Cloud VPS 6 GB
Below the template's own manifest floor.
24.99per month
- 6 GB RAM
- 4 vCPU cores
- 100 GB NVMe SSD
- 30 TB
- Unlimited
Stack Auth hosting runs a self-hosted auth platform on your own domains: a user authentication API for your apps and a dashboard to manage them. Deploy Stack Auth, now Hexclave, with PostgreSQL, ClickHouse and a scheduler, a generated administrator login and three persistent volumes, published over HTTPS. Email, webhooks and storage need services you add yourself, and payments are not available here.
Stack Auth, now called Hexclave upstream, is an open-source authentication and user-management platform: sign-up and sign-in, OAuth providers, teams, permissions, API keys and email flows, with SDKs for your own apps and a dashboard to manage projects. A self-hosted Stack Auth is an alternative to a hosted identity service such as Auth0. Licences are per package, with server components under AGPL-3.0 and client code and examples under MIT.
On xCloud it is the stackauth/server image at commit 1a1add8, pinned by digest, as the API and dashboard in one container beside PostgreSQL 16, ClickHouse 25.10 and a scheduler. xCloud generates the secrets and serves two domains over HTTPS. Payments are not available in this setup, and email, webhooks and storage need services you add.
A Stack Auth install needs the server, two databases, a scheduler, six generated secrets, an API domain, a dashboard domain and certificates before the first project. This is the same result without assembling any of it.
Step 01
Create your xCloud account and pick Stack Auth from the OneClick catalog. Map an API domain and a dashboard domain under the same parent domain, and enter the administrator email.
Step 02
One click. We start stackauth/server 1a1add8 with PostgreSQL 16, ClickHouse 25.10 and a scheduler, all pinned by digest, generate the secrets, mount three volumes and publish both domains over HTTPS. First boot can take five minutes.
Step 03
Open the dashboard domain and sign in with the administrator email and password on the credentials card. Create a project, then point your apps and SDKs at the API domain. Keep that domain stable, because it is part of issued tokens.
Stack Auth runs here as the API and dashboard, with users in PostgreSQL on volumes you control.
Upstream handles sign-up and sign-in, with OAuth providers and passkeys, so your app calls the API instead of building authentication itself.
Group users into teams and give them permissions, managed from the project dashboard.
Create API keys for your users or services, issued and revoked through the same user model.
SDKs let your own applications talk to the API domain. Upstream also offers an AI prompt to wire it up.
Verification, magic links and password reset need an SMTP server that you configure with the HEXCLAVE_EMAIL_ settings.
Sign-up on the dashboard is disabled, so only the administrator account created at install can sign in there.
Managed hosting for Stack Auth, so the parts that keep it online are not your problem.
Use the SDK and API domain so users sign in without you building password and OAuth flows.
Give users team roles and permissions from one dashboard instead of in each application.
Let your users create keys for programmatic access, managed by the same platform.
Hold accounts and analytics in your own PostgreSQL and ClickHouse rather than a hosted identity vendor.


Dedicated Cloud VPS sizes, pre-configured for Stack Auth hosting. Pick the one that fits, and resize any time.
Below the template's own manifest floor.
24.99per month
Auth for a product team, with room for analytics.
59.99per month
Room for heavier traffic and larger user sets.
84.99per month
Every size is a dedicated Cloud VPS we provision, patch, monitor and restore. Billed monthly with no lock-in — delete the server and the unused balance comes back to your account. Stack Auth server components are AGPL-3.0; client code is MIT.
Connect any VPS — DigitalOcean, Vultr, Linode, AWS, Hetzner or bare metal — and deploy Stack Auth on it through the same panel, for a per-server management fee instead of a Cloud VPS rental.
Start your journey without cost.
$0forever
Your rate with 2–5 servers connected.
$5per server / month
The same platform, discounted at 6–10 servers.
$4per server / month
The same platform, discounted at 11+ servers.
$3per server / month
Priced per connected server, so your rate adjusts automatically as you add or remove servers. You pay your own provider for the server itself.
Stack Auth on xCloud runs on a dedicated Cloud VPS that we provision, patch, monitor and restore. Your users, your API, your domains.
Deploy faster using an xCloud Managed Server built with optimized stacks and high-speed SSDs.
Protect your infrastructure with a free SSL certificate and more advanced security features at no additional cost.
From Server creation to application deployment, everything can be managed from our intuitive control panel.
See why agencies, developers, startups, and growing businesses choose xCloud to power their projects.
xCloud works really well, I am surprised by its performance being this the release version, I have tried many paid platforms such as runcloud, cloudpages or serveravatar, as well as free platforms such as CyberPanel, CloudPanel or Hestia Control Panel and direct competitors such as SpinupWP and FlyWP. Of all those that I have tried, the platform that works best for WordPress is SpinupWP and I believe that xCloud can reach and surpass that development, its roadmap is promising. Congratulations to the xCloud team, I hope they become the leading platform in the segment, it has all the potential to achieve it!
Brian GeovannyI've been with runcloud for the last 3 years. However, after trying xcloud for the last month, I'm switching over. They are on a roll with their setup.
Kevin PinedaI'm moving my servers to xCloud, a cloud control panel by M Asif Rahman and the WPDeveloper team. Their roadmap looks interesting and no, there are no team mates nor API limits with xCloud! #xCloud #wordpress #hosting
Leo KooHow Cloud Nine Web Elevated Client Experience While Streamlining Hosting Operations using xCloud
Ed EllinghamxCloud is like having an expert server team on call — without the big agency costs. It's given me back my time and given my clients peace of mind. Highly recommended for freelancers and small teams who want reliable performance and security.
