API Backend
Backend
from€1,890
Production-ready REST API with auth, rate limiting, OpenAPI docs — as backbone for your app or third parties.
Package contents
- FastAPI (Python) or Express (Node.js)
- Up to 20 REST endpoints (CRUD + custom logic)
- JWT auth with refresh tokens
- API keys for third parties (with rate limit per key)
- OpenAPI/Swagger docs at /docs (auto-generated)
- Database: PostgreSQL, MySQL or MongoDB
- Pagination, filtering, sorting in list endpoints
- Brute force protection on auth endpoints
- Rate limiting (e.g. 100 requests/min per IP)
- CORS configuration for your frontends
- Structured JSON logging with Sentry integration
- Health check + metrics (Prometheus-compatible optional)
- Docker Compose setup
- Test suite with pytest or Jest (~80% coverage)
- Versioning (/v1, /v2) for backwards compat
- Source code + deployment instructions in repo
What's not included
- Frontend / web app (see web-app packages)
- Mobile app (see mobile-app packages)
- GraphQL (separate from 590 EUR add-on, REST-first standard)
- Realtime / WebSockets (separate from 290 EUR)
- Complex business logic / workflows (hourly rate)
- More than 20 endpoints (each ~50 EUR or as web-app package)
- Server costs (~10 EUR/month Hetzner — you pay)
These items can be requested separately — we make an individual offer.
Security comes standard.
These items come with every package – including this one:
- HTTPS / SSL with auto-renewal
- Firewall, brute-force protection & rate-limiting
- Dependency scan for known CVEs
- Backup strategy in place
- No secrets ever in the repository
- GDPR-compliant cookie banner (for EU clients)
- Code review and release gate before go-live
- 30 days post-launch support (bugfixes included)
What clients usually ask
FastAPI or Express — which is better?
FastAPI: better type safety + auto-docs, Python ecosystem. Express: faster cold starts, Node.js ecosystem. We decide in the briefing.
How many requests per second does the API handle?
Standard setup: ~500-1000 RPS on 10 EUR Hetzner VPS. Scaling: architecture review (590 EUR) for caching/sharding.
How is auth done?
JWT with refresh tokens (access 15 min, refresh 7 days). Plus API keys for third parties with their own rate limit.
What if I want GraphQL later?
Add-on 590 EUR — we build a GraphQL layer on top of the existing REST API.
Who can use the API?
With correct JWT token: your frontend/mobile. With API key: third parties (free or paid per your model).
Data backup?
Daily encrypted DB backups to Hetzner Storage Box, 30 days retention.
Important note
The price shown is a non-binding estimate. Actual effort is determined individually after a free briefing call and provided in writing.
Have a project?
Tell us what it is about. In a first conversation we work out with you whether and how we can help – free and without obligation.