REST, GraphQL and realtime, generated from your collections. On any path you choose.
Try it
$ curl -X POST https://example.com/api/auth/login \ -d '{"email":"you@example.com","password":"…"}'
response200 OK
Responses are shortened. Every collection gets the same five routes, and access rules apply to each one.
Your path
On a path of your site or on a host of its own. One setting moves every route, the socket and GraphQL with it.
- API onlyREST and GraphQL on one port. Nothing else runs.
- API + AdminThe backend plus the admin for your editors. Your own front end.
- Full stackAdds the storefront with a theme, served on the same host.
Backend
Collections with access rules and version history, and an admin your team can use from day one.
- Database
- PostgreSQLRow-level security keeps every site apart.
- Auth
- Sign-up and sign-inRoles, two-factor, SSO and API keys.
- Instant APIs
- REST and GraphQLGenerated for every collection.
- Storage
- Local, S3 or CloudinaryChosen with one setting.
- Realtime
- WebSocketsChanges pushed to signed-in clients.
- Server code
- PluginsEach in its own process, with jobs and queues.
- Webhooks
- SignedHMAC-SHA256 on every delivery.
- Hosting
- Your serverNo usage pricing, no project limits.