch this in one sentence.' },
  ])
  // → user is charged. you earn. no servers, no Stripe.
}
$ tip: Same client. Same scopes. Different framework.

You write the interesting part.

Everything you would otherwise spend a quarter rebuilding is already in the SDK. Ship the part nobody else can.

We manage

  • OAuth 2.1 server + PKCE
  • Token refresh & storage
  • Stripe billing & invoices
  • User accounts, MFA, recovery
  • Postgres + RLS tenant isolation
  • AI provider routing & retries
  • CDN, hosting, scaling
  • Marketplace distribution

You write

  • Your prompt + model logic
  • Your UI / product surface
  • Your domain expertise

Built for engineers

No magic. Just a small, sharp SDK.

TypeScript-first SDK

Strict types, zero-config, tree-shakeable. Works in any bundler — Next.js, Vite, Remix, plain Node. React hooks ship in the same package.

OAuth 2.1 + PKCE

Standards, not magic. Public-client PKCE flow means no client secret in the browser. Tokens auto-refresh. You read the IETF RFC, not our docs.

Pay-per-result billing

Every AI call deducts user credits. Pricing returned on every response. You earn a share on every call. No invoicing, no Stripe webhooks.

Just HTTP underneath

The SDK is a thin wrapper. Every endpoint is documented REST, every error is an RFC 7807 problem document. Integrate from any language.

Hosted auth + RLS

We run Supabase Auth, MFA, password reset, and account deletion. Postgres row-level security enforces tenant isolation. You write business logic.

Open marketplace

Publish once, get distribution to every Proma user. AI-ranked search puts your app in front of the right intent. No app review committee.

Ships in the box

PKCE-secure OAuth flow
Auto-refreshing access tokens
Typed credits ledger client
Streaming + non-streaming AI calls
React provider + hooks
Storage adapters (memory, localStorage, custom)
Structured error types
OpenAPI-compatible REST

Build with your favorite tools

Claude
Vibecode
Lovable
Replit
Bolt
and more

Stop rebuilding plumbing.

Spin up an OAuth client, drop in the SDK, ship a managed AI app this afternoon.