Build APIs in TypeScript with your coding agent.

Xano’s API builder: your coding agent writes REST APIs in TypeScript with the Xano SDK. Run them on the Xano Engine on your machine, then deploy them to Xano, documented, tested and observable under your team’s rules.

How AI code governance works

API builder

What is an API builder?

An API builder is a tool for creating the endpoints your apps, services and agents call, without hand-assembling servers, routing and documentation. On Xano, the API builder is part of one backend platform: your coding agent writes each endpoint in TypeScript, and Xano runs, documents, tests and observes it alongside your database.

Write with AI · Run locally · Deploy to Xano

Example: from one prompt to a running endpoint

Your coding agent writes the endpoint in TypeScript with the Xano SDK, you run it on the Xano Engine on your machine, then deploy it to Xano.

01 · Write with AI

You describe the endpoint.

In Claude Code, Codex or Cursor, ask for what you need in plain words, for example: “Add a POST /posts endpoint to the blog API that saves a post with a required title and returns the new row.” The agent writes it with the Xano SDK, grounded in the SDK’s llms.txt and the AGENTS.md that init put in your project.

The TypeScript the agent writes
// xano/index.ts
export const post = table({
  name: "post",
  schema: {
    title:     f.text({ required: true }),
    published: f.bool({ default: false }),
    author:    f.tableRef(user), // type-checked
  },
});

const createPost = query({
  verb: "POST", apiGroup: blog, name: "posts",
  input: { title: input.text({ required: true }) },
  stack: [s.db.add({ table: post, row: { title: inp("title") }, as: "row" })],
  response: ref("row"),
});

Adapted from the Xano SDK README.

02 · Run locally

It runs on the Xano Engine, on your machine.

npm run xano:deploy typechecks the code and runs it on the Xano Engine: a single binary with Postgres built in, with no account and no network. Call the endpoint, run the tests with npx xanosdk test run-all, and open the builder link the deploy prints to see what your code compiled to.

$ npm run xano:deploy
03 · Deploy to Xano

The same code goes live on Xano.

When it is ready to share, one command deploys the same code to a disposable ephemeral on Xano’s cloud and runs its tests. Only a release that came up and answered can be promoted, so what you tested locally is what serves production traffic.

$ npx xanosdk deploy --ephemeral --test
The API line

Build, document, test and observe every endpoint

Your agent writes each endpoint; Xano documents, gates and observes it, and your whole team sees what got built in one place.

  1. 01 · Build

    Build

    Your coding agent writes API groups and queries in TypeScript with the Xano SDK, against your workspace rules, with your docs and skills as standing context. You run them on the Xano Engine on your machine, and the Xano editor shows the whole team what got built, endpoint by endpoint.

    The Xano SDK
    Coding agent Xano SDK Run locally Team review API group · blog GET /posts POST /posts PATCH /posts/{id} DELETE /posts/{id} built against your rules, docs and skills
  2. 02 · Document

    Document

    Autogenerated OpenAPI (Swagger) documentation for everything, always current, because it's generated from the live system.

    Live system GET /posts POST /posts GET /users generated OpenAPI · Swagger GET /posts POST /posts GET /users PATCH /posts/{id} always current
  3. 03 · Test & gate

    Test & gate

    Unit and workflow tests attach to endpoints; the release gate checks them before anything promotes to production.

    every test passes ✓ unit ✓ workflow production a test fails ✓ unit ✗ workflow held release gate
  4. 04 · Observe

    Observe

    Request history on every endpoint, error logs with stack snapshots, audit trails for who or what changed anything.

    Observability
    Request history 200 GET /posts 201 POST /posts 500 POST /orders 200 GET /users on every endpoint Error log POST /orders stack snapshot Audit trail ◆ agent edited ◆ you approved who or what changed it
On every endpoint

Auth, rate limits and middleware

Security controls are set once and reused everywhere, so every endpoint your agent writes is protected the same way as the rest of the workspace.

Authentication

API keys, OAuth and JWT, roles and scopes. Your team sets the approved auth patterns once as workspace rules, and every endpoint the agent writes follows them.

Rate limiting

The Free plan is rate limited (10 requests per 20 seconds); Essential plans and above have no platform-enforced API rate limit. Paid plans add API response caching, and Pro and Custom add Redis data caching for faster responses and rate limiting of your own.

Middleware and lambdas

Middleware and JavaScript lambdas reach any service with an API (payment providers, messaging, internal systems) from inside governed logic, with the same review gates and audit trail as everything else. Tests attach to queries, functions and middleware alike.

Document

Autogenerated OpenAPI docs

Every endpoint ships with autogenerated OpenAPI (Swagger) documentation. It is generated from the running system, so what is documented always matches what runs, including the endpoint your agent added an hour ago. Your services, your partners and other AI agents read the same spec, and nobody keeps a separate document in sync by hand.

How your stack consumes Xano APIs
Questions

Building APIs on Xano

Do I need to write code to build APIs in Xano?

Your coding agent writes it. You describe the endpoint, the agent writes it in TypeScript with the Xano SDK, and you run it locally before deploying. Anyone on the team can read what was built in the Xano editor without reading the code.

Does Xano generate OpenAPI docs?

Yes. Every endpoint ships with autogenerated OpenAPI (Swagger) documentation, generated from the live system, so it is always current. Your services, partners and AI agents can consume the same spec without anyone maintaining it by hand.

Can I use my own domain?

Yes, on paid plans. Custom domains replace the Xano base URL with your own domain on the Essential, Pro and Custom plans. The Free plan uses the Xano base URL. See the full plan comparison for what each plan includes.

Does Xano rate limit my API?

Only on the Free plan. Rate limiting applies to Free plan workspaces; Essential plans and above are not subject to platform-enforced API rate limits. Each plan’s limits on records, storage, workspaces and seats are listed in the full plan comparison.

Which coding agents can build APIs on Xano?

Claude Code, Codex and Cursor, plus Copilot, Gemini CLI and OpenCode. Install the agent skill once with npx @xano/sdk agent-skill install and every coding agent on your machine knows how to write valid Xano code with the SDK. See how coding agents build on Xano.

AI builds software. Xano makes it trustworthy.

One platform to build, run and govern AI-built software.