Capabilities / complete inventory

Everything you need.
Nothing to assemble.

FastRestful covers the full API product lifecycle: discovery, identity, releases, gateway policy, metering, money, content, community, and platform operations. Here is the whole surface area.

Public experience

A storefront for APIs, built like a product.

A fast, searchable marketplace with category navigation, API detail pages, plan comparison, community reviews, vendor profiles, and live operational signals.

  • Search by API, capability, vendor, or endpoint
  • Category filters, sorting, pagination, shareable URLs
  • Version, latency, availability, rating, and pricing context
  • Vendor identity, follow graph, and public catalogs
Marketplace with category navigation and API cards
API product page

Docs, testing, plans, reviews, and support in one place.

Every public product includes a versioned overview, secure endpoint tester, generated reference, pricing, release notes, community reviews, and vendor support.

  • Overview, Test, Docs, Reference, Pricing, Release notes, Reviews, Support tabs
  • OpenAPI downloads and starter kits
  • Authenticated gateway testing with key references
  • Subscription checkout and terms acceptance
SignalStack API product page with plan selection, stats, and documentation tabs
Gateway

A secure, metered front door for every request.

Consumers call the API directly through product hostnames or the path alias. FastRestful resolves the key, subscription, quota, endpoint entitlement, and policy before forwarding.

  • SSRF-safe HTTPS proxy with pinned DNS
  • Monthly quotas, per-minute limits, and overage
  • Idempotency, retries, and circuit breaker
  • Redacted request logs, metering, and media previews
FastRestful API test tab with secure gateway and endpoint operation list
Vendor studio

Run the entire API portfolio from one workbench.

Build products, import OpenAPI contracts, write endpoint docs, stage releases, manage plans, inspect consumers, answer support, and reconcile money.

  • General, README, Definitions, Docs, Releases, Gateway, Community, Monetize
  • Publication readiness and immutable live releases
  • Consumer health, keys, usage risk, request logs
  • Coupons, invoices, refunds, payouts, webhooks
Vendor API product portfolio with publication readiness and live surface actions
Consumer console

Everything a consumer needs after the click.

Applications, API keys, subscriptions, usage, invoices, support, requests, analytics, messages, safety, and account settings — all scoped to the active workspace.

  • Create applications and manage environments
  • Scoped keys with expiry, rotation, and revocation
  • Live explorer, request history, and CSV exports
  • Billing, team, workspaces, notifications, safety center
Consumer dashboard with workspace navigation, onboarding, and usage metrics
Integrations

Bring the providers you already use.

Payments, email, identity, storage, and infrastructure are explicit integration surfaces — not hidden SDKs or hardcoded vendor assumptions.

  • Stripe, PayPal, Flutterwave, Paystack, and Razorpay
  • SMTP, SES, Mailgun, SendGrid, Postmark, Brevo, Mailjet, SparkPost, Resend
  • OIDC, SAML 2.0, TOTP, S3, CloudFront, PostgreSQL, Redis
  • Admin credentials override environment values field by field

Explore integrations

FastRestful admin payment gateway form showing provider credentials and effective resolution diagnostics
Site & content

Run the public site from the same control plane.

Branding, navigation, structured pages, blog, legal drafts, media, announcements, short links, newsletter, and complete locale overlays stay attached to the platform.

  • Structured CMS sections and publishing preview
  • Admin-managed header and footer navigation
  • Bundled French plus admin-created locale overlays
  • Custom CSS/JS assets with preview and revision history

Site, CMS & locales guide

FastRestful admin locale manager with bundled French coverage and editable translation keys
Staff control plane

Operate the platform with evidence.

A permission-aware Django control plane for traffic, catalog, vendors, billing, payouts, support, moderation, webhooks, CMS, announcements, locales, and audit.

  • Operational snapshot and decision queues
  • Site settings, navigation, pages, blog, legal
  • Newsletter, banner, links, media, and locale studios
  • Moderation, appeals, enforcement, and audit exports
Staff control plane operations overview with platform metrics, queues, and site experience
Feature matrix / all surfaces

The complete capability map.

Organized by the work teams actually do. Every item is part of the same product system.

