Ship your AI SaaS in a weekend.
A production-ready Next.js boilerplate built for indie founders who want to ship fast. Auth, payments, emails, database — plus a carefully curated set of AI skills that work perfectly together.
Built for people shipping client projects, not just tinkering.
Works with your favorite AI coding tool
Cursor
Claude Code
Codex
Windsurf
CopilotYour AI coding tool just got as efficient and reliable as a Senior Software Engineer you can truly collaborate with
OpenKit ships portable guidance first: nested `AGENTS.md` files for durable repo context and `SKILL.md` workflows for repeatable tasks.
- AGENTS.md
- README.md
- app
- (marketing)/page.tsx
- app/dashboard/page.tsx
- api/stripe/webhook/route.ts
- login/page.tsx
- components
- app-shell.tsx
- landing/hero.tsx
- ui/button.tsx
- lib
- auth.ts
- billing/plans.ts
- email.ts
- queries/projects.ts
- db
- schema.ts
- migrations/0000_initial.sql
- emails
- WelcomeEmail.tsx
- MagicLinkSignInEmail.tsx
- skills
- add-model/SKILL.md
- security-audit/SKILL.md
- wire-magic-link-auth/SKILL.md
- generate-legal/SKILL.md
- add-protected-page/SKILL.md
- seo-audit-page/SKILL.md
- wire-email-to-event/SKILL.md
- deslop/SKILL.md
All of these guides and skills come included with OpenKit.
Portable by default, Cursor compatible when you need it.
Without portable guidance
- Protected routes ship without the right guard
- Webhook handlers miss signature verification
- Public POST routes skip rate limiting
- SEO and legal pages drift from the real site config
- Each AI tool needs different prompting to stay on track
With OpenKit
- Nearest AGENTS.md scopes the repo conventions automatically
- Portable skills handle repeatable tasks the same way everywhere
- Security and SEO checks happen as part of the workflow
- The repo starts clean and ready to clone
- The boilerplate architecture stays consistent across tools
Your AI just received a level-up
Premium-grade skills turn your AI into a true product builder companion.
Move faster and be more effective throughout the entire product building process by using portable skills directly in your AI coding tool. The same workflows work in Claude Code, Codex, Cursor, Amp, and Jules while still matching the boilerplate's architecture.
DeslopClean up AI code
AI responds
I've cleaned up the component. Removed redundant state, simplified the conditionals, and extracted the avatar logic into a separate component.
- const [isLoading, setIsLoading] = useState()- const [error, setError] = useState(null)- useEffect(() => { ... 40 lines })+ const { user, isLoading } = useUser()+ if (isLoading) return <Skeleton />
Add ModelExtend the database safely
AI responds
Added the schema, exported Project types, created lib/queries/projects.ts, and queued the migration steps.
+ export const projects = pgTable("projects", {+ id: uuid("id").defaultRandom().primaryKey(),+ ownerId: text("owner_id").notNull(),+ slug: text("slug").notNull(),+ })
Security AuditFind vulnerabilities
AI responds
Found a critical issue: webhook signature verification is missing. Anyone could fake payment events.
const body = await req.text()+ const signature = req.headers.get("stripe-signature")+ const event = verifyWebhookSignature(body, signature)+ logger.error("Stripe webhook signature verification failed")
Generate LegalCreate compliance pages
AI responds
Drafted the legal pages, updated metadata, and listed the site config fields that still need real company data.
Magic Link AuthHarden sign-in flows
AI responds
The token flow is solid, but the request endpoint needs stricter IP throttling and a clearer check around single-use verification.
const emailRateLimit = await rateLimit(...)+ const ipRateLimit = await rateLimit(...)+ logger.warn("Magic link rate limit exceeded", { kind: "ip" })+ return Response.json({ ok: true })
You
AI
I've cleaned up the component. Removed redundant state, simplified the conditionals, and extracted the avatar logic into a separate component.
- const [isLoading, setIsLoading] = useState()- const [error, setError] = useState(null)- useEffect(() => { ... 40 lines })+ const { user, isLoading } = useUser()+ if (isLoading) return <Skeleton />
Everything Included
Production-ready from clone
Every piece you need to ship a SaaS. No glue work, no integration headaches.
