Features
The complete toolkit for connected apps
A comprehensive platform that handles the hard parts of building multi-tenant, enterprise-ready applications.
Intelligent request routing
The VAPE proxy intelligently routes every request to the correct backend application, handling authentication and authorization at the proxy layer.
- Path-based routing with regex matching
- Automatic header injection
- SHA256 request signing
- Built-in CSRF protection
- Cookie passthrough config
- Response caching controls
Enterprise security, built in
A complete identity and access management system with multi-provider authentication, automated provisioning, and granular permissions.
- Multi-provider OIDC/SSO
- SCIM user provisioning
- Scoped role-based access
- Member lifecycle management
- Complete audit trail
- Email domain whitelisting
Workspace isolation by default
Every request is automatically scoped. Subdomain resolution, per-tenant config, and context injection mean you never think about isolation.
- Subdomain-based resolution
- Per-tenant app config
- Workspace-scoped caching
- Brand & department segmentation
- Automatic context injection
Live updates via Conduit
Built-in WebSocket support enables real-time communication. Events propagate instantly across the entire cluster via NATS.
- WebSocket at proxy layer
- Cluster-wide broadcasting
- Cross-instance state sync
- Real-time cache invalidation
Discover and manage apps
A centralized marketplace for discovering, installing, and managing applications. Vendor organization and permission-based visibility.
- App discovery & installation
- Vendor categorization
- Permission-based visibility
- Per-app health monitoring
- Automatic retry & backoff
Scale without complexity
Stateless architecture with NATS-based coordination. Scale horizontally without worrying about state, caching, or deployment.
- NATS distributed sync
- Horizontal scaling
- Health broadcasting
- Auto cache invalidation
- Zero-downtime deploys