API Shaper Access

Manage live API adapters from one consistent control panel.

The dashboard and write APIs are protected with a database-backed session. Accounts are stored persistently in Postgres, and the first registered account becomes an admin automatically.

Workflow

Pull live JSON, pick fields visually, rename the output, and publish a stable endpoint.

Runtime

Requests are fetched live from upstream and reshaped on demand through the serve route.

Storage

Postgres stores endpoint definitions, sessions, and migration state for the control plane.

MVP Auth Model

Persistent user accounts stored in Postgres
Opaque session token stored in an HTTP-only cookie
Endpoint data isolated per account via the user_id relationship

Account Access

Sign in to the control plane.

Sign in to manage adapters, run live previews, and publish output URLs from a single workspace.

Create Account

New accounts get their own saved adapters, previews, and control-plane data.

Access boundary

Public serve URLs stay callable, but dashboard editing and preview tools stay behind session auth.