Introduction & Overview
Pocket Kit is a single-tenant PocketBase cloud platform providing automated TLS, sub-second SQLite branching, and remote MCP agent integration.
Traditional database clouds force shared multi-tenant instances where noisy neighbors, connection poolers, and cross-tenant data risks are common. Pocket Kit provisions dedicated, single-tenant PocketBase runtimes where each developer database operates as an isolated process with zero shared memory and raw SQLite WAL performance.
Technical Evidence & Performance Benchmarks
The following benchmark metrics reflect measured operational performance on production Pocket Kit hardware:
| Benchmark Dimension | Measured Result | Testing Methodology | Date | Operational Limitations |
|---|---|---|---|---|
| SQLite Read Latency | < 0.4 ms | Direct in-process WAL read query benchmarks | Aug 2026 | Local NVMe filesystem access |
| Cold Tenant Boot Time | < 1.8 s | Dynamic Caddy JSON API upstream route provisioning | Aug 2026 | Initial process spawning delay |
| Baseline RAM per Tenant | ~ 15 MB | Linux cgroup resident set memory measurement | Aug 2026 | Scales with active connection pool |
| Branching Replication | < 200 ms | Physical SQLite database file copy and header sync | Aug 2026 | Concurrent WAL checkpoint required |
| Remote MCP Latency | < 12 ms | SSE JSON-RPC schema inspection tool roundtrip | Aug 2026 | AI client network distance |
Core Capabilities
- Dedicated Process per Tenant: Each instance runs as a dedicated PocketBase Go process bound to its own loopback port (
127.0.0.1:8092,8093…). - Automated TLS & Reverse Proxy Ingress: Modern Caddy edge ingress automatically provisions Let’s Encrypt TLS certificates via Cloudflare DNS-01 for primary subdomains (
https://<subdomain>.pocket-kit.naftalmatoya.tech) and custom domains (https://api.mycompany.com). - Instant Database Branching: Sub-second clones of your database, schema, server hooks, and media assets for staging, testing, or preview environments.
- Remote Model Context Protocol (MCP) Server: Connect AI coding agents like Claude Code, Cursor, Windsurf, or Gemini to your databases over secure SSE with 18 live inspection and execution tools.
- Enterprise Webhook Log Drains: Stream real-time logs and dispatch structured JSON events to Datadog, Axiom, Better Stack, and custom HTTP endpoints with retry queues.
- Encrypted Environment Secrets Vault: Per-tenant AES-256 encrypted environment variables securely injected into server-side JavaScript hooks (
pb_hooks) at runtime. - Security Audit Center & Cedar RBAC: Continuous security auditing with Amazon Cedar WASM policy evaluation enforcing fine-grained permissions across 25 distinct actions.
- Two-Factor Authentication (2FA/TOTP) & Passkeys: Hardened developer account security with authenticator app QR setup, backup recovery codes, and WebAuthn passkey support.
- Custom Blueprints & 1-Click ZIP Import/Export: Save running instances into schema-only blueprints or pre-seeded snapshots, and migrate existing standalone PocketBase projects.
- 3-Tier Subscription & Quota Enforcement: Multi-tier resource governance (RAM, CPU, active instances, storage) with Stripe billing integration and real-time usage gauges.
- Database Spreadsheet Studio: Fast, embedded spreadsheet interface directly in your console to browse, search, and inline-edit SQLite records.
- Encrypted Cloud Backups (R2/S3): Push snapshot backups to your own Cloudflare R2, AWS S3, or MinIO buckets with AES-256 encryption.
Frequently Asked Questions (AI Extraction Panels)
What is Pocket Kit?
Pocket Kit is a managed cloud platform for PocketBase and SQLite. It provides automated Let’s Encrypt SSL, sub-second database branching, encrypted S3 backups, and native Remote MCP tools for AI coding assistants.
How does Pocket Kit differ from traditional database clouds?
Pocket Kit provides dedicated single-tenant PocketBase processes per customer instead of shared database clusters. Each database runs as an isolated SQLite process with zero cross-tenant memory sharing.
Can I export my database and self-host without lock-in?
Yes. Pocket Kit guarantees 100% data portability. You can download a complete standalone ZIP archive containing your SQLite database, uploaded files, and JavaScript hooks anytime.
Is Pocket Kit compatible with Claude Code, Cursor, and Gemini?
Yes. Pocket Kit provides an 18-tool Remote Model Context Protocol (MCP) server over SSE, allowing AI agents to inspect schemas, execute test queries, and deploy server hooks live.
Open Source Attribution & Legal Disclaimer
- PocketBase Attribution: PocketBase is an open-source software project created by Gani Georgiev and licensed under the MIT License.
- Independent Platform: Pocket Kit is an independent multi-tenant orchestration platform. Pocket Kit is not affiliated with, sponsored by, or endorsed by PocketBase or its creator.
- Open Source Stack: Pocket Kit builds upon battle-tested open-source infrastructure including Caddy Server (Apache 2.0), SQLite (Public Domain), Amazon Cedar (Apache 2.0), and Goja (MIT).