castomAPI
Get your key

20 services · 8 with a public OpenAPI

The platform

The Engine is the catalogue; these are the services around it. Every castomo product is built from them, and every one of them is available to a product you build — with the account and the wallet you already have.

Every service

auth.castomapi.com

Auth

One identity for every product: sign-in, sessions, OAuth clients, projects and the revocation keys every service checks.

71 operations

billing.castomapi.com

Billing & plans

Plan entitlements for every castomo product: Stripe subscriptions in, effective quotas out, pushed to the product that enforces them.

10 operations

pay.castomapi.com

Pay

Payments between people and businesses on the platform, with Stripe underneath.

11 operations

book.castomapi.com

Book

Bookings and availability: resources, slots, reservations, reminders and refunds by policy.

22 operations

events.castomapi.com

Events

A free global events API: what is happening where, for dashboards and sites that need a calendar they did not write.

7 operations

data.castomapi.com

Data

Free global reference data: countries, languages, currencies, logistics, standards — tens of millions of records, no key.

69 operations

query.castomapi.com

Query

Read-only SQL and document queries against the customer's own MySQL, PostgreSQL or MongoDB, from a browser, safely.

7 operations

monitor.castomapi.com

Monitor

Uptime monitoring: one-minute checks, incidents, alert channels with e-mail and signed webhooks, team access.

21 operations

live.castomapi.com

Live

Real-time collaboration: presence, cursors, shared state and chat between people on the same board or page.

db.castomapi.com

DB

Document storage per project: JSON documents with a schema you declare, permissions per user, and change feeds.

assets.castomapi.com

Assets

Public rendered bytes: images, exports and files a product publishes, on a fast path with the right headers.

media.castomapi.com

Media

A royalty-free media library: search across eleven providers, import with licence and attribution, serve over JSON.

social.castomapi.com

Social

The social layer: profiles, follows, leagues, feeds and sharing that every product can plug into.

chat.castomapi.com

Chat

A chatbot and live-chat widget for any site: answers from the site's own pages, operator takeover, a wizard that brands it.

a11y.castomapi.com

Accessibility scanner

An accessibility analyzer for any URL, against WCAG and the Polish accessibility act, with a localised report.

mail.castomapi.com

Mail

Inbound mail for the platform: addresses that receive, parse and hand messages to the product that owns them.

mcp.castomapi.com

MCP

A Model Context Protocol server that exposes the platform's endpoints to any MCP-capable agent as tools.

oauth.castomapi.com

OAuth

Sign in with castomo for third-party apps: an OAuth 2.0 and OpenID Connect provider on top of Auth.

vpn.castomapi.com

VPN

WireGuard VPN for teams: every Team seat includes it, provisioned from the account, across every UpCloud zone.

app.castomapi.com

Custom endpoints

Your own JavaScript at /c/your-slug — sandboxed in isolated V8, 2 s CPU, 128 MB, a guarded fetch, billed from the same wallet.

What "one account" means here

Auth issues the identity. Every other service verifies its tokens locally and honours its revocation keys, so a sign-out ends the session everywhere at once. Billing turns a Stripe subscription into an entitlement a product reads; the wallet the Engine debits is the same wallet Pay and Book charge against. A product built on the platform inherits all of it by registering a project — there is no second account, no second invoice, no second place to look.

What "one wallet" means here

Tokens are the unit. Every metered call names its cost in its own description, debits after the response and only on success, and writes a ledger entry. The free grant tops the balance up to 1000 a month; paid balances never expire; an account may run a bounded overdraft that nets out against the next top-up rather than being refused mid-request.