Multi‑tenant Next.js 16, Better Auth, Stripe and Prisma 7. Ships with its own published audit, subdomain and path tenancy, and a playbook your AI agent follows instead of improvising.
Demo login alice@example.com / password
01 The problem
Your agent can scaffold a dashboard in minutes. It will also happily skip tenant isolation, replay a Stripe webhook twice, and forget the audit trail. A reviewed foundation matters more in the agent era, not less.
02 Pillar 1 · Audited, not just shipped
Six specialist reviewers graded five dimensions and cited specific file:line findings. A status update maps each one to fixed, roadmap or documented. Read it before you buy.
Grades are from the v0.3.0 review on 2026‑06‑09. The review’s status update records the fixes shipped since.
Deleting a workspace left its Stripe subscription billing
Delete now cancels the Stripe subscription first, and the webhook tolerates unknown tenants instead of retrying forever.
Tenant suspension wasn’t enforced
The central guard now rejects any tenant whose status isn’t ACTIVE, so every tenant surface inherits it.
Docker images published without waiting for CI
Publishing now depends on the checks job, so a red build can’t auto-deploy to production.
Dev compose file defaults the database password
Production compose fails closed without POSTGRES_PASSWORD. The infra file keeps a default and is documented as local development only.
03 Pillar 2 · Multi‑tenant done right
Start on path mode with no DNS work. Flip to subdomains when you buy the wildcard cert. Either way, the server cross‑checks the URL slug against the resolved tenant.
Wildcard DNS + cert. Custom domains map to the same tenant.
# the only line that changes [TENANCY_MODE]=subdomain
04 Pillar 3 · Built for AI agents
The repo tells your agent how this codebase works, gives it repeatable recipes for the common jobs, and tells it when it got something wrong.
Works with Claude Code natively. Cursor and Codex read AGENTS.md.
Common jobs, done the same way every time.
05 What’s inside
06 See it running
Plan, seats and pending invites at a glance, scoped to the current workspace.
Live demo [DEMO URL] superadmin admin@example.com tenant alice@example.com password password
07 Honest comparison
Every starter here has real customers and does its job. “?” means we couldn’t verify it from public pages — not that it’s missing.
| This template | Makerkit | supastarter | ShipFast | Vercel saas‑starter | |
|---|---|---|---|---|---|
| Multi‑tenancy | Subdomain + path | Teams / orgs | Organizations | ? | Teams, Owner/Member roles |
| Auth library | Better Auth | Supabase Auth or Better Auth (by kit) | Better Auth | NextAuth or Supabase | Custom JWT |
| Admin panel | Yes | Yes | Yes | ? | Not found |
| Audit log | Yes | ? | ? | ? | Activity log |
| Feature flags | Yes | ? | ? | ? | Not found |
| Outbound webhooks | HMAC, retries, log | ? | ? | ? | Not found |
| i18n | EN + ES | Yes | Yes | ? | Not found |
| Tests | 980+ unit · E2E | Playwright E2E | Playwright E2E | ? | ? |
| Published code review | Yes | Not found | Not found | Not found | Not found |
| AI agent tooling | 11 Claude Code skills + AGENTS.md | AGENTS.md, MCP server, skills | Agent skills + AGENTS.md | ? | Not found |
| Price | From $99 one‑time | From $227 one‑time (list $349) | From $349 one‑time | From $199 one‑time | Free (MIT) |
Compared November 14, 2026 from vendor sites and repositories. Prices shown are the current cheapest tier and some vendors discount them. Prices and features change — check each vendor’s site before you decide.
08 Fit check
I’ve rebuilt auth, billing and tenancy for every SaaS I’ve started. Now I spend my days helping 200+ engineers adopt AI coding agents, and I see where agents go wrong: the boring, security‑critical plumbing. So I built the foundation once, had it reviewed, and wrote down the rules so your agent follows them too.
09 Pricing
Full source in a private GitHub repo. No subscription, no per‑project fees.
One developer, your own products.
A product team on one codebase.
Ship it for clients.
| Solo | Team | Agency | |
|---|---|---|---|
| Full source · private repo | Included | Included | Included |
| Lifetime updates | Included | Included | Included |
| Docs, recipes, 11 Claude Code skills | Included | Included | Included |
| Unlimited projects you own | Included | Included | Included |
| Developer seats | 1 | Up to 5 | Unlimited |
| Priority issues on the repo | Not included | Included | Included |
| Client‑owned projects allowed | Not included | Not included | Included |
| Transfer to client on handover | Not included | Not included | Included |
No refunds once repo access is granted, so try the live demo and read the code review first. Licensed, not sold: you may not resell or redistribute the template itself. Read the license.
10 FAQ
Still deciding? Open the live demo or read the code review first. Anything else: get in touch.
It can write one. It can’t review one. You’d spend days prompting, then still own the tenant isolation, webhook idempotency and auth edge cases nobody checked. This kit has been reviewed, has 980+ tests, and gives your agent the rules to extend it safely. Use the agent for your product, not your plumbing.
Pull from the private repo. The upgrade guide explains how to merge new template versions into your project, and the public changelog says what changed and why.
Yes, with the Agency license. Solo and Team cover unlimited projects that you own, but not projects owned by a client. The Agency license adds client-owned projects and lets you transfer the project to the client on handover.
Anything that runs a Node standalone build and PostgreSQL. There’s a Vercel guide, plus Docker images and compose files with Traefik and Watchtower for self‑hosting. Edge runtime and multi‑region databases aren’t supported out of the box.
Not at the moment. The live demo and the published code review are both public, so you can judge the product and its quality before you buy.
A one‑time commercial license with lifetime updates. Build unlimited products you own; you can’t resell or redistribute the template itself. Read the full license.
No refunds once repo access is granted, because source code can’t be returned. That’s why the live demo and the full code review are public: judge it first. If something is genuinely broken and we can’t fix it, get in touch and we’ll make it right.
You should be comfortable with React and the App Router. The patterns are documented in PATTERNS.md, and the skills handle the common changes, so you won’t need to learn every Next.js 16 detail on day one.
Then a lighter starter is probably a better fit, and we’d rather tell you now. If you expect to sell to teams later, starting multi‑tenant is far cheaper than retrofitting it.
980+ tests · Published code review · Next.js 16 · Better Auth · Stripe · Prisma 7