DEV.co
Open-Source Databases · freakchick

DBAPI

DBAPI is a low-code platform that generates REST APIs directly from SQL queries without coding. Users write SQL, configure parameters in a web UI, and the system automatically publishes production-grade HTTP endpoints with security, monitoring, and orchestration features built in.

Source: GitHub — github.com/freakchick/DBAPI
798
GitHub stars
239
Forks
Vue
Primary language
AGPL-3.0
License (OSI-approved)

Key facts

Objective fields from the source. Values we can't verify are shown as “Unknown” rather than guessed.

FieldValue
Repositoryfreakchick/DBAPI
Ownerfreakchick
Primary languageVue
LicenseAGPL-3.0 — OSI-approved
Stars798
Forks239
Open issues16
Latest releaseUnknown
Last updated2026-06-13
Sourcehttps://github.com/freakchick/DBAPI

What DBAPI is

Java-based data service platform supporting multiple JDBC-compatible databases, Elasticsearch, and HTTP proxies. Provides MyBatis-style dynamic SQL, DAG-based API orchestration, plugin architecture for caching and data transformation, and enterprise security (auth, IP firewall, rate limiting, encryption).

Quickstart

Get the DBAPI source

Clone the repository and explore it locally.

terminalbash
git clone https://github.com/freakchick/DBAPI.gitcd DBAPI# follow the project's README for install & configuration

Need it deployed, integrated, or customized instead? DEV.co ships production installs.

Best use cases

BI Reports & Data Dashboards

Rapidly expose data warehouse queries as APIs for BI tools and frontend dashboards without building custom backend endpoints.

Rapid Frontend Prototyping

Enable frontend teams to request APIs on-demand from existing database schemas, eliminating backend bottleneck in development cycles.

AI Application Data Integration

Use MCP tool mapping to expose DBAPI endpoints as AI/LLM tools; integrate with Claude Desktop, Cursor, LangChain for AI-driven data querying.

Implementation considerations

  • Default SQLite backend is suitable only for evaluation; production deployments must configure external RDBMS (MySQL, PostgreSQL, Oracle, etc.) with proper backup and replication.
  • JDK 8/11/17 runtime is mandatory; plan Java environment provisioning and maintenance before deployment.
  • Embedded security features (clientId+secret auth, IP firewall, rate limiting) must be configured explicitly; default `admin/admin` credentials must be changed immediately.
  • API versioning and rollback are Enterprise-only features; Community users cannot safely promote SQL changes without downtime.
  • Multi-environment management (dev/staging/prod) requires manual API export/import; no built-in release pipeline.

When to avoid it — and what to weigh

  • Complex Business Logic Required — If your use case demands extensive application logic beyond SQL and parameter binding, custom backend code is more maintainable.
  • Strict AGPL Compliance Not Feasible — Community edition is AGPL-3.0; commercial use requires Enterprise license or careful GPL compliance review—avoid if your deployment cannot meet copyleft obligations.
  • Real-Time Streaming or Event-Driven Needs — DBAPI is query-response oriented; unsuitable for event streaming, Kafka-first architectures, or stateful pub/sub patterns.
  • No Enterprise Support Available — Community version has no official SLA or commercial support; use only for internal/non-critical systems unless Enterprise tier is contracted.

License & commercial use

Community edition: AGPL-3.0 (GNU Affero General Public License v3.0). This is a copyleft license requiring that any modifications or networked deployments must make source code available under the same license. Enterprise edition (v4.6.0 referenced) exists but terms are not detailed in provided data.

AGPL-3.0 imposes strong obligations on commercial deployments. Internal/private use may be permitted, but any external service offering or SaaS use requires source code disclosure and AGPL compliance. Requires legal review before commercial deployment. Enterprise license availability is stated but licensing terms, pricing, and commercial permissions are not documented here; contact vendor for commercial use authorization.

DEV.co evaluation signals

Editorial assessment — not user reviews. Directional, with an explicit confidence level.

SignalAssessment
MaintenanceActive
DocumentationAdequate
License clarityClear
Deployment complexityModerate
DEV.co fitGood
Assessment confidenceHigh
Security considerations

DBAPI publishes data APIs directly from database queries; security model depends on database access controls and API-layer enforcement. Built-in mitigations include clientId+secret auth, IP firewall, rate limiting, RSA encryption for responses, and request signature verification. Risks: SQL injection (MyBatis syntax must be used correctly), over-exposed data (SQL authors must consider data classification), and default credentials. No security audit details, penetration testing results, or vulnerability disclosure process documented. Requires security review before handling sensitive data.

Alternatives to consider

PostgREST / Supabase

Auto-generates REST APIs from PostgreSQL schemas with minimal configuration; PostgreSQL-only but more mature ecosystem and MIT-licensed. Better for PostgreSQL-native workloads.

Apache NiFi / Talend Cloud

Enterprise data integration platforms with visual ETL and API exposure; broader connector support and commercial SLA. Overkill for simple SQL→API use cases but stronger enterprise governance.

Hasura GraphQL Engine

Generates GraphQL (and REST via proxy) APIs from database schemas; strong developer tooling, subscription support, and commercial backing. Steeper learning curve but more modern API paradigm.

Software development agency

Build on DBAPI with DEV.co software developers

DBAPI accelerates data API development for BI, dashboards, and AI workflows. Evaluate Community edition on your data warehouse, then contact us for Enterprise licensing and commercial compliance review.

Talk to DEV.co

Related open-source tools

Surfaced by semantic similarity across the DEV.co open-source index.

Related on DEV.co

Explore the category and the services that help you build with it.

DBAPI FAQ

Can I use DBAPI for commercial/SaaS applications?
Community edition (AGPL-3.0) requires source code disclosure for network services. Commercial SaaS use typically requires Enterprise license. Legal review mandatory before commercial deployment.
What databases does DBAPI support?
Any JDBC-compatible database (MySQL, PostgreSQL, Oracle, SQL Server, Hive, etc.), plus Elasticsearch (DSL) and HTTP proxy. Verify dialect-specific SQL compatibility for less common vendors.
Is there official support or SLA for Community edition?
No SLA or commercial support documented for Community edition. Enterprise tier (v4.6.0) likely includes support but terms not provided. Community support via GitHub issues (16 open).
How does DBAPI handle API versioning and rollback?
Version rollback and multi-version management are Enterprise-only features. Community users must export/import APIs manually; production API changes risk downtime.

Software development & web development with DEV.co

DEV.co helps companies turn open-source tools like DBAPI into production software. Our software development services cover the full lifecycle — architecture, web development, integration, and maintenance — delivered by software developers and web developers who ship. Engage our software development agency to implement or customize it for your open-source databases stack.

Ready to eliminate repetitive API coding?

DBAPI accelerates data API development for BI, dashboards, and AI workflows. Evaluate Community edition on your data warehouse, then contact us for Enterprise licensing and commercial compliance review.