Infrastructure
Authentication
- Google & GitHub OAuth pre-configured
- Magic link passwordless login
- Session management with secure cookies
- Protected route middleware
Payments
- Stripe & Polar checkout flows
- Complete billing setup
- Billing components included
- Webhooks & auto-sync to database
Database
- Drizzle ORM with type-safe queries
- Supabase & Neon ready
- Migration setup included
- User & subscription schema
Emails
- Customizeable mail templates
- Magic link & welcome emails
- Resend integration
- Easy to add new templates
Developer Experience
AI Skills
- 20+ rule files for auth, billing, db, email, SEO & more
- 10+ ready-to-use commands
- Consistent AI output & less hallucinations
- Auto-applied context for every prompt
- No more re-explaining your stack
Setup Checker
- Validates env vars on startup
- Blocks on missing required config
- Quick setup dashboard
- Clear error messages
API
- tRPC integration
- Type-safe client & server
- Reusable & extensible procedures
- End-to-end type safety
- Built-in error handling
Design / UI
Dashboard
- Responsive sidebar layout
- Protected route structure
- User settings page
- shadcn/ui components
Landing Page
- Theme switcher included
- 5 sections ready to customize
- Color, font & spacing presets
- Mobile-optimized layout
SEO
- OpenGraph image generation
- Sitemap auto-generation
- JSON-LD structured data
- Meta tags configured
AI
AI Chat
- Choose your provider
- Streaming responses
- System prompt support
- Beautiful chat UI
Choose your package
Starter
The complete boilerplate
one-time payment
- Next.js 15, React 19, TypeScript
- 14 carefully curated skills — all work together
- Google & GitHub OAuth
- Magic link login
- Stripe & Polar payments
- Drizzle ORM (Supabase/Neon)
- tRPC API layer
- React Email (Resend)
- AI chat (Vercel AI SDK)
- Dashboard + shadcn/ui
- Landing page + SEO
- Setup checker + security
For builders who want the code and will self-serve
All-In
Boilerplate + updates + support
one-time payment
- Next.js 15, React 19, TypeScript
- 14 carefully curated skills — all work together
- Google & GitHub OAuth
- Magic link login
- Stripe & Polar payments
- Drizzle ORM (Supabase/Neon)
- tRPC API layer
- React Email (Resend)
- AI chat (Vercel AI SDK)
- Dashboard + shadcn/ui
- Landing page + SEO
- Setup checker + security
- Lifetime updates
- Discord community
- Priority support + setup call
- Setup guarantee (full refund if stuck)
For builders who want ongoing updates and help when stuck
Frequently Asked Questions
What's the difference between Starter and All-In?
Starter gets you the complete boilerplate — everything to ship a SaaS. All-In adds lifetime updates, Discord community, and priority support with a setup call.
What if I'm new to AI coding tools?
The boilerplate includes guides and the skills work automatically. You'll learn by building.
Can I use this for multiple projects?
Yes. The license allows unlimited personal and commercial projects, including client work.
What is the tech stack?
Next.js 15, TypeScript, Tailwind CSS, shadcn/ui, Auth.js, Stripe/Polar, Resend, and Supabase/Drizzle.
What does 'lifetime updates' mean?
All-In buyers get every future update forever. New integrations, improved patterns, major versions — all included.
Is there a refund policy?
Since the code is yours immediately, we can't offer refunds. But builders consistently ship and earn back their investment within weeks.
Won't all these skills increase my token usage?
The skills are intentionally short and focused. The extra tokens are minimal, and the quality improvement in AI output more than makes up for it. You'll spend less time fixing bad code than you would on a few extra tokens.
Meet the Creator
Waldemar Panin
Product Engineer & Founder
Hey, I'm Walde. I've shipped products for years. When AI coding tools exploded, I went deep — figured out what makes AI actually useful vs. what makes it spit out garbage.
Started with the free Starter Kit to share what I learned. This boilerplate is the full production setup I use for my own projects.