Multi-Tenant High-performance isolated tenant backend engine.

Multi-tenant backend,
built for scalable SaaS

The single shared tenant API built with Node.js, TypeScript, Express, and Supabase. Request-scoped client provisioning, encrypted tenant credentials, and isolated database routing.

Explore API Docs Inspect Health API

GET /health

"status": 200 OK
"timestamp": "2026-08-26T09:07:00.000Z"
"payload": {
  "success": true,
  "message": "Service is healthy",
  "data": {
    "status": "healthy",
    "service": "saas-tenant-api",
    "engine": "tenant-core"
  }
}

Core Capabilities

Engineered for bulletproof tenant isolation.

A unified API gateway built with Express and TypeScript, securely resolving tenant contexts, decrypting configurations on-the-fly, and provisioning isolated database connections.

Request-Scoped Clients

Dynamically instantiates isolated Supabase instances per incoming request without ever leaking mutable global tenant state.

X-Tenant-Key Zero-Leak State Scoped Context

Encrypted Credentials

Tenant-specific project URLs and service keys are securely stored with AES-256 encryption and decrypted only in memory during authorization.

AES-256-GCM Platform Store Secure Vault

OpenAPI 3.0 & Telemetry

Interactive Swagger UI documentation, robust CORS middleware, structured Pino logging, and real-time health telemetry.

OpenAPI 3.0 Pino Logging Zod Validation

Architecture

Strict boundary separation by design.

Single API, infinite isolated tenant projects.

Deploys independently on Vercel or Node.js containers while securely routing authenticated tenant requests to their designated Supabase infrastructure.

01 // VALIDATE

Authenticate Tenant

Verify request origin, validate X-Tenant-Key, and check bearer token authenticity.

02 // DECRYPT

Resolve & Decrypt

Retrieve encrypted tenant credentials and instantiate the scoped Supabase instance.

03 // EXECUTE

Execute & Log

Run authorized business logic, enforce tenant boundaries, and log structured metrics.

Reliability

A production-grade tenant backbone.

Built for enterprise SaaS platforms that demand complete data residency, zero cross-tenant contamination, and sub-millisecond route dispatch.

Zero Cross-Tenant Leaks

Request isolation ensures tenant clients are garbage collected immediately upon request completion.

Strict Schema Validation

Bilingual Developer Docs

Comprehensive API documentation and developer guidance in both English and Arabic.

100%

Tenant Isolation

< 10ms

Routing Overhead

256-bit

AES Vault Encryption

24/7

Health Monitoring

Platform API

Exposed Services & Documentation

Interactive OpenAPI 3.0 specification routes and automated health endpoints.

GET /health System health check, environment status, and service uptime. Test /health

GET /api-docs/ Interactive Swagger OpenAPI documentation UI and spec explorer. View Docs

GET / SaaS Tenant API portal with bilingual documentation and live diagnostics. Root View

Ready to connect your tenants?

Explore the interactive OpenAPI documentation or inspect health metrics to get started.

Multi-tenant backend, built for scalable SaaS