PocketBase website screenshot

PocketBase

PocketBase is an open-source backend-as-a-service delivered as a single executable, providing a REST API for managing collections, records, authentication, file uploads, real-time subscriptions via Server-Sent Events, and admin management through a built-in dashboard. It embeds SQLite for persistent storage and supports OAuth2, OTP, and password-based authentication out of the box. Developers can extend PocketBase with custom business logic using Go or JavaScript hooks and event handlers. Official SDKs for JavaScript and Dart make client integration straightforward across web, mobile, and desktop platforms.

PocketBase publishes 5 APIs on the APIs.io network. Tagged areas include Backend-as-a-Service, Open Source, SQLite, Realtime, and Authentication.

The PocketBase catalog on APIs.io includes 1 JSON-LD context.

PocketBase’s developer surface includes documentation, engineering blog, pricing, and 9 more developer resources.

32.1/100 thin ▲ 6.1 Agent 19/100 agent aware Full breakdown ↓
scored 2026-07-28 · rubric v0.6
AccessFree
5 APIs
Backend-as-a-ServiceOpen SourceSQLiteRealtimeAuthenticationFile StorageREST APISelf-HostedGo

Kin Score

Kin Score Kin Score How this is scored →
scored 2026-07-28 · rubric v0.6
Composite quality — 32.1/100 · thin
Contract Quality 13.9 / 25
Developer Ergonomics 2.2 / 20
Commercial Clarity 7.9 / 20
Operational Transparency 0.7 / 13
Governance 0.0 / 12
Discoverability 7.4 / 10
Agent readiness — 19/100 · agent aware
Machine-Readable Contract 18 / 18
Agentic Access Contract 0 / 10
MCP Server 0 / 12
Machine-Readable Auth 0 / 10
Idempotency 0 / 9
Stable Error Semantics 0 / 8
Request/Response Examples 0 / 7
Rate-Limit Signaling 7 / 7
Typed Event Surface 0 / 6
Agent Skills 0 / 5
Well-Known Catalog 0 / 4
Consent & Bot Identity 0 / 3
A2A Agent Card 0 / 8
Dry-Run / Simulate Mode 0 / 4
Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. This rating is computed from github.com/api-evangelist/pocketbase: open an issue to ask a question, or submit a pull request to add artifacts. Want it done for you? Prioritized profiling — $2,500 →

APIs 5

Individual APIs this provider publishes, each with its own machine-readable definition.

PocketBase Records API

CRUD operations for collection records including list, view, create, update, delete, and batch operations. Supports filtering, sorting, pagination, relation expansion, field sel...

PocketBase Authentication API

Authentication endpoints supporting password-based login, OAuth2 providers, one-time passwords, token refresh, email verification, password reset, email change confirmation, and...

PocketBase Realtime API

Server-Sent Events (SSE) based real-time subscriptions for create, update, and delete record events across individual records or entire collections. Connections auto-disconnect ...

PocketBase Files API

File download, thumbnail generation, and protected file token generation. File uploads are handled through the Records API using multipart form data. Supports on-the-fly image r...

PocketBase Settings API

Superuser-only endpoints for listing and updating application settings, testing S3 storage connectivity, sending test emails, generating Apple OAuth2 client secrets, and configu...

GraphQL 1

GraphQL schemas published by this provider.

PocketBase GraphQL API

PocketBase is a REST-only backend-as-a-service. It does not provide a native GraphQL API. All data operations are performed through a REST-ish HTTP API served at `{your-instance...

GRAPHQL

Pricing Plans 1

Published pricing tiers and plan structures.

Rate Limits 1

Documented rate limits and quota policies.

Pocketbase Rate Limits

0 limits

RATE LIMITS

FinOps 1

Cost, billing, and metering signals for API financial operations.

Semantic Vocabularies 1

JSON-LD contexts and semantic vocabularies used across these APIs.

Pocketbase Context

10 classes · 11 properties

JSON-LD

Security Posture 1

Authentication, domain security, vulnerability disclosure, and trust-center signals.

Pocketbase Domain Security

TLSv1.3 · DMARC

SECURITY

Resources

Documentation 1

Reference material describing how the API behaves

Design & Contract 1

Pagination, idempotency, versioning, errors, and events

Build 1

SDKs, sample code, and the tooling you integrate with

Access & Security 1

Authentication, authorization, and security posture

Operate 1

Status, limits, changes, and where to get help

Commercial 3

Pricing, plans, and the legal terms of use

Company 3

The organization behind the API

Other 1

Properties that don't map to a standard resource type

Source (apis.yml)

apis.yml Raw ↑
aid: pocketbase
name: PocketBase
description: 'PocketBase is an open-source backend-as-a-service delivered as a single executable, providing a REST API for
  managing collections, records, authentication, file uploads, real-time subscriptions via Server-Sent Events, and admin management
  through a built-in dashboard. It embeds SQLite for persistent storage and supports OAuth2, OTP, and password-based authentication
  out of the box. Developers can extend PocketBase with custom business logic using Go or JavaScript hooks and event handlers.
  Official SDKs for JavaScript and Dart make client integration straightforward across web, mobile, and desktop platforms.

