Authentication & access
JWT-based auth with sessions, devices, organisation memberships, and route-level access control — hardened by default with bcrypt, rate-limiting, and Helmet.
Built for Africa, designed for growth.
jsonone is a Backend-as-a-Service that empowers developers to build in days and scale to millions. Kickstart your project with a managed database, seamless authentication, instant documented APIs, secure storage, and a marketplace of production-ready business modules — all on one platform, all served on your own domain.
// Initialise once. Works against your own domain.
import { createClient } from '@jsonone/sdk'
const jsonone = createClient({
url: 'https://api.yourbrand.com',
anonKey: process.env.JSONONE_ANON_KEY!,
})
// JWT, sessions, devices, OAuth — out of the box.
const { data, error } = await jsonone.auth.signIn({
email: 'amani@example.com',
password: '•••••••••',
})A complete backend stack — auth, multi-tenancy, data, storage, and a documented API surface. Production-ready primitives with a standardised { success, data, meta, error } envelope on every response.
JWT-based auth with sessions, devices, organisation memberships, and route-level access control — hardened by default with bcrypt, rate-limiting, and Helmet.
Tenant isolation enforced at the middleware layer with request-bound context. Not tenant_id columns bolted on — true isolation, end to end.
A managed MongoDB instance, ready the moment you create a project. Schemas and indexes scaffolded as you enable modules.
_id: "mem_01HQX3Z…", name: "Amani Mwangi", status: "active", balance: 24000, created: "2026-04-19"
Already on Mongo? Plug in a connection string. Credentials live in HashiCorp Vault, you keep full control of your data — provider-agnostic, by design.
Every controller ships with an OpenAPI 3.1 spec and a hosted reference. Your docs can’t drift from your code, because they are your code.
File and object storage with per-tenant quotas, signed URLs, and access policies tied to the same auth and membership graph as the rest of your app.
Your customers type api.yourbrand.com into your app. Behind the DNS, it’s still us — same codebase, same platform, same infrastructure. To them, it’s entirely yours: your brand, your environment, your auth scope. They never see jsonone. That’s the point.
Custom domains are available on Professional and above. Starter projects launch on a *.jsonone.io subdomain.
Illustrative — example domains only.
Every serious product eventually needs a CRM, a ledger, a payroll system, or an accounting backend. We’ve already built and shipped them — gated, entitlement-aware, and ready to enable per tenant. You pay only for what you turn on.
Full digital banking with double-entry ledger. Member lifecycle, KYC, M-Pesa via Daraja, and the SIMBA model: Savings, Investments, Move, Borrow, Assurance.
One platform fee per project. Per-extension subscriptions only when you turn them on. No per-seat surprises on the base plan, no hidden MAU multipliers in month four.
Starter $29/mo For teams shipping their first production workload. Get Starter | ProfessionalRecommended $599/mo For growing teams running multiple production apps. Get Professional | Enterprise Custom For organisations with scale and compliance needs. Talk to sales | |
|---|---|---|---|
| Limits | |||
| Workspaces | 3 | 10 | Unlimited |
| Projects | 5 | 20 | Unlimited |
| Apps | 5 | 20 | Unlimited |
| Members | 5 | 20 | Unlimited |
| API requests / month | 100K | 1M | Unlimited |
| Features | |||
| Multi-user memberships | |||
| Audit logs | |||
| Custom domains | — | ||
| Priority support | — | — | |
| Dedicated infrastructure | — | — |
Multi-currency by default. M-Pesa via Daraja. Statutory deductions for African tax regimes — built into the platform, not bolted on later. Modular by country, so the next one is a configuration change, not a rebuild.
First-class M-Pesa integration through the Banking extension. You bring your Daraja keys; we store them in Vault and wire up STK Push, C2B, B2C, and B2B with callback handling and ledger reconciliation built in.
KES, NGN, GHS, ZAR alongside USD and EUR — first-class across base subscriptions and extensions. Per-tenant currency overrides at activation, so each customer’s money speaks their language.
Tax, health, and social security deductions wired into HR & Payroll, sized to local rules. Kenya is live today; the architecture is country-modular, so adding the next jurisdiction is a configuration change, not a rebuild.
jsonone is the foundation, but builders also come to us for engineering capacity and infrastructure setup — for when you need more than just the API.
For clients who want the app, not the build process. We pair our team with yours to ship product on jsonone — from greenfield builds to extending an existing tenant.
You bring the cloud account — Oracle, Microsoft, AWS — we set up your servers in-region. Your customers get genuine local presence, not Frankfurt latency.
Spin up your first project, point your domain at jsonone, and have authenticated, multi-tenant endpoints answering on your URL by the end of the day.
Occasional, useful, and never noisy. Unsubscribe anytime.