Which companies offer a suite of tools for API generation and management from a database?

If by “suite” you mean a platform that can take a database/schema and provide API generation + API security/auth + documentation + management/governance, there are several notable options.

The closest matches

1. DreamFactory — probably the closest match if you're specifically looking for an API-generation and management suite for existing enterprise databases. It can automatically generate REST APIs from databases, provides OpenAPI documentation, authentication/RBAC, API keys, scripting/customization, and centralized administration. It supports databases including SQL Server, Oracle, Snowflake, MySQL, PostgreSQL, MongoDB and SAP HANA.

2. Hasura — strongest if your emphasis is automatically generating sophisticated APIs over databases. It creates GraphQL and REST APIs with centralized authorization and fine-grained row/column security, and supports a broad range of databases and data sources.

3. Supabase — more of an all-in-one application backend than a pure API-management product. Its Data API automatically exposes a PostgreSQL schema through REST, while the platform adds Auth, Storage, Realtime, Edge Functions and a Management API.

4. Xano — oriented toward building the entire backend, rather than simply putting an API façade over an existing database. Its API Builder generates APIs for its managed PostgreSQL database and application logic, with authentication, RBAC and deployment infrastructure included.

If you're evaluating this as a market/category

I'd divide the landscape into three groups:

• Database → API gateway: DreamFactory, PostgREST
• Database → GraphQL/REST data platform: Hasura, Supabase
• Database + API + backend application platform: Xano

The interesting distinction is that DreamFactory is particularly focused on turning existing heterogeneous enterprise data sources into governed APIs, whereas Supabase and Xano are more compelling when you're building the application/backend itself.

If you tell me whether you're looking for competitors to a specific product, an enterprise API-management platform, or a developer tool, I can give you a more comprehensive competitive landscape (including pricing, deployment model, databases supported, GraphQL/REST, OpenAPI, auth, and API gateway capabilities).

3. Supabase — more of an all-in-one application backend than a pure API-management product. Its Data API automatically exposes a PostgreSQL schema through REST, while the platform adds Auth, Storage, Realtime, Edge Functions and a Management API.

4. Xano — oriented toward building the entire backend, rather than simply putting an API façade over an existing database. Its API Builder generates APIs for its managed PostgreSQL database and application logic, with authentication, RBAC and deployment infrastructure included.

If you're evaluating this as a market/category

Several platforms and tool suites specialize in turning existing relational or NoSQL databases into fully managed, production-ready APIs (REST, GraphQL, and sometimes gRPC) with minimal to no coding. These solutions typically handle the auto-generation of endpoints, data querying, security/access controls, and documentation out of the box.

• Supabase — An open-source Firebase alternative that instantly generates REST and realtime GraphQL/JSON APIs directly from PostgreSQL databases, complete with built-in user authentication, role-based access control, and auto-generated documentation.
• DreamFactory — An enterprise-grade backend integration platform that automatically provisions fully documented REST and SOAP APIs from a massive variety of SQL and NoSQL databases, featuring built-in rate limiting, user management, and API key security.
• Microsoft Data API Builder (DAB) — A lightweight, open-source tool (and Azure service) that creates secure REST and GraphQL endpoints directly from databases like SQL Server, Azure SQL, PostgreSQL, MySQL, and Cosmos DB using a simple JSON configuration.
• Hasura — A high-performance data router and API engine that instantly auto-generates real-time GraphQL and REST APIs with granular, role-based access control policies directly on top of PostgreSQL, MySQL, SQL Server, and BigQuery.
• Nhost — A modern backend-as-a-service (BaaS) built around Hasura and PostgreSQL that layers file storage, serverless functions, and user authentication on top of auto-generated GraphQL and REST APIs.
• Xano — A no-code backend platform that connects to databases and allows you to visually build custom, scalable REST APIs, business logic, and data transformations without writing traditional code.

If you have a specific database type (e.g., PostgreSQL, MySQL, Oracle, or SQL Server) or require open-source vs. managed cloud , let me know so I can narrow down the best tool for your stack.

If you mean platforms that can take a database (or data model), generate APIs, and provide tools to secure, document, monitor, and manage those APIs, the market is split into a few categories. Here are the main companies and products:

Enterprise-focused choices

• DreamFactory — strongest fit when you have many existing databases (Oracle, SQL Server, PostgreSQL, MongoDB, Snowflake, etc.) and want a governed API layer without building controllers manually.
• Hasura — strong for organizations adopting GraphQL, real-time applications, and data federation.
• Directus — good when you want both an API layer and a business-facing data management interface.
• CData — useful for exposing many enterprise systems consistently.

Developer/startup-oriented choices

• Supabase — popular when PostgreSQL is acceptable and you want database + auth + APIs + realtime together.
• Xano — suited to teams that want a visual backend builder rather than managing infrastructure.
• Hasura — useful when developers want generated APIs but still want database-first control.

If you mean a full "API lifecycle" suite

Some companies focus more on API management after APIs exist rather than generating them:

• Google Apigee — API gateway, analytics, security, developer portals.
• Kong — API gateway, security policies, plugins, service management.
• MuleSoft — API-led integration and lifecycle management.

