Skip to main content
Share your database across multiple apps by exposing it as a REST API. This lets other apps securely read and write your data through HTTP requests while keeping everything in one place.

​
Add an API to your existing app

Ask Agent to create a REST API for your database. Agent will set up endpoints, add authentication, and protect your data.
1

Open your app

Open the app that contains the database you want to share.
2

Ask Agent to create the API

Expose my database as a REST API secured with an API key. Create endpoints for all CRUD operations on my existing tables. Use Drizzle ORM for safe database queries. Store the API key in Secrets as API_KEY.
Agent will set up everything you need automatically.
3

Add your API key

  1. Open the Secrets tab
  2. Add a secret: API_KEY with a secure password
  3. This key protects your database from unauthorized access
4

Publish your app

  1. Select Run to test your API
  2. Select Publish > Autoscale to get a public URL
  3. Your database is now accessible to other apps

​
Example: Database API template

See a working example with the Database API Example template. Fork it to start a new database API from scratch, or explore the code to understand how it works. The template includes:
  • Automatic database setup with sample data
  • API endpoints for all CRUD operations
  • API key authentication
  • Drizzle ORM for safe queries
1

Fork the template

Open the Database API Example template and fork it.
2

Add an API key

  1. Open the Secrets tab
  2. Add API_KEY with a secure password
3

Run and publish

  1. Select Run to start the API
  2. Select Publish > Autoscale when ready

​
Connect from other apps

Ask Agent to write the connection code in any of your other apps: 
Create a backend endpoint that connects to my database API at https://[YOUR-APP].replit.app. Use the API key from secrets (API_KEY) on the server side. Create routes to fetch and display data from the API.
Be sure to replace [YOUR-APP] with your app’s name. Agent will handle authentication and error handling automatically, keeping your API key secure on the server.

​
API endpoints reference

Your database uses standard REST endpoints. For an items table:
ActionMethodEndpoint
List allGET/api/items
Get oneGET/api/items/:id
CreatePOST/api/items
UpdatePUT/api/items/:id
DeleteDELETE/api/items/:id
All requests need an X-API-KEY header with your API key.

​
Write your own connection code

If you prefer to code the connection yourself, use these backend examples: 
const API_URL = 'https://your-app.replit.app';
const API_KEY = process.env.API_KEY;

const response = await fetch(`${API_URL}/api/items`, {
  headers: { 'X-API-KEY': API_KEY }
});
const items = await response.json();
These examples are for backend code only. Never use API keys in frontend/browser code - they will be exposed to anyone viewing your page source. For frontend apps, create a backend endpoint that proxies requests to your database API.Always store your API key in Secrets, not in your code.

​
Add more tables

Extend your database as your app grows: 
Add a users table with email, name, and role columns. Create API endpoints for users with the same authentication as the existing endpoints.
Agent will update your schema, create endpoints, and apply authentication automatically.

​
How it works

Your API acts as a central hub. When an app needs data, it sends a request to your API. The API checks the API key, then reads or writes to your database. Multiple apps share one database securely.

​
Security

Your API includes built-in protection:
  • API key authentication: Only apps with the correct key can access your database
  • SQL injection protection: Drizzle ORM prevents malicious queries
  • Data validation: The API checks all data before saving
Store your API key in Secrets, never in code.
Only share your API key with apps you trust.

​
Troubleshooting

  • Publish your database API app (not just run it)
  • Use your published URL ending in .replit.app
  • Verify both apps have the same API key in Secrets
  • Check the secret is named API_KEY in both apps
  • Store the API key in Secrets, not in code
  • Verify the API key matches in both apps
  • Check the secret is named API_KEY (all caps)
Ask Agent to troubleshoot:
I’m trying to connect to my database API but getting errors. Can you help me debug the connection?

​
Next steps