Dumitru ButucelxCloud isn't just a solution. It's like one of that friend who got your back when you screw things up pretty bad.
Waqar AhmedTrust me when I say, once people explore the potential of xCloud they gonna switch from other panels, just keep delivering the best tech, lots of love for the team 😍😍
Rahul SinghSo far my experience has been smooth like silk. I didn't imagine that configuring and managing a VPS would be so easy. As of today, I have deployed 8 sites. The support is good, and they treat users with respect, even if they ask stupid questions (myself included). For the future, I hope for greater flexibility in scheduled backups and more comprehensive and consistent documentation. I'm sure that within a few months, xCloud will become the leader in its segment. This community is amazing, and the Staff here is super helpful.
Massimo VillaCame from cloudways then to runcloud then to xcloud. Looks like I'm staying here.
Gerson ElI've recently taken all of my Vultr-hosted sites and gotten rid of cPanel for them to substitute it with xCloud. I have to say, I'm really impressed with xCloud so far! The interface is definitely the standout feature for me.
Tony LewisI came from Cloudways and won't go back. Highly impressed with xCloud. Glad I gave them a chance.
Jared McDowellI like xCloud better than RunCloud, but one thing I'll point out is that some years ago RunCloud was hungry for business, the support was outstanding, and the community was active and helped each other. Maybe it was sold, there was a change in management, or they stopped being hungry, but the quality of the RunCloud offering declined and it hasn't been moving forward quickly. My point is that currently the xCloud team has the edge and it is theirs to keep or lose
David McCanHow Kevin Heinrichs Cut Hosting Costs by 84% While Running WooCommerce & Node.js Sites Efficiently
Kevin HeinrichsI had 150 sites on cloudways and am in the process of moving them to xcloud. Much faster and better priced.
Dan SpinozaDear xCloud Team, I have been using xCloud for some time now and am genuinely impressed with its capabilities and the flexibility it offers by allowing users to bring their own VPS for management. It's a fantastic service, and my experience so far has been very positive. Successful migrated 5 sites on a single server. Xcloud migration tool worked great. There were few hiccups with security plugin like MalCare but disabling the plugin prior to migration worked just fine.
Rahil MaknojiaCame from runcloud. Tried xcloud and never came back.
Karl FanegaHow Advanced Web Strategies Saved Over $2,000 & Recovered 56 Hours per Month Managing 70+ Client Websites
Gary MoodyxCloud gave me what no other hosting platform could: the flexibility of a VPS with the convenience of managed WordPress. As a solo founder running an entire business on one server, that combination is an important unfair advantage.
Jorge de los Reyes MartínezI use Server Avatar and xCloud and I'll sooner use xCloud than Server Avatar personally.
Jay PaganoHow Newman Web Solutions Ensured Perfect Uptime and Seamless Scaling For 120+ WordPress Sites with xCloud
Lori NewmanI too have moved over to xCloud. It's pretty sweet. One click n8n and uptime Kuma apps
John ApertureI went from Cloudways to xCloud. No intention on switching in the foreseeable future.
Blaine MooreFeel free to contact us with any questions or concerns you may have.
Yes. Upstream has rebranded Stack Auth as Hexclave, and the project and docs now use that name. The image is still stackauth/server and is tagged by commit SHA, so this page pins 1a1add8, the dashboard v1.0.129 release commit.
Your applications call the API domain, and you manage projects on the dashboard domain. Keep the API domain stable, because it is part of every issued token and your OAuth callback URLs. Keep both under the same parent domain.
No. Sign-up on the dashboard is disabled, so only the administrator account created at install can sign in. Your applications can still let their own users sign up through the API, subject to your project settings.
Not until you configure it. Email, including verification, magic links and password reset, needs an SMTP server: add the HEXCLAVE_EMAIL_ lines in the Environment editor and redeploy. Webhooks need an external Svix server and file storage needs S3-compatible storage.
Yes. Upstream publishes the stackauth/server image, and this template is Stack Auth Docker hosting without the setup: the server, PostgreSQL, ClickHouse and a scheduler pinned by digest, three volumes and HTTPS on two domains, so you do not hand-write a Compose file or wire the services.
The manifest asks for 4096 MB of RAM, 2 CPU cores and 10 GB of disk, because the server, PostgreSQL and ClickHouse all run on one machine. That is why this page sells the 16 GB plan.
Yes, and licensed per package. Server components are AGPL-3.0, and client code and examples are MIT. Upstream also sells enterprise licences. You pay for the Cloud VPS, which makes this a Stack Auth cloud of your own.
Payments are not available, webhooks need an external Svix server, file storage needs S3-compatible storage, and email needs SMTP. The scheduler container calls internal maintenance endpoints every minute. Check what your project needs before you commit.
Back up stack_auth_postgres_data, stack_auth_clickhouse_data and stack_auth_server_state together. Keep HEXCLAVE_SERVER_SECRET with them, since it signs tokens. Database passwords apply only on empty volumes. Nothing backs these up automatically, so copy them off the server and test a restore.
The install stays on its pinned 1a1add8 images until you adopt a newer template version. Back up all three volumes first and read the upstream notes. Nothing upgrades automatically, and changing the server secret signs everyone out.
Yes. There is no lock-in — cancel any time. Hosting is billed monthly and charged for what you actually use, so when you delete the server the unused balance is refunded to your account, less up to 10% in payment-processing fees.
Connect your first server in minutes. No plan you have to grow into.