Skip to content

    Base44 Integration

    Base44 App Bridge

    Metanated talks to your Base44 app through a server-side bridge — no credentials in the browser, no SDK shipped to the client. Reads are public; writes and function calls are admin-only.

    DIMS Glossary

    How it works

    Server-Side Bridge

    1

    Server-side only

    Every call to the Base44 app runs inside a TanStack server function. The app ID and login credentials live in encrypted secrets — never in the browser bundle.

    2

    Token-managed auth

    When email and password secrets are set, the bridge logs in once and reuses the token for up to 50 minutes before refreshing. Without credentials, it falls back to anonymous access for public data.

    3

    Scoped permissions

    Reads (list, get) are public so Metanated can display Base44 data. Creates, updates, deletes, and function invocation require a signed-in Metanated admin — the Base44 app's own access rules still apply on top.

    4

    Plain fetch, no SDK

    The bridge calls the Base44 REST API directly with fetch — no npm dependency, no Node-only code, fully compatible with the edge runtime.

    API surface

    Base44 REST Endpoints

    MethodPathDescription
    GET/apps/{appId}/entities/{name}List or filter records
    GET/apps/{appId}/entities/{name}/{id}Get one record
    POST/apps/{appId}/entities/{name}Create a record (admin)
    PUT/apps/{appId}/entities/{name}/{id}Update a record (admin)
    DELETE/apps/{appId}/entities/{name}/{id}Delete a record (admin)
    POST/apps/{appId}/functions/{name}Invoke a backend function (admin)

    Security

    Access Controls

    The Base44 app ID and server URL are stored as encrypted secrets and read inside server function handlers only.

    Login credentials (email/password) are optional. Without them, the bridge uses anonymous access and can only read data the Base44 app exposes publicly.

    Write operations and function invocation require a signed-in Metanated admin. The Base44 app's own entity access rules apply on top of Metanated's admin check.

    This bridge does not sync or copy data automatically. It is a call-through layer — Metanated asks, Base44 answers.

    Ready to connect?

    The app ID and server URL are already configured. To enable authenticated reads and writes, add your Base44 login email and password as project secrets (BASE44_AUTH_EMAIL and BASE44_AUTH_PASSWORD) in Project Settings → Secrets.

    Open DIMS