Single-Tenant Isolation
Every database runs as a dedicated PocketBase binary with its own isolated SQLite database file. Zero cross-tenant data mixing.
Single-Tenant Isolation
Every database runs as a dedicated PocketBase binary with its own isolated SQLite database file. Zero cross-tenant data mixing.
18-Tool Remote MCP Server
Connect Claude Code, Cursor, and Gemini to live database tools over Server-Sent Events (SSE) with AST sandboxing.
Enterprise Webhook Log Drains
Stream structured JSON logs in real-time to Datadog, Axiom, Better Stack, or custom HTTP endpoints with retry queues.
Encrypted Environment Vault & 2FA
Per-instance AES-256 encrypted .env secrets for server hooks, plus mandatory/optional TOTP 2FA & WebAuthn passkeys.
Sub-Second Branching
Fork production databases into staging preview environments in under 200 milliseconds using filesystem-level copy.
Security Audit & Cedar RBAC
Amazon Cedar WASM policy engine enforcing least-privilege access across 25 granular permissions with automated posture scans.
Database Blueprints & Snapshots
Capture running instances into reusable schema-only blueprints (0 rows) or full snapshots with pre-seeded demo rows.
Zero Vendor Lock-In
Download your entire instance directory as a 1-click self-host ZIP archive, import existing pb_data, or push to Cloudflare R2 / S3.