Open source · Backend-as-a-Service for AI apps

The BaaS for AI builders

Stop rebuilding
your backend.

Flowstack is the open-source Backend-as-a-Service for AI apps. Auth, AI agents with memory, databases, multi-tenancy, payments and a built-in MCP server — one npm install, zero backend to manage.

Get your MCP API keyGitHub →npm →

MIT licensed · Published on npm · No infra to manage

Install once. Ship faster.

# Install the SDK
npm install flowstack-sdk

# Scan for security issues
npx secure-ai-app scan

# Security Score: 64/100 (C) — let's fix that
npx secure-ai-app fix
auth · handledmulti-tenancy · built inNEXT_PUBLIC_ secrets · flaggedAI agents + memory · readyMongoDB collections · reactivehardcoded key · found + fixedStripe payments · includedMCP server · one API keymissing AuthGuard · flaggedpublished sites · CDNauth · handledmulti-tenancy · built inNEXT_PUBLIC_ secrets · flaggedAI agents + memory · readyMongoDB collections · reactivehardcoded key · found + fixedStripe payments · includedMCP server · one API keymissing AuthGuard · flaggedpublished sites · CDN

What it is

Every AI app needs
the same backend.

You're building fast. So you wire up auth from one place, a database from another, agents from a third, billing from a fourth. Flowstack is that whole backend — a single React SDK plus a hosted API, already wired, already secure, already shipping. It's open source and on npm today.

01 · Auth
Authentication
Brokered login (one button, scoped JWT), sessions, and full RBAC — owner → admin → member → viewer. Secure patterns enforced.
02 · Agents
AI Agents
useAgent() with real-time streaming, tool calls, and automatic conversation memory. Claude, GPT, Llama, or BYOK — no gateway glue.
03 · Data
Databases
useCollection() — reactive, per-tenant MongoDB CRUD. Plus datasets, uploads, and world-readable shared pools for leaderboards & voting.
04 · Multi-tenant
Workspaces
Full workspace management with tenant isolation built in — not bolted on. Your users never see each other's data.
05 · Payments
Payments & Billing
Stripe-powered monetization — subscriptions, credit packs, and per-app query allowances on your own Connect rails — with built-in query-credit metering, balance badges, and paywall gates.
06 · Sites
Published Sites
useSites() — stage files and publish full apps to the CDN with version history. Your product ships from the same SDK.
07 · Messaging
Direct Messages
useThreads() / useMessages() — mutual-consent private DMs with unread counts and server-side ACLs. Real social primitives.
08 · MCP
MCP & Machine Docs
A hosted MCP server (Claude Desktop, Cursor) plus llms.txt, OpenAPI 3.1, and a JSON-LD graph — your backend is agent-readable by default.

Built-in security

The scanner that knows your stack.

secure-ai-app is an open source CLI scanner that ships with Flowstack. It knows every hook, every API pattern, every failure mode — because we built both sides.

It found a real Google Play private key hardcoded in our own repo on first run. That's not a demo. That's the point.


View the Scanner →
secure-ai-app scanning a projectScan results showing findings and security score
10 rules, zero config
hardcoded-api-keyenv-exposuremissing-auth-guardtenant-isolationsecret-in-prompt+ 5 more

Why it works

The compounding loop.

Most builders ship disposable products. One idea, ship it, abandon it. No accumulated leverage. This is the other way.

01 —
Build the SDK
Abstract the five things every AI SaaS needs. Auth, workspaces, agents, data, users. Once.
02 —
Ship products on it
Every product is a real user of the SDK. Every gap gets filled. Every friction gets removed.
03 —
The SDK gets smarter
Four products in, the fifth takes a fraction of the time. The platform compounds underneath everything.
04 —
Security comes free
The scanner knows the SDK's patterns because we built both. Every new feature creates new detection rules automatically.
05 —
Repeat
You don't stop. That's the whole thing. The code is just evidence.
Architecture
Your products
Your AppSaaS #2Mobile
↓
flowstack-sdk
useAuthuseAgentuseWorkspace
useDatasetsuseUserMgmtAuthGuard
↓
Backend services
REST APISSE StreamOAuth
DynamoDBS3AI Models
■secure-ai-app scans every layer

Start building

Build your AI app.
Ship it secure.

Flowstack is open source and live on npm. Install the SDK, or generate an MCP API key to wire your AI app's backend straight into Claude Desktop or Cursor.

npm install flowstack-sdk
Get your MCP API keyView on GitHub →View on npm →

MIT licensed. Open source. No pitch deck — just npm install.