Backend
API Backend
Production-ready REST API with auth, rate limiting, OpenAPI docs — as backbone for your app or third parties.
What you get
Package contents
- FastAPI (Python) or Express (Node.js)
- Up to 20 REST endpoints (CRUD + custom logic)
- JWT auth with refresh tokens
- API keys for third parties (with rate limit per key)
- OpenAPI/Swagger docs at /docs (auto-generated)
- Database: PostgreSQL, MySQL or MongoDB
- Pagination, filtering, sorting in list endpoints
- Brute force protection on auth endpoints
- Rate limiting (e.g. 100 requests/min per IP)
- CORS configuration for your frontends
- Structured JSON logging with Sentry integration
- Health check + metrics (Prometheus-compatible optional)
- Docker Compose setup
- Test suite with pytest or Jest (~80% coverage)
- Versioning (/v1, /v2) for backwards compat
- Source code + deployment instructions in repo
Communicated transparently
What's not included
- ×Frontend / web app (see web-app packages)
- ×Mobile app (see mobile-app packages)
- ×GraphQL (separate from 590 EUR add-on, REST-first standard)
- ×Realtime / WebSockets (separate from 290 EUR)
- ×Complex business logic / workflows (hourly rate)
- ×More than 20 endpoints (each ~50 EUR or as web-app package)
- ×Server costs (~10 EUR/month Hetzner — you pay)
These items can be requested separately — we make an individual offer.
Security & production-readiness
Security comes standard.
What cheap providers skip is standard with us — also in this package:
- HTTPS / SSL with auto-renewal
- Firewall, Fail2Ban & rate-limiting
- Dependency scan for known CVEs
- Backup strategy in place
- No secrets ever in the repository
- GDPR-compliant cookie banner (for EU clients)
- Code review by an experienced engineer before go-live
- 30 days post-launch support (bugfixes included)
FAQ
What clients usually ask
FastAPI or Express — which is better?+
FastAPI: better type safety + auto-docs, Python ecosystem. Express: faster cold starts, Node.js ecosystem. We decide in the briefing.
How many requests per second does the API handle?+
Standard setup: ~500-1000 RPS on 10 EUR Hetzner VPS. Scaling: architecture review (590 EUR) for caching/sharding.
How is auth done?+
JWT with refresh tokens (access 15 min, refresh 7 days). Plus API keys for third parties with their own rate limit.
What if I want GraphQL later?+
Add-on 590 EUR — we build a GraphQL layer on top of the existing REST API.
Who can use the API?+
With correct JWT token: your frontend/mobile. With API key: third parties (free or paid per your model).
Data backup?+
Daily encrypted DB backups to Hetzner Storage Box, 30 days retention.
Important note
The price shown is a non-binding estimate. Actual effort is determined individually after a free briefing call and provided in writing.
Get in Touch
Have a project?
Let's bring your idea to life together. We're happy to advise you with no obligation.
Get in Touch →