No backend coding needed. Just write SQL to auto-generate secure, production-ready HTTP APIs. Built for enterprise data service centers.
Unified access for mainstream & domestic DBs
Supports all JDBC-compatible relational databases including MySQL, SQL Server, PostgreSQL, Oracle, Hive, and domestic databases. Drivers are extensible for lower migration costs.
Write SQL, ship APIs
MyBatis-style dynamic SQL (#{}/${}), built-in editor/runner/debugger. Supports CRUD, stored procedures, and multi-SQL combined responses for dashboards.
Faster from requirement to delivery
APIs and data sources support dynamic creation, modification, and deactivation. Changes take effect instantly without restart.
Enterprise-grade governance foundation
clientId/secret + Token authentication, IP firewall, rate limiting. Full call tracing and statistics, with logs to ClickHouse/MySQL or Kafka.
More than SQL-to-API. Chain multiple APIs on a DAG canvas, support conditional branching, pass outputs between nodes, and orchestrate complex workflows.
Adapt to multiple data sources with unified API output capability
Core engine. Supports MyBatis-style dynamic SQL, multi-statement transaction control, and full CRUD coverage.
Execute ES DSL queries directly, easily exposing massive log and full-text search data as APIs.
Proxy third-party HTTP endpoints, integrating legacy systems under a unified data gateway.
Deep integration with LLMs to boost API development efficiency and data service capabilities.
Describe needs in natural language and AI generates executable SQL. Supports MyBatis-style dynamic SQL (<where>, <if>, <foreach>) and #{} safe parameter placeholders. Leverages real JDBC metadata for schema understanding, «@» for quick table selection, and 17+ mainstream LLMs.
Register published APIs as standard MCP tools with one click — AI agents directly call your data interfaces. Supports multi-endpoint (v4.7.0) to group APIs by business domain, reducing token waste and tool interference. Compatible with Claude Desktop, Cursor, LangChain, Spring AI, and more.
Built-in multi-layered protection from authentication to encryption. Supports intranet-isolated deployment with fully localized data storage — zero cloud upload risk.
Dynamic Token management based on clientId/secret with expiration, digital signature verification, and RSA encryption against parameter tampering and MITM attacks.
RSA encryption for response data, eliminating data leakage risks during transmission.
API-level accurate QPS limiting to protect databases and prevent system cascading failures.
Built-in IP firewall for fine-grained access policy configuration.
Five categories of plugins to meet enterprise needs for data masking, performance optimization, real-time alerts, and more.
Avoid frequent DB queries by caching results in Redis/ES to reduce database pressure.
Post-process executor results for field masking (phone, bank card) or format restructuring.
Trigger instant notifications via email, SMS, Feishu, DingTalk when APIs fail — quickly detect system anomalies.
Custom request parameter handling such as decryption, signature verification, and auto-pagination offset.
Unify API response structures — perfect for frontend frameworks like AMIS with specific format requirements.
Implement interface → Add business logic → Register via SPI