Guides for setting up, securing, and shipping your DontCode app. Browse by category, or jump straight to what you need.
Every primitive DontCode ships with: auth, payments, storage, email, push, cron, custom domains, branding, and more. Built in; no code required.
Browse all features →
Patterns built by combining features. Weekly reports, welcome email drips, abandoned-checkout recovery, churn nudges, investor updates. Ready to build in your project.
Browse recipes →
Step-by-step setup guides for Google, Kakao, and the other OAuth providers you can plug into your app.
Open the guides →
How DontCode handles your users' credentials, password storage, and per-project data isolation. Useful to send to security teams.
Read security docs →
Where your data is stored, our sub-processors, SLA, incident response, and data processing agreements.
Read compliance docs →
The REST surface a Backend Project exposes: auth, database, storage, cache, realtime, payments, notifications. Bring your own code on any host and call it with an API key.
Read the API reference →
Connect Claude Code, Cursor, or any MCP client to a Backend Project. Device login, project-scoped tokens, and the tools an agent can call.
Set up MCP →
How AI credits work in your deployed apps, what end users see when credits run out, and how owners get notified to refill. Read this before launching to real customers.
Read billing docs →
Several surfaces, one base URL (`https://backend.dontcode.co`), one `Authorization: Bearer dc_…` header on every request.
Auth & MFA
Sign up, email-code verification, login, the MFA challenge/enroll flow, and the response→UI map your forms must follow.
Database
Structured queries (`find`, `insert`, `update`, `delete`, `count`) with parameterized where clauses, no raw SQL.
Migrations
The one place DDL enters a project database from outside, validated and sanitized like the console’s own pipeline.
Storage
List, upload, move, remove, and sign URLs for files in public and private buckets, scoped to your project.
Payments
Verify charges, run subscriptions, manage a plan and feature catalog, and check entitlements, scoped to your project.
Cache
Shared key-value state every instance of your app can see: rate limits, one-time codes, locks, sessions, with TTL expiry. No store to provision.
Realtime
Pub/sub over WebSockets for chat, presence, and live updates: your server mints scoped tokens, browsers connect directly.