  '
type: Index
accessModel:
  pricing: free
  onboarding: unknown
  trial: false
  try_now: false
  public: false
  label: Free
  confidence: medium
  source:
  - plans
  generated: '2026-07-22'
  method: derived
image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/icons/pocketbase.png
url: https://raw.githubusercontent.com/api-evangelist/pocketbase/refs/heads/main/apis.yml
created: '2026-06-12'
modified: '2026-06-12'
specificationVersion: '0.19'
tags:
- Backend-as-a-Service
- Open Source
- SQLite
- Realtime
- Authentication
- File Storage
- REST API
- Self-Hosted
- Go
apis:
- aid: pocketbase:records-api
  name: PocketBase Records API
  description: 'CRUD operations for collection records including list, view, create, update, delete, and batch operations.
    Supports filtering, sorting, pagination, relation expansion, field selection, and multipart file uploads.

    '
  humanURL: https://pocketbase.io/docs/api-records/
  baseURL: https://your-instance.pocketbase.io
  tags:
  - Records
  - Collections
  - CRUD
  properties:
  - type: Documentation
    url: https://pocketbase.io/docs/api-records/
  - url: graphql/pocketbase-graphql.md
    type: GraphQL
- aid: pocketbase:authentication-api
  name: PocketBase Authentication API
  description: 'Authentication endpoints supporting password-based login, OAuth2 providers, one-time passwords, token refresh,
    email verification, password reset, email change confirmation, and superuser impersonation.

    '
  humanURL: https://pocketbase.io/docs/api-records/
  baseURL: https://your-instance.pocketbase.io
  tags:
  - Authentication
  - OAuth2
  - OTP
  - JWT
  properties:
  - type: Documentation
    url: https://pocketbase.io/docs/api-records/
- aid: pocketbase:realtime-api
  name: PocketBase Realtime API
  description: 'Server-Sent Events (SSE) based real-time subscriptions for create, update, and delete record events across
    individual records or entire collections. Connections auto-disconnect after 5 minutes of inactivity.

    '
  humanURL: https://pocketbase.io/docs/api-realtime/
  baseURL: https://your-instance.pocketbase.io
  tags:
  - Realtime
  - SSE
  - Subscriptions
  properties:
  - type: Documentation
    url: https://pocketbase.io/docs/api-realtime/
- aid: pocketbase:files-api
  name: PocketBase Files API
  description: 'File download, thumbnail generation, and protected file token generation. File uploads are handled through
    the Records API using multipart form data. Supports on-the-fly image resizing and forced download responses.

    '
  humanURL: https://pocketbase.io/docs/api-files/
  baseURL: https://your-instance.pocketbase.io
  tags:
  - Files
  - Uploads
  - Images
  properties:
  - type: Documentation
    url: https://pocketbase.io/docs/api-files/
- aid: pocketbase:settings-api
  name: PocketBase Settings API
  description: 'Superuser-only endpoints for listing and updating application settings, testing S3 storage connectivity, sending
    test emails, generating Apple OAuth2 client secrets, and configuring rate-limiting rules.

    '
  humanURL: https://pocketbase.io/docs/api-settings/
  baseURL: https://your-instance.pocketbase.io
  tags:
  - Settings
  - Admin
  - Configuration
  properties:
  - type: Documentation
    url: https://pocketbase.io/docs/api-settings/
common:
- type: DomainSecurity
  url: security/pocketbase-domain-security.yml
- type: Website
  url: https://pocketbase.io
- type: Documentation
  url: https://pocketbase.io/docs/
- type: GitHubOrg
  url: https://github.com/pocketbase
- type: Blog
  url: https://github.com/pocketbase/pocketbase/releases
- type: Pricing
  url: https://pocketbase.io/faq/
- type: X
  url: https://x.com/pocketbase
- type: Plans
  url: plans/pocketbase-plans-pricing.yml
- type: RateLimits
  url: rate-limits/pocketbase-rate-limits.yml
- type: FinOps
  url: finops/pocketbase-finops.yml
- type: BlogFeed
  url: blogs/blogs.json
- type: JSONLDContext
  url: json-ld/pocketbase-context.jsonld
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com