Kethosbase documentation

Every Kethosbase project is a PostgreSQL database exposed through four APIs on the project's own subdomain.

https://<project-ref>.kethosbase.com
  /rest/v1/      → REST access to your tables
  /auth/v1/      → user accounts for your app
  /storage/v1/   → file upload and download
  /realtime/v1/  → WebSocket broadcast channels

The <project-ref> is the 16-character identifier assigned when the project is created. You find it (together with the project's API keys) on the project's Overview page in the dashboard.

Keys and roles

Every request carries an API key in the Authorization header as a bearer token. Keys are opaque and individually revocable; a project starts with two:

KeyPrefixRoleUse it for
Publishable kbp_… anon Browsers and mobile apps. Safe to ship in client code; Row-Level Security decides what it can see.
Secret kbs_… service_role Your own backend only. Bypasses Row-Level Security and can run DDL: treat it as a secret, never put it in a client.

Create and revoke keys on the project's Overview page. To rotate, create a new key, deploy it, then revoke the old one; there is no downtime. When an end user signs in through the auth API, their access token carries the authenticated role and your RLS policies apply to it.

Where to go next

Quickstart

Project to working API call in five minutes.

JavaScript SDK

One typed client for database, auth, storage, and realtime.

CLI

Link a project, run migrations, generate types.

REST data API

Filters, ordering, pagination, inserts, updates.

Authentication

Sign up and sign in your app's users with JWTs.

Realtime

Broadcast messages over WebSocket channels.

GraphQL

A Relay-style GraphQL API over the same schema and RLS.

Edge Functions

Run sandboxed WebAssembly next to your database.

Queues & Cron

Durable queues, scheduled jobs, and signed webhooks.

Durable Workflows

Multi-step orchestration that survives restarts, retries, and waits.

Key-Value store

A managed cache with TTLs and atomic counters, over HTTP.