Auth
App-user login, phone OTP, email verification, sessions, app connections, and MCP authorization.
CAPABILITIES
Clear app capabilities. Clearer trust boundaries.
Connect authentication, databases, files, realtime updates, and other backend services. Manage application access separately from account permissions.
Public App Client
Project tenant
Account Client
10 FEATURES
Ten application features.
SDK coverage varies by language. App and server clients use entry points suited to their permissions; administrative keys stay on the server.
Database
Project-isolated Postgres tables and rows, full-text search, transactions, and schema migrations.
Storage
File uploads, downloads, signed URLs, and metadata over local, OSS, or COS storage backends.
Realtime
SSE subscriptions for row changes, broadcast, and presence, with cross-replica delivery.
Functions
Manage function endpoints and invoke configured HTTP functions. The current CLI does not deploy function code.
Analytics
Event capture and queries. Current HTTP endpoints require an app or admin key, not a public key.
Cronjob
Schedule function calls and inspect run history. Schedule management requires trusted credentials.
Queues
Postgres-backed job queues with enqueue, claim, and acknowledgement operations.
Messaging
Send SMS and email and record delivery results. Available channels depend on provider configuration.
Secrets
Manage project secrets for injection during function execution. Management requires trusted credentials.
PLATFORM
Platform management.
Project configuration, billing, and usage are managed separately from the ten application features.
Custom Domains
Custom hostnames for project backend APIs. Claims and DNS verification are available; self-service TLS and routing cutover are not complete.
Projects and accounts
Manage accounts, project lifecycles, and project API keys. App-user identity and authorization remain part of Auth.
Usage and capacity
Manage usage, quotas, plans, top-ups, and runtime specifications as platform operations.