Access control, without auth code

Know who gets in.

Require a real human, 18+, Google, passkey — or any combination. Yuin handles the proof. Your app gets a yes or no.

01 — Setup

Live in an afternoon.

Pick how people sign in. Email code, Google, passkey, World — any of them, in any combination, from a form.

Email OTAGooglePasskeyWorld
02 — Access control

Gate what matters.

Name an action — bid, withdraw, enter — and say what it takes. Change it while the app is live; the next call obeys.

Per actionEdit liveNo redeploy
03 — Ownership

Nobody holds the door.

Credentials are salted hashes on chain. No operator maps an address back to a person, and no operator can lock anyone out.

Staked nodesNo central DBSlashable
04 — Recovery

More than one way back.

A passkey, a second provider, a World proof, or your own wallet. Lose a phone, not an account.

PasskeyWorldAny EOA
05 — Money

Pay in what you hold.

Prices in one token, wallets in another. The swap rides inside the payment, so nobody sees a swap screen.

UniswapExact outputOne signature
06 — Keys

Bounded by design.

Session keys expire and cannot spend past their cap. Recovery waits in the open, where you can stop it.

Spend capsTimelockVeto
One rule. That's it.

Say who can enter.

Pick the proofs your app needs. Yuin turns identity into a simple access decision — without you building authentication infrastructure.

$ npm i @yuin/access

// your route
yuin.require({
  human: true,
  age: 18,
  passkey: true
})
⌘
Your app
→
印
Yuin
→
✓
Yes / no
Users prove once.
Apps learn only what they need.
Why Yuin

Less auth.
More trust.

Traditional auth tells you an account logged in. Yuin lets you ask what actually matters — while avoiding a central identity database.

DIY auth
Embedded wallet
Yuin
Real-human proof
Build it
—
✓
Age proof
Build it
—
✓
Passkeys + social
Integrate
✓
✓
Central user DB
Usually
Usually
No
Seed phrases
—
Hidden
Never