Everything a product needs, managed.
XCORE is the backend, the auth, the billing and the app shell — for every product you create. Here is what comes in the box.
A private backend with a live API
Model your data once. The database, REST API, forms and permissions follow instantly.
Isolated database per product
No shared tables. Every product has its own database, app hostname and admin hostname.
Schema API
Create types and fields at runtime — with validation, link fields, selects, attachments and owner-scoped permissions in one call.
Instant REST
Full CRUD at /api/resource/<Type> with filters, sorting, pagination, typed error envelopes and rate-limit headers.
Schema evolution
Add, update and remove fields on live data. Delete is explicit and confirmed, never accidental.
Idempotency & dry-run
Idempotency-Key replay protection on writes and an X-Dry-Run flag to validate without committing.
Search
Global search across your types and pages, wired into the app shell with keyboard shortcuts.
Authentication and roles that fit real products
Bring users in, keep their data separate, and control exactly who can do what.
End-user self-signup
Turn it on per product, restrict to allowed email domains, choose the roles new users get.
Per-user isolation
Owner-scoped permissions mean each user sees only their own rows unless you grant wider access.
Role presets
Member, manager, editor, viewer, auditor — ready-made roles you can assign or let agents use within a ceiling you set.
Escalation guard
Nobody — human or agent — can grant themselves more than the owner allowed. Every attempt is refused and logged.
View as user
Troubleshoot what a specific user sees, with an audited, time-boxed impersonation session.
Team seats
Invite teammates to the console as Admin, Billing or Read-only collaborators on your account.
A polished app your users will actually enjoy
Every product ships a single-page app on its own hostname. Add pages with a few lines — or install them.
CRUD in one call
ctx.ui.crud({ doctype, fields, search }) renders list, detail, create and edit screens with validation.
Dashboards & widgets
Register dashboard cards, routes and navigation from any module; the shell assembles the sidebar.
File uploads
Attach images and documents to records — owner-scoped, validated, served privately.
Draft → publish
Edit files in a draft layer, preview, then publish atomically. Snapshots let you roll back instantly.
Glass design system
Frosted-glass, responsive, keyboard-friendly UI with light and dark modes, shipped and upgraded by us.
Your brand
Product name, logo and colours are yours. Nothing on the app hostname mentions the platform.
Charge your users — keep 100% of it
Two layers of billing, both on Stripe: your subscription to the platform, and your users' subscriptions to you.
Platform plans
Subscribe, upgrade or cancel from the console. Invoices and receipts are always available.
SaaS billing kit
Plans, checkout, customer portal, webhooks and invoices for your own users — through your own Stripe account.
0% platform cut
We never touch the money between you and your customers.
Usage metering
Storage, database size and API calls are sampled daily and visible per product.
Quotas, not surprises
Limits are enforced with clear typed errors at the moment you hit them — nothing fails silently.
Mock mode for dev
Run the whole billing flow locally without touching Stripe, then flip to live keys.
Install features instead of building them
Ready-made modules — installable in a click, versioned, and upgradable in place.
One-click install
Notes, projects, helpdesk, feedback boards and more. Install creates types, roles, pages and seed data.
Data-preserving upgrades
Ship a new version and upgrade live installs in place; data stays where it is.
Backup before uninstall
Uninstall shows record counts and offers a full backup download first. Orphaned data re-attaches on reinstall.
Manifest linting
Validate a manifest before publishing and get actionable errors, not a failed install.
Private & public listings
Publish to your own accounts only, or to the whole catalogue after review.
Custom app registry
Site-local modules you (or your agent) write sit next to marketplace apps in the same sidebar.
Designed for agents from day one
One scoped key and one docs URL is the entire kit. Claude, ChatGPT, Cursor and custom agents build the full product through the same APIs you use.
Build with AI wizard
One click creates an agent identity, mints a scoped key and emits a paste-ready prompt.
Live docs per product
Every product serves its own complete manual at /docs/llms.txt — schema, data, files, roles, publishing.
Scope presets, enforced
Keys carry a tier; every call is checked against it with a typed 403. No self-approval.
Token budgets
Cap what a key may write per period. Budgets are enforced before the request reaches your data.
Approvals
Privileged actions create an approval request an owner decides on — agents cannot approve their own.
Audit trail
Every write by every key is recorded with who, what, when and from where.
Run it like a platform, not a side project
The unglamorous parts — backups, restores, monitoring, secrets — are already done.
Backups & restore
Per-product backups with plan-based retention and self-service restore jobs you can run from the console or the CLI.
Platform monitor
A staff dashboard with every account, product, provision and its health at a glance.
Provisioning you can watch
Create a product and follow each step live until it is Active — no guessing.
Archive & unarchive
Park a product without losing anything; bring it back later.
Secret vault
Encrypted credentials with key rotation and one-time reveal.
Egress allow-list & circuit breakers
Outbound calls from products are allow-listed; misbehaving integrations are tripped automatically.
See it for yourself.
Create a free account and provision a product. Everything above is on by default.