🚀. Socket Launch Week Day 3:Socket Firewall Now Blocks Malicious VS Code and Open VSX Extensions.Learn more
Sign In

clerk-emulator

Package Overview
Dependencies
Maintainers
1
Versions
2
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

clerk-emulator

Local, offline emulator for Clerk's Backend and Frontend (FAPI) APIs. Develop and test Clerk authentication without the cloud — real JWT signing, M2M tokens, organizations, and webhooks.

latest
Source
npmnpm
Version
1.0.1
Version published
Weekly downloads
119
Maintainers
1
Weekly downloads
 
Created
Source

clerk-emulator

CI npm License: Apache-2.0 Socket Badge

A local, offline emulator for Clerk's Backend API (BAPI) and Frontend API (FAPI). Develop and test Clerk auth with no network, no cloud instance, and no rate limits — it signs real JWTs, so @clerk/backend and clerk-js work against it unmodified. Built on Hono; state is in-memory and resets every run.

Install

npm install --save-dev clerk-emulator

Quick start

Run the server:

npx clerk-emulator
# Backend API:  http://localhost:4000
# Secret key:   sk_test_emulate

Configure via env: PORT, HOST, CLERK_SECRET_KEY, CLERK_MACHINE_KEY. Add --persist <file> (or CLERK_PERSIST) to keep state across restarts.

Point the backend SDK at it:

import { createClerkClient } from "@clerk/backend";

const clerk = createClerkClient({ secretKey: "sk_test_emulate", apiUrl: "http://localhost:4000" });
await clerk.users.createUser({ emailAddress: ["dev@example.com"], password: "supersecret123" });

Or run it in-process for tests (no separate server):

import { createServer, clerkPlugin } from "clerk-emulator";

const { app } = createServer(clerkPlugin, {
  tokens: { sk_test_emulate: { login: "admin", id: 1, scopes: [] } },
});
const res = await app.request("/v1/users", { headers: { Authorization: "Bearer sk_test_emulate" } });

app is a Hono app — call app.request(...) in-memory, or serve({ fetch: app.fetch, port }) (@hono/node-server) to bind a port.

Point the frontend (clerk-js) at it: set a relative proxyUrl so clerk-js sends Frontend API calls to a path your dev server forwards to the emulator (clerk-js forces https on absolute proxy URLs, so it must be relative). Pin clerkJSVersion to skip the floating @<major> CDN redirect.

// React entry
<ClerkProvider publishableKey="pk_test_..." proxyUrl="/__clerk" clerkJSVersion="6.17.0">
// vite.config.ts — forward the proxy path to the emulator
server: {
  proxy: {
    "/__clerk": { target: "http://localhost:4000", changeOrigin: true, rewrite: (p) => p.replace(/^\/__clerk/, "") },
  },
}

Vanilla clerk-js is the same idea: new Clerk(pk, { proxyUrl: "/__clerk" }). See e2e/ for complete React, @clerk/clerk-react, and vanilla setups.

What's supported

CapabilityDetails
Users & email addressesfull CRUD, ban / lock, metadata, verify password
OrganizationsCRUD, memberships, invitations, domains
Sessions & tokenssession CRUD, JWT minting, v1/v2 negotiation (clerk-api-version / __clerk_api_version)
M2M tokenscreate, verify, revoke
OAuth 2.0 / OIDCauthorize, token, userinfo, JWKS
Frontend API (FAPI)sign-in, MFA (TOTP), sign-up
WebhooksClerk-shaped resource events
Testing tokens@clerk/testing compatible — POST /v1/testing_tokens, __clerk_testing_token
Out of scopesocial sign-in, passkeys, SAML / enterprise SSO, multi-session, billing, profile management

Compatibility

Verified in CI against:

SurfaceSDKVersionsClerk core
Frontend (React)@clerk/reactlatest 6.xCore 3 (Active)
Frontend (React)@clerk/clerk-reactlatest 5.xCore 2 (LTS)
Frontend (vanilla)@clerk/clerk-jslatest 5.x, 6.xCore 2 (LTS), Core 3
Backend@clerk/backendlatest 2.x, 3.xCore 3
RuntimeNode.js20, 22, 24

Not yet tested: @clerk/backend 0.x (Core 2 LTS, pre-Core-3 API) and @clerk/nextjs.

Tests

npm test             # unit + integration (Node, against a real server)
cd e2e && npm test   # browser e2e (Playwright, real clerk-js)
LayerCovers
Browser e2e — Playwright + clerk-jssign-in (password / email-code / MFA-TOTP), sign-up, org listing
SDK e2e — @clerk/backend over HTTPadmin lifecycle: users, organizations, memberships, invitations, domains, M2M
HTTP integration — raw requestsOAuth / OIDC, webhooks, session-token v1/v2 negotiation

Browser e2e and the backend SDK run across the version matrix in Compatibility. See docs/testing.md for Playwright/Cypress (@clerk/testing), backend-SDK, and in-process setups.

License & attribution

Apache-2.0. The framework under src/framework/ is adapted from vercel-labs/emulate (Apache-2.0) with its HTTP layer swapped for Hono — see NOTICE.

"Clerk" is a trademark of Clerk, Inc. This is an independent, unofficial tool — not affiliated with, endorsed by, or sponsored by Clerk, Inc.

Keywords

clerk

FAQs

Package last updated on 18 Jun 2026

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts