EndpointOS
Turn APIs into products.
- Platform
- Web
- Pricing
- Free, paid from $9/mo
EndpointOS
API Infrastructure
Overview
- Status
- Shipped continuously
- Category
- API infrastructure
- Platform
- Web
- Contract
- OpenAPI 3.1, TypeScript SDK
- Free tier
- 10,000 req/mo, live now
- Paid tiers
- Live, from $9/mo
Most API projects wire the same layer by hand: key management, documentation, request logging, usage limits, consumer dashboards, and a plan page. EndpointOS ships all of it, so the first integrator call lands in minutes. Once traffic flows, Insights flags error surges, slowdowns, and quiet consumers.
EndpointOS ships continuously. The free tier covers 10,000 requests per month with no card required, and paid tiers start at $9 per month, live and self-serve today.
It fits teams putting an MVP, internal tool, partner-facing endpoint, or admin API in front of integrators, anywhere a documented, metered API is the product. For a complex domain with heavy relational logic, a custom backend is still the better fit.
Walkthrough
How it works.
Define a resource
Add fields with types (string, number, boolean, enum, datetime, json), mark them required, set defaults, or restrict to enum values. EndpointOS builds the full CRUD API from the definition.
Issue API keys
Plaintext is shown once; only the SHA-256 hash is stored. Set per-key rate limits, attach a key to a named consumer, and rotate with a grace window.
Add consumers
Name the developers or apps calling your API. Each consumer gets its own key set, monthly quota, and usage dashboard.
Watch logs and usage
Every request is logged with status, latency, key, consumer, IP, and user agent. Filter by method, status, key, consumer, date, or path, and export to CSV.
Publish a contract
Freeze the schema into a versioned OpenAPI 3.1 spec. A public, auto-generated changelog gives integrators a stable reference and shows what shipped.
Features
What it does well.
Generate
03Schema to CRUD API
Define a resource (fields, types, required, defaults, enums) and get a hosted, authenticated CRUD API with no code.
Generated docs and OpenAPI 3.1
Every project ships generated docs and an OpenAPI 3.1 spec, ready to hand an integrator on day one.
TypeScript SDK
Download a TypeScript SDK generated from the contract so clients stay in sync without manual updates.
Operate
04Insights: anomaly detection
EndpointOS watches each project's traffic and flags error surges, spikes, drops, rising p95 latency, and consumers that went quiet.
Request logs
Log status, latency, key, consumer, IP, and user agent per request, then filter by method, status, date, or path and export to CSV.
Usage limits and tracking
Set monthly usage limits and track per-project usage on the project dashboard and per consumer.
Contract versioning and changelog
Publish a contract version and EndpointOS writes the changelog, sorting breaking from non-breaking changes for integrators.
Sell
03Named consumers and quotas
Name the customers calling your API, and give each consumer a dashboard, monthly cap, key set, and scoped analytics.
API key management
Rotate a key with a grace window so integrators swap on their own schedule, and read per-key analytics.
Developer access flow
Visitors request access from your public docs, which carry plans, usage, your own branding, and custom domains (beta).
Team & security
05Workspaces and invitations
Run workspaces with email invitations and roles (owner, member). Invite tokens are single-use and expire in 7 days.
Abuse and rate protection
Per-key rate limits, per-IP throttles, bot heuristics, account lockout, and new-location signals block brute-force, scraping, and credential-stuffing.
MFA and audit log
Enable TOTP multi-factor auth on accounts and record every sensitive action in a full audit-event log.
Signed webhooks
Send HMAC-SHA256-signed JSON on record changes through a durable retry pipeline, with SSRF guards on every dispatch.
Security hardening
Hardening covers an encrypted secret vault (AES-256-GCM), per-project IP allowlists, CSP nonces, CSRF defense, and request body guards (size, depth, prototype-pollution).
See it in action
A closer look.
Docs shipped automatically
Every project gets a public API reference with request shapes, validation rules, and response examples. The Weather Intelligence demo shows what the generated docs look like on a live project.
Pricing
Free to start. Paid tiers as you scale.
The free tier covers 10,000 API requests per month with generated docs, OpenAPI, request logs, and usage limits, no card required. Paid tiers are live, from $9 per month, self-serve.
| Plan | Price | Requests / mo | Projects | Seats |
|---|---|---|---|---|
| Free | $0 | 10,000 | 3 | 1 |
| Starter | $9/mo | 50,000 | 10 | 1 |
| ProPopular | $19/mo | 250,000 | 25 | 3 |
| Team | $79/mo | 1,000,000 | 100 | 10 |
| Business | $299/mo | 5,000,000 | Unlimited | 25 |
| Enterprise | Custom | Custom | Unlimited | Custom |
Annual billing saves about 17%. Pro and up include a 20% burst above the cap, then $10 per 100,000 extra requests.
Full pricing at endpointos.dev/pricingMore from the studio
ProjScan
ProjScan tells reviewers when to bootstrap, prove, or stop. Review Gate returns one decision; bootstrap is explicit. Local proof, no code upload.
View
AgentLoopKit
The local control plane for low-token, verifiable agent loops. It owns scope, gates, and completion decisions, with a token receipt on every step.
View
AgentFlight
agentflight guard watches local trust while your coding agent works; agentflight finish writes the Review Passport that proves the result.
View