Quickback Documentation

Quickback is a backend compiler. Define your database schema and security rules in TypeScript — Quickback compiles them into a complete, production-ready API or Supabase RLS policies.

Quick Start

npm install -g @kardoe/quickback
quickback create cloudflare my-app
cd my-app
quickback compile

How It Works

Write ~50 lines of configuration. Get 500+ lines of production code.

defineTable() → Compiler → Production API
     │                         │
     ├── Schema                ├── CRUD routes + batch operations
     ├── Firewall              ├── Auth middleware
     ├── Access                ├── Data isolation queries
     ├── Guards                ├── Field validation
     └── Masking               ├── PII redaction
                               ├── TypeScript types
                               └── Database migrations

Every API request passes through four security layers:

Request → Firewall → Access → Guards → Masking → Response
            │          │        │         │
            │          │        │         └── Hide sensitive fields
            │          │        └── Block field modifications
            │          └── Check roles & conditions
            └── Isolate data by owner/org

Secure by default. Nothing is accessible until you explicitly open it up. See Definitions for the full security model.

Products

Quickback API

The multi-tenant-first API. Define your schema and security rules in TypeScript — the compiler generates a full Hono API with four built-in security layers.

• Getting Started — Create your first project
• Definitions — Schema, Firewall, Access, Guards, Masking, Views, Actions
• Using the API — CRUD endpoints and filtering
• Cloud Compiler — CLI, MCP Server, authentication, endpoints

Compile targets: Cloudflare D1 (recommended) · Neon

Quickback for Supabase RLS

Already on Supabase? Quickback compiles your TypeScript definitions into Row Level Security policies. Keep Supabase Auth, Storage, and Realtime — Quickback just adds the security layer.

• Getting Started — Same definitions, target supabase
• Definitions — Firewall and Access compile to FOR ALL USING and FOR SELECT/INSERT/UPDATE/DELETE USING policies

Compile target: Supabase (RLS policies only)

Quickback Stack

The complete Supabase alternative on Cloudflare. Includes Quickback API plus realtime, storage, vector search, queues, and email — all running on your own Cloudflare account.

• Auth — Better Auth plugins, security, device auth, API keys
• Database — D1, Neon
• Storage — KV, R2
• Realtime — Durable Objects + WebSocket
• Queues — Background jobs and webhooks
• Vector & AI — Embeddings, semantic search

Account UI

Pre-built authentication and account management UI. Deploy to Cloudflare Workers.

• Features — Sessions, organizations, passkeys, admin panel
• Customization — Branding, theming, feature flags

Plugins & Tools

Open-source Better Auth plugins and developer tools.

• Better Auth Plugins — AWS SES, combo auth, upgrade anonymous
• Claude Code Skill — AI-powered Quickback assistance
• MCP Server — Connect any MCP-compatible AI tool to Quickback

Changelog

What's new in Quickback — release notes, new features, and improvements.