Quickback Documentation

Quickback is a backend compiler. Define your database schema and security rules in TypeScript — Quickback compiles them into a Hono API or PostgreSQL Row Level Security policies. Pair the output with the Quickback Stack for a complete Supabase alternative on Cloudflare.

Quick start

npm install -g @quickback-dev/cli
quickback create cloudflare my-app
cd my-app
quickback compile

How it works

Write ~50 lines of definitions. Get a production codebase.

defineTable() ─┐
                ├─► Compiler ─► Hono API   (Cloudflare D1 / Neon)
defineActions()─┘            └► RLS policies (Supabase)

Every API request passes through four security layers:

Request → Firewall → Access → Guards → Masking → Response
            │          │        │         │
            │          │        │         └── Hide sensitive fields
            │          │        └── Block field modifications
            │          └── Check roles & conditions
            └── Isolate data by owner/org

Secure by default. Nothing is accessible until you explicitly open it up. See Definitions for the full security model.

The two products

Quickback Compiler

The build tool. Define your schema and security rules in TypeScript and compile to one of two targets:

• Quickback for Hono API — A complete Hono application on Cloudflare D1 or Neon, with CRUD, batch endpoints, OpenAPI, and an MCP server.
• Quickback for Supabase — PostgreSQL Row Level Security policies for Supabase. Keep Supabase Auth, Storage, and Realtime; Quickback adds the security layer.

The same defineTable() definitions work for both targets.

Start here:

• Getting Started — Create your first project
• Definitions — Schema, Firewall, Access, Guards, Masking, Views, Actions
• Cloud Compiler — CLI, MCP server, authentication
• Claude Code Skill — AI-powered authoring assistance

Quickback Stack

The runtime services around your compiled code. Everything you need for a complete Supabase alternative on Cloudflare:

• Auth — Better Auth with email OTP, passkeys, organizations, admin
• Storage — KV (sessions, cache) and R2 (files)
• Realtime — Durable Objects + WebSocket
• Queues — Background jobs and webhook delivery
• Vector & AI — Embeddings, semantic search
• Webhooks — Inbound (signed) and outbound (retried)
• Quickback CMS — Schema-driven admin UI
• Account UI — Pre-built auth and profile pages

Everything runs on your own Cloudflare account — no Quickback infrastructure between you and your data.

Changelog

What's new in Quickback — release notes, new features, and improvements.