BasaltThe complete toolkit for building SaaS on Node.js

Tenancy, auth, billing, permissions, queues and audit — integrated end to end, self-hosted, no vendor lock-in.

Multi-tenancy, first class

Subdomain, domain, header and route resolvers. Cache, storage, queue, logger and audit isolate per tenant automatically through the request context.

Batteries included

Authentication with refresh rotation, wildcard role-based permissions, subscription billing with feature limits — in your database, not a third-party service.

TypeScript end to end

Zod schemas flow from route to handler to a fully-inferred SDK client. No decorators, no reflect-metadata — works on any bundler and runtime.

Fastify-first, not Fastify-locked

A framework-agnostic core with an official Fastify adapter. The domain never imports the HTTP layer, so it outlives any single server.