Database proxyfor your team.
rexadb Studio is the backend API server for database client GUIs. Proxy connections through a central API with JWT auth, RBAC, and encrypted credentials — so your team connects safely without ever seeing a password.
// Request
{
"connectionId": "c_01j...",
"query": "SELECT * FROM users LIMIT 5",
"params": []
}
// Response
{
"rows": [
{"id": 1, "name": "Alice"},
{"id": 2, "name": "Bob"}
],
"fields": ["id", "name"]
}
Enterprise security, developer speed
Give your team access to databases without sharing credentials.
JWT authentication
Secure token-based auth with a swappable adapter. Integrates with any auth provider.
Role-based access control
Granular permissions per connection. Built-in roles: super_admin, admin, developer, viewer.
AES-256-GCM encryption
Database credentials encrypted at rest. Decrypted in-memory only at query time.
Multi-DB proxy
Proxy connections to Postgres and MySQL through a single API endpoint.
Pluggable drivers
Extensible driver system — implement DatabaseDriver and use registerDriver().
Audit trail
Every query is logged. Full visibility into who ran what and when.
Architecture
Every layer is swappable. Every request is authenticated, authorized, and audited.
Client App → POST /query (Bearer token) → rexadb-studio
├── Verify JWT
├── Check RBAC permissions
├── Decrypt stored credentials (AES-256-GCM)
├── Connect via driver (pg / mysql2)
├── Execute query
├── Log audit trail
└── Return rows + fields
API Routes
Thin route handlers in src/app/api/
JWT Auth
Swappable auth adapter
RBAC
Permission & connection-level access checks
Drivers
Pluggable Postgres / MySQL drivers
Encryption
AES-256-GCM credential encryption
Drizzle ORM
SQLite (libSQL) app storage
Deploy in minutes
One command to set up the full stack — database migrations, admin user creation, and secret generation included.
- Postgres & MySQL support
- Docker Compose ready
- Swappable auth providers
- Custom RBAC roles at runtime
# Interactive setup
$ npm run setup
# Or with Docker
$ docker compose up -d
Built with
Modern stack, production ready.
Next.js
Drizzle ORM
SQLite
Postgres
MySQL
ZodSecure your database access.
Deploy rexadb Studio and give your team safe, audited database access.