Unified business infrastructure for products
From sign-in and subscriptions to entitlements, waitlists, and user feedback,
keep the product foundations working together in one place.
Accounts, products, subscriptions, entitlements, users, feedback, and notifications stay in the same application context instead of being split across tools.
Hosted sign-in and registration, Google SSO, email verification, and password reset. Each application can use its own branding and authentication methods.
OAuth + PKCEDefine one-time products and fixed-term subscription plans, then assign roles. A confirmed Alipay payment grants entitlement; a new subscription replaces the prior subscription entitlement.
Dedicated checkout links / order management / manual payment confirmation / settlements and withdrawals
Organize your team in workspaces, then separate users, products, and permissions by application. Manage invitations, roles, and application settings together.
Promotions, waitlists, user communication, Issue boards, analytics, and team notifications all belong to the same application.
Set percentage or fixed discounts for selected products, with validity, usage, and eligibility rules. Use the same rule for launch offers, customer recovery, or limited campaigns.
Generate and distribute codes in batches, then grant the linked entitlement when a user redeems one. Track redemption records and revoke unused codes whenever plans change.
Configure templates for verification, welcome, password-reset, and waitlist-confirmation email in one place. Your backend can also send application email through the email API.
Review application users, their status, profile, and entitlement sources to confirm current access. Existing user systems can stay aligned through the external-user sync API.
Embed a hosted form to collect interest before the product is ready to launch. Keep subscription status organized in the console and complete the first touch with a confirmation email.
Bring reports and ideas into a clear status flow, with replies added as the team works. When progress should be public, choose the lanes and fields visitors can see.
Link Google Analytics to the current application and maintain the connection from application settings. Product pages, waitlists, and campaigns keep a clear application ownership.
Configure DingTalk or Feishu bots to deliver application-operation events to a team channel. Teammates can follow important changes without keeping the console open.
Define product rules first, then connect sign-in, purchase, authorization, and operations to your business.
Set its domain, sign-in methods, and redirect URIs, then get integration credentials.
Configure permissions for roles, create one-time products and subscription plans, then connect redemption and discount rules.
Use the SDK for sign-in, checkout, and authorization; then configure waitlists, Issue boards, and team notifications when needed.
The TypeScript SDK has server and browser entry points. Existing backends can use the REST API directly; servers use API keys, while browser extensions and other public clients use OAuth / PKCE.
import { getSharedTongIdClient } from '@tongid/sdk'; export async function getPermissions(request: Request) { const tongid = getSharedTongIdClient({ baseURL: 'https://tongid.dev', applicationId: process.env.TONGID_APPLICATION_ID!, secretKey: process.env.TONGID_SECRET_KEY!, }); const session = await tongid.auth.getSession({ cookieHeader: request.headers.get('cookie') ?? '', }); return session?.effective?.permissions ?? [];}Read the user session from the request and return merged effective permissions. Application keys are used only on the server.
Running in production
Each keeps its own brand and product experience while sharing secure, configurable identity.
JourstickTurn photos into travel-journal stickers.Connected to TongID
ResultypePlayful personality and preference quizzes.Connected to TongID
How · AgentAn AI agent engineering learning library.Connected to TongID
LoreWisdomA knowledge network for books, quotes, and ideas.Connected to TongID
ShotpackReusable web-motion inspiration and assets.Connected to TongIDA few practical questions about product fit, subscriptions, operations, and integration.
TongId fits web applications, SaaS products, and browser extensions that need accounts, paid products or subscription plans, feature entitlements, and user operations. Manage multiple applications in a workspace and configure their sign-in methods, domains, users, products, feedback, roles, and permissions separately.
Before your product launches or before its plans are ready, enable waitlist subscriptions and embed TongId's hosted iframe form on your site to collect email. Waitlist subscribers do not receive a TongId account or entitlements; the console lets you view their status and configure the confirmation email.
Issues collect reports and suggestions, then move through pending, in progress, review, done, and closed states. Administrators can enable a public board and choose the lanes and fields visitors can see, so users can follow product progress.
Web servers use API keys with the SDK, then exchange a hosted sign-in callback for a session. Browser extensions use a public-client PKCE flow: exchange the authorization code and code_verifier for a session without storing an application secret. The console's SDK guide covers the full configuration and callback flow.
TongId currently supports Alipay in sandbox and production, as well as manual payment confirmation in the console. One-time products can grant lifetime entitlements; subscription plans use fixed durations, and a new subscription replaces the prior subscription entitlement for the same application. WeChat Pay is not available yet.
Effective permissions include the default role, roles from active entitlements, and their inheritance chains. Ordinary permissions are merged and deduplicated; equivalent limit permissions use the largest value, and -1 means unlimited. A new subscription replaces the old subscription entitlement for the same application, while one-time products can remain active alongside it. Expired or revoked entitlements are excluded, and applications should also account for session-cache refresh windows.
Yes. Your backend can validate sessions, read permissions, and create checkout links through the REST API. TongId also provides an external-user sync API and a WordPress user-migration script. Before migrating, verify application mapping, user status, and permission configuration.
Let TongId connect accounts, subscriptions, entitlements, operations, and user feedback.