01 Discovery & public

  • API marketplace, categories, search, sort, pagination
  • API detail tabs, version facts, live latency and availability
  • Community ratings, reviews, vendor profiles, follows
  • Pricing, plan comparison, terms acceptance, checkout
  • Documentation index, guides, references, blog, legal
  • Status page, company page, contact, managed pages
  • Global command search, theme, locale switcher
  • SEO metadata, sitemap, robots, social sharing

02 Identity & access

  • JWT access + rotating refresh, shared Django session
  • Registration, login, logout, non-enumerating recovery
  • TOTP two-factor, recovery codes, forced enrollment
  • Generic OIDC and SAML 2.0 SSO with safe redirects
  • Email-bound workspace invites with role assignment
  • Roles: owner, admin, developer, billing, viewer
  • Active-org header and server-side tenant scoping
  • Scoped API keys: full, execute, read

03 API lifecycle

  • Products, versions, endpoints, plans, categories
  • OpenAPI 3.x and Swagger 2.0 import
  • Endpoint reconciliation and removal detection
  • Breaking-change diff against any version
  • Draft → review → live → deprecated state machine
  • Immutable live specs and single-live invariant
  • Publication readiness with four explicit gates
  • Product host routing, wildcard DNS/TLS, path alias

04 Gateway & metering

  • Authenticated and API-key request paths
  • Subscription, application, and endpoint entitlement checks
  • Monthly quota reservation and per-minute rate limits
  • Overage billing and unlimited-quota handling
  • Idempotency-Key replay protection and conflict detection
  • Bounded retries, circuit breaker, timeout and body caps
  • SSRF guard, pinned DNS, redirects disabled, header redaction
  • Usage events, monthly counters, request logs, CSV export

05 Commerce & money

  • Free, freemium, paid, trial, and enterprise plans
  • Monthly/annual intervals, coupons, selected endpoints
  • Hosted checkout: Stripe, PayPal, Flutterwave, Paystack, Razorpay
  • Signed webhook settlement and provider event receipts
  • Invoices, partial/full refunds, tax-ready line items
  • Stripe Connect and PayPal payouts, reconciliation, clawbacks
  • Platform plans and workspace/API listing limits
  • Append-only ledger, MRR, revenue by provider, refunds

06 Content & engagement

  • Structured CMS pages, posts, legal documents, block editor
  • Header/footer navigation builder with published-page routing
  • Branding, favicon, search/share defaults, custom CSS/JS
  • Media library: images, video, audio, docs, archives
  • S3 + CloudFront storage, dedupe, focal points, purges
  • Newsletter: templates, campaigns, segments, automations
  • 9 email providers, tracking, preferences, deliverability
  • Announcements, placements, targeting, A/B experiments
  • Short links, QR codes, UTM, fallbacks, click analytics
  • Locale bundles + admin overlays, English fallback

07 Community & trust

  • Public builder profiles, followers, following
  • Product reviews and community ratings
  • Direct messages, inbox, search, unread state
  • Reports, evidence, priority, SLA deadlines
  • Appeals, independent review, public decisions
  • Enforcement ledger, warnings, capability restrictions
  • Blocking, safety controls, notification preferences
  • Staff moderation queue and policy configuration

08 Platform operations

  • Permission-aware admin overview and quick actions
  • Payment gateway credentials managed in admin
  • Webhook endpoint management and delivery history
  • Platform notifications and recipient inboxes
  • Maintenance mode with machine-readable customer APIs
  • Liveness/readiness probes and dependency checks
  • Celery workers, beat schedules, settlement commands
  • Telemetry pruning, audit exports, staff password reset
Operational guarantees

The invisible parts are the product.

FastRestful spends its complexity on the things that break at scale: tenant isolation, money state, release integrity, and an audit trail you can defend.

01 / DATA

Tenant boundaries stay server-side.

Active organization travels explicitly, permissions are rechecked for object access, and public serializers never inherit private operational fields.

  • Dual-tenancy queries for vendor reads
  • Immutable ownership fields
  • Public/private serializer split
  • Workspace-scoped media and keys
02 / MONEY

Provider truth wins.

Checkout never grants entitlement. Signed webhooks settle state. Provider event IDs are unique, amounts are verified, and retries are safe.

  • Payment intent reuse
  • Cumulative partial refunds
  • Payout state machine
  • Refund clawbacks and fee reversal
03 / RELEASES

No silent breakage.

Contract imports create a draft release. Promotion requires an exact endpoint match, and live releases are immutable. Breaking changes become visible before customers do.

  • Diff reports
  • Explicit publish/unpublish/retire/restore
  • Endpoint entitlement carry-forward
  • Version-level docs and gateway policy
Go deeper

Read the docs. Then ship the platform.

Beginner installation, configuration, payment gateways and webhooks, external integrations, deployment, licensing, media, newsletter, CMS, operations, and security — all documented.

27 guidescopy-ready commandsproduction checklist