Build with ForgeBaaS

ForgeBaaS gives you a managed REST backend for any project: data tables, authentication, storage, and serverless functions — accessible from any client over HTTPS using a single API key. No servers to maintain. No SQL to write.

• Per-project isolation. Each project has its own keys and its own data.
• fb_anon_ keys for browsers, fb_service_ keys for trusted servers.
• Auto-generated REST endpoints for every table you define.
• SHA-256 hashed keys at rest. Plaintext shown once.

1. 1
   Create a project

   Sign in and click "+ New project" on your dashboard. You'll get an anon and service_role key.
2. 2
   Copy the anon key

   It's shown ONCE. Store it in a safe place — you'll need it on every request.
3. 3
   Define a table

   Open the project → Database → New table. Add column names + types.
4. 4
   Send a request

   Use the snippets below to read or write data.

const res = await fetch(
  'https://forgebaas.com/api/v1/PROJECT_ID/TABLE_NAME',
  { headers: { Authorization: 'Bearer fb_anon_xxxxxxxx...' } }
);
const { data } = await res.json();
console.log(data);

Every request must include an Authorization header with a valid project key:

Authorization: Bearer fb_anon_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

Keys are matched by SHA-256 hash on the server. The plaintext key never leaves your machine after creation, and never appears in logs.

You can rotate any key from the project's API & Keys tab. Rotation issues a new plaintext (shown once) and invalidates the previous one immediately.

Base URL:

https://forgebaas.com/api/v1/{projectId}

{
  "data": [{ "id": "...", "title": "Hello" }],
  "count": 1
}

{
  "data": { "id": "...", "title": "Hello", "created_at": "..." },
  "error": null
}

{ "success": true }

Tables are declared from the dashboard, not by raw SQL. For each table you choose:

• A table name (lowercase, snake_case).
• One or more columns with a name and type: text, number, boolean, date.

The REST API automatically validates incoming bodies against your column definitions and rejects unknown tables with 403.

Each API key is limited to 100 requests per minute. When you exceed it, the API returns:

HTTP/1.1 429 Too Many Requests
Retry-After: 30

{ "error": "rate_limited", "retry_after": 30 }

Need higher limits? Upgrade to Pro.

• Every row inserted via the API is tagged with your project_id.
• Every read filters by your project_id — no cross-tenant leakage.
• Keys are hashed with SHA-256 before storage. Plaintext is shown once, then dropped.
• Row-Level Security on the dashboard ensures only the owner can see project metadata.

Every request to the public API is recorded with method, table, status code, and timestamp. View live logs from Project → Logs. Use them to debug integrations or monitor traffic.