ObjectOS
The runtime for internal tools that stays in your network. One command to start, your database, your auth, your data — never ours.
ObjectOS
ObjectOS is a self-hosted runtime for building internal tools, admin panels, and back-office apps without giving up your data. Describe what you need to the in-Console AI Builder — or fork a template — and get REST APIs, a generated admin UI, authentication, RBAC, audit logs, file storage, background jobs, webhooks, and AI integration. All running in your network, on your database.
It's what you'd get if Retool, Supabase, and Salesforce had a child that ran inside your firewall — with an AI that builds the apps for you.
Get running in 60 seconds
npm i -g @objectstack/cli
os startOpen http://localhost:3000 and you have a working ObjectOS with Console and Account, an audit log, and a SQLite database — zero configuration, zero scaffolding.
Then either:
- Talk to the AI Builder — "I need to track support tickets with priority and assignee" — and watch the metadata get generated. See Build → AI Builder.
- Install a template from the in-Console marketplace (Todo, Contracts, Helpdesk, …) and have a real app in one click.
- Fork a template if you want TypeScript source under your control.
Why ObjectOS instead of …
| You're using | Pain point | What ObjectOS gives you |
|---|---|---|
| Retool / Appsmith | UI builder is great, but your data sits in their cloud and their pricing scales with users | Your data never leaves your network; Apache-2.0, no seat tax |
| Supabase / Firebase | Backend-as-a-service is fast but vendor-locked; multi-tenant SaaS by design | Same DX (auto APIs, auth, storage), but you own the runtime and database |
| Salesforce / NetSuite | Powerful platform, painful customization, eye-watering per-seat cost | Same metadata-driven model (objects, fields, roles, sharing rules), self-hosted, no seat tax |
| Rolling your own (Next + Prisma + NextAuth) | You rebuild RBAC, audit, file uploads, settings, webhooks, jobs every time | Ship the actual business logic; the platform plumbing is already there |
What you get out of the box
| Surface | What it is |
|---|---|
| Auto REST API | Every object you declare gets /api/v1/data/<object> with filter/sort/paginate |
Console (/_console/) | Generated admin UI: browse and edit records, manage users/roles/permission sets, view audit log, sessions, API keys, settings |
Account (/_account/) | Login, register, password reset, OAuth, OIDC/SSO, passkeys, 2FA |
| 23 plugins | RBAC + row-level security, audit, file storage, queues, jobs, email, AI, webhooks — declarative, on demand |
What you keep control of
| Asset | Where it lives |
|---|---|
| Business data | Your database (Postgres, SQLite, MySQL, Turso, MongoDB) |
| User identities & sessions | Your database |
| Audit log | Your database |
| Files | Your storage (local disk, S3, R2) |
| Secrets | Your secret manager |
| The runtime itself | Your servers, containers, or laptop |
ObjectOS never phones home. No telemetry. No license server. Air-gapped networks are a first-class deployment target — see Air-gapped.
Where to go next
| If you want to … | Read |
|---|---|
| See it actually work | Quickstart |
| Understand what's inside the box | Architecture |
| Run it in Docker | Docker |
| Deploy to Kubernetes | Kubernetes |
| Wire it to Postgres / your DB | Runtime Configuration |
| Set up SSO | Authentication |
| Lock down who sees what | Permissions |
| Call it from another service | API Access |
| Send events to other systems | Webhooks |
| Go to production | Production Readiness |
License & pricing
ObjectOS runtime is Apache-2.0 — the most permissive widely-used OSS license. Use it in commercial products, embed it, redistribute it, keep your modifications private. No per-seat fee, no license server, no "starting at $50K/year." Optional commercial support and managed hosting are available separately — see License.