--- title: "DreamFactory Features | API Security, Scripting & Governance" description: "Explore DreamFactory features: role-based access control, server-side scripting, live API docs, rate limiting, and enterprise governance." url: "https://www.dreamfactory.com/api-management/features" --- [New!New feature content goes here as CTA](https://www.dreamfactory.com/features#) # DreamFactory Features DreamFactory is a secure, self-hosted AI data gateway and enterprise data access platform that instantly generates fully governed REST APIs from any database or data source. REST APIs, not SQL. Identity passthrough, not service accounts. Your security infrastructure, not ours. [Book an Architecture Session](https://www.dreamfactory.com/demo) [Try On Prem](https://github.com/dreamfactorysoftware/df-docker) [Start a Free Trial](https://dreamfactory.appsembler.com/embed/e3004a1f-e8f7-4b04-b584-7014b0167b0b/) [Self-Hosted / On-Prem](https://www.dreamfactory.com/features#self)[Database & Network API Generation](https://www.dreamfactory.com/features#api)[RBAC & Security](https://www.dreamfactory.com/features#secure)[API Scripting](https://www.dreamfactory.com/features#custom) Self-Hosted / On-Prem #### Your Infrastructure. Your Data. Deploy on-prem, in your VPC, or completely air-gapped. Your data never touches external servers. Run on bare metal, VMs, or containers. This is not an option we offer. It is the only way we work. #### Portable and Stateless Push package files between instances using the REST API or Admin Console for fast migrations across environments. Scalable and portable across your entire infrastructure. #### Governed API Publishing Expose as many APIs and API keys as you need. Apply role-based access control to every endpoint. AI and applications access data the same way: through governed REST endpoints that respect your security policies. #### Admin console Centrally manage the entire platform from one console. Complete oversight of API endpoints, access controls, and audit logs. All admin capabilities are also exposed as a REST API to automate repetitive tasks. [Try for Free](https://trial.dreamfactory.com)[Book an Architecture Session](https://www.dreamfactory.com/demo) Database & Network API Generation #### Connect to 30+ Databases Instantly Point DreamFactory at any database and get a fully documented REST API. Integrate natively with SQL Server, Oracle, Snowflake, MySQL, PostgreSQL, MongoDB, SAP HANA, and more. No custom connectors. No plumbing. #### Production-Ready in Minutes Auto-generated REST endpoints for data, schema, functions, stored procedures, and API parameters for complex filters, pagination, sorting, related table joins, and virtual foreign keys. Full CRUD operations out of the box. #### Unlimited API Creation and Volume Generate unlimited REST APIs in your environment with no artificial limits on endpoints, keys, or call volume. One consistent interface whether you are querying Snowflake or MongoDB. #### Auto-Generated OpenAPI Documentation Every connected data source gets interactive OpenAPI (Swagger) documentation automatically. Always in sync with your actual schema. No manual spec writing. [Book an Architecture Session](https://www.dreamfactory.com/demo) RBAC & Security #### Federated Access and Data Governance AI data access through APIs you control, not database connections you don't. GDPR and HIPAA compliant. Authentication suite includes OAuth, Active Directory, LDAP, OpenID, Okta, Auth0, and SAML. Your existing security infrastructure does the work. #### Complete Audit Logging Every API call is logged with real user identity. The built-in ELK stack provides flexible reporting on all API traffic. Audit logs show real people, not service accounts. You know exactly who accessed what, even when AI is the intermediary. #### Role-Based Access Control (RBAC) Granular RBAC on every API endpoint. Control exactly which tables, fields, and operations each role can access. Apply different policies for AI agents versus human users. Identity passthrough preserves row-level security. #### API Key Management APIs are secured by default with API keys and limited access. Instantly roll keys and reissue as needed. No elevated service account privileges required. [Book an Architecture Session](https://www.dreamfactory.com/demo) Scripting & Business Logic #### Server-Side Scripting Attach pre- or post-process scripts to any API endpoint. Validate input parameters, transform responses, call other APIs, and automate workflows. Supporting Node.js, PHP, and Python scripting engines. Obfuscate endpoints, enforce business rules, and shape data for AI or application consumers. #### SOAP to REST Modernize legacy services without rewrites. DreamFactory converts JSON requests to SOAP, calls the legacy service, and converts the SOAP response back to JSON. Turn any WSDL into a live, fully documented REST API instantly. [Book an Architecture Session](https://www.dreamfactory.com/demo) Deployment Options ## Run DreamFactory Anywhere Choose the deployment option that fits your infrastructure best. Run DreamFactory on any platform _\*The open-source version offers limited features. For the full experience, including access to all databases, advanced customization options, & robust security features — please book a demo with our engineers\*_ Deployment Options ## Run DreamFactory Anywhere Choose the deployment option that fits your infrastructure. On-prem, air-gapped, or in your VPC. Your data never leaves. _The open-source version offers limited features. For the full experience, including access to all databases, advanced customization options, & robust security features — please book a call with our engineers._ [Snowflake](https://app.snowflake.com/marketplace/listing/GZTYZRSG47I/dreamfactory-software-dreamfactory-rest-api-generation) [Kubernetes](https://github.com/dreamfactorysoftware/df-helm) [Docker](https://github.com/dreamfactorysoftware/df-docker) [Linux](https://github.com/dreamfactorysoftware/dreamfactory/tree/master/installers) ## FAQs DreamFactory Platform & Installer FAQs At a high level, what is DreamFactory? DreamFactory is a secure, self-hosted AI data gateway and enterprise data access platform. It automatically generates governed REST APIs from any database, secures them with your existing authentication infrastructure (OAuth, LDAP, SAML), provides identity passthrough and complete audit logging, and returns JSON/XML from REST API calls at runtime. AI and applications access data the same way: through governed endpoints you control. Why do I need to book a call with an engineer to try the product? Since DreamFactory is self-hosted software, we require a call with an engineer to discuss licensing, installation, and pricing. This will ensure you have all the information needed to be successful. If you are not ready for a call, we recommend you try our hosted trial. It's a limited version of the product, but it will give you a taste of how our automatic API generation, role-based access, and documentation works Where can I get more information about how to install DreamFactory? Start in our documentation, but if you don't see your answer, please ask a question in the intercom chat bubble or schedule a call with our support team. Can you tell me how DreamFactory scales? Yes, we have a detailed White Paper breaking down how Dreamfactory scales with performance benchmarks. Here is another [White Paper](https://www.dreamfactory.com/resources/whitepapers/designing-web-scale-workloads-with-microservices) specific to scaling microservices. Can I customize the APIs? Yes! DreamFactory offers a robust scripting engine with support for PHP, Python, and NodeJS to fully customize your APIs. ### Still have questions? **Book a call with our Solutions Engineers and get your questions answered** [Contact Our Team](https://www.dreamfactory.com/demo)