
rx1-apigateway
API gateway
Every request passes through the gateway before it reaches application code. Identity, permissions and request validity are enforced centrally, so business logic stays focused on the business.
- Encryption, cross-site rules and rate limits on every call
- Sign-in tokens and permission policies checked on every request
- Requests checked against your API description, with API docs generated
- Incoming webhooks, with ready presets for GitHub, Stripe, Slack, Google and Microsoft
- Scheduled jobs that run exactly once, even across several servers
- Live updates to the browser, and signed outgoing webhooks with retries
Replacesan API layerauth middlewarea job schedulerwebhook plumbing

folder services
Services
Business logic is organized as services: one contract per service and one handler per action, in the language your team already uses.
- Handlers in Node, Java or Python
- Contract-first design, so APIs can be published before implementation
- Unimplemented actions return a clear, standard response
- Background execution for long-running work, with full tracking
Replacesserver boilerplateroutingrequest parsing

rx1-rql · rx1-dbs
Data
A single query language for all application data, with enterprise controls enabled through configuration rather than custom code.
- Filters, related records, totals, paging, nested writes and batch transactions
- Optimistic concurrency control and idempotent writes
- Plugins for multi-tenancy, row-level security, field encryption and personal-data masking
- Audit and full change history on any record
- Tenants in one schema, a schema each or a database each
- Postgres, with read replicas and caching
Replacesa data access layertenant isolationaudit historyfield encryption

rx1-iam
Identity
A complete identity and access management service, or integration with the identity provider your organization already uses.
- OAuth 2.1 and OpenID Connect
- Passwords, one-time codes by email, SMS or WhatsApp, and authenticator apps
- Fine-grained, policy-based authorization
- Hosted sign-in pages and an admin console, with admins per organization
- User provisioning with SCIM, and versioned terms and consent
- Federation with your existing OpenID Connect provider
Replacesa login systemuser admina permissions engine

rx1-flowengine
Workflows
Approvals and multi-step business processes, defined as versioned workflows and executed with built-in deadlines and escalation.
- Tasks for people, with approvers picked from the org chart
- Decision tables, timers, parallel branches and sub-processes
- AI agent steps inside a workflow
- Deadlines in working hours, with escalation
- A personal task inbox, with approvals by email, SMS, Slack or Teams
- Workflow testing, and replay of real cases against new versions
Replacesan approval engineescalation logica task inbox

rx1-org
Org chart
A structured model of your organization, with people, positions and units over time, so every approval is routed to the right person.
- Positions, people and units with dates, drafts and reorganizations
- Approver resolution by manager, reporting chain or unit role
- Sync from Microsoft Entra, Google Workspace, Okta or SCIM, or import a spreadsheet
- An org chart and analytics, exported to PDF, PowerPoint, images or CSV
Replacesan org directoryapprover routingdirectory sync

rx1-agent · rx1-mcp · rx1-knowledge
AI layer
Embed AI assistants and agents that operate strictly within each user's permissions, with approval and rollback for every change they make.
- An in-application assistant with streaming responses
- Models from Anthropic, OpenAI, Azure, Gemini, Bedrock or Vertex
- Customer-managed AI keys, per tenant
- Approval before agent actions, and rollback afterward
- Keyword, fuzzy and semantic search, all within Postgres
- Knowledge from your documents, including SharePoint and OneDrive
- A secure MCP endpoint for external AI agents
- Complete agent activity logs, budgets and evaluations
ReplacesAI plumbingguardrailssearch

rx1-connect · notify
Integrations
Integrate with the systems you already run, and deliver business notifications across every channel your teams use.
- Connectors made from an API description, with retries and a circuit breaker
- Connected accounts with OAuth
- Ready-made pieces from Activepieces and Apache Camel
- Business messages by email, SMS, Slack and Teams
ReplacesAPI clientsretry logica messaging service

rx1-watcher
Watcher
Complete operational visibility across every component, with an audit record that stands up to scrutiny.
- Logs, traces and metrics, with Prometheus and OpenTelemetry export
- A tamper-evident audit log
- A browser portal to explore it all
- An AI endpoint over the records, to help investigate issues
Replaceslogging setuptracingan audit trail

rx1-ui
UI kit
Screens are defined as structured specifications and compiled into a modern React application, ensuring a consistent, enterprise-grade experience.
- A full library of components and screen templates
- Built on React, shadcn, Radix and Tailwind
- Account, security, administration and public pages included
- In-application versioning and release notes
Replacesa design systemaccount pagesadmin screens

rx1
Command line
A single command-line tool supports the full application lifecycle, from project creation to production health checks.
- Create, run and check a project:
rx1 new, rx1 dev, rx1 doctor
- Serve in production and build images:
rx1 serve, rx1 image build
- Version pinning per project, with controlled upgrades
- Database, identity, workflow and AI tools in one place
Replacesproject scaffoldingdev toolingrelease scripts