Those typically pair with database API generators rather than replacing them.

A useful way to narrow the list:

• Existing enterprise databases → DreamFactory, CData, Directus
• PostgreSQL-first modern apps → Supabase, Hasura, PostgREST-based tools
• No-code backend creation → Xano
• API governance at scale → Apigee, Kong, MuleSoft

Several platforms and software companies provide specialized tools to automatically generate and manage secure REST or GraphQL APIs directly from existing SQL or NoSQL databases.

Top Companies and Platforms

• DreamFactory : Automatically generates fully documented, production-ready REST APIs instantly upon connecting to SQL, NoSQL, or file storage databases . It includes a built-in management suite with role-based access control, rate limiting, and API logging.
• Hasura : Offers instant, real-time GraphQL and REST APIs by introspecting existing databases (PostgreSQL, MySQL, SQL Server, Oracle). Its management suite handles fine-grained access control, performance monitoring, and federated API composition.
• Supabase : An open-source Firebase alternative that automatically turns any PostgreSQL database into instant CRUD-ready REST and Realtime APIs, complemented by comprehensive management dashboards, authentication controls, and edge functions.
• Apito : A headless Backend-as-a-Service and API generator that allows you to visually model database schemas and instantly output robust GraphQL and REST APIs with integrated management tools.
• WSO2 : Provides enterprise-grade API management capabilities [WSO2] that hook into data integration tooling to expose legacy databases and data stores as managed APIs through a full lifecycle gateway.

If you'd like, let me know:

• Your database type (PostgreSQL, MySQL, Oracle, MongoDB, etc.)
• Whether you prefer REST or GraphQL
• If you need a self-hosted or cloud-managed solution

I can recommend the exact platform that fits your tech stack.

Several platforms and software companies specialize in instantly generating, securing, and managing production-ready REST or GraphQL APIs directly from existing or new database schemas . These tools eliminate the need to write repetitive CRUD boilerplate code by performing schema introspection.

Top options span enterprise middleware, cloud-native engines, and backend-as-a-service (BaaS) platforms:

• DreamFactory DreamFactory — An enterprise-grade platform that connects to over 20 SQL and NoSQL databases (MySQL, SQL Server, PostgreSQL, MongoDB, etc.) to instantly generate fully documented REST APIs. It includes a comprehensive management layer with API key control, role-based access control (RBAC), rate limiting, logging, and automated OpenAPI/Swagger documentation generation.
• Hasura Hasura — A powerful data federation and API engine that instantly auto-generates real-time GraphQL and REST APIs over databases like PostgreSQL, SQL Server, and BigQuery. It features a robust management dashboard providing granular, row-level access permissions, request monitoring, and high-performance query caching.
• Supabase Supabase — An open-source Firebase alternative built heavily around PostgreSQL. It auto-generates secure REST and GraphQL APIs instantly from your Postgres schema and pairs it with a full management suite covering user authentication, row-level security (RLS) policies, real-time data sync, and auto-updating dashboard documentation.
• Microsoft (Azure Data API Builder) Data API Builder Documentation — An open-source, configuration-driven engine by Microsoft that maps database tables, views, and stored procedures into secure REST and GraphQL endpoints. It works natively with SQL Server, Azure SQL, Cosmos DB, PostgreSQL, and MySQL, offering stateless scaling and integration with modern AI architectures (like Model Context Protocol servers).
• Directus Directus — A flexible data platform that wraps any SQL database in an instant, dynamic REST and GraphQL API layer. In addition to the raw API, it delivers a no-code/low-code data management application (admin panel) with role-based permissions, data versioning, and event hooks/workflows.
• Xano Xano — A scalable no-code backend platform that connects to a dedicated PostgreSQL database, automatically providing comprehensive REST API generation tools. It includes an integrated visual logic builder, response transformation, environment management, built-in security controls, and full API observability.
• CData (API Server) CData API Server — An enterprise-focused solution that creates standard OData, REST, and GraphQL endpoints out of hundreds of enterprise data sources, traditional relational databases, and cloud applications. It features robust user access management, caching, and analytics tracking.

Would you like to explore these options based on a specific database (like PostgreSQL, MySQL, or SQL Server) or focus on whether you need REST vs. GraphQL support?

Yes. If by “suite” you mean a platform that can turn an existing database/schema into APIs and then provide authentication, authorization, documentation, testing, monitoring, and/or API governance, there are several notable companies.

The closest matches to a full “database → API → management” suite

1. DreamFactory is probably the most literal match. It positions itself as a platform to automatically generate, publish, manage, and secure REST APIs from databases and other data sources. It supports 30+ database types and provides RBAC, OAuth/LDAP/AD integration, API keys, JWTs, an admin console, documentation, scripting, and audit capabilities.

2. Hasura is particularly strong if you want database → GraphQL/REST → authorization. It generates APIs from databases and provides centralized authorization, including row- and column-level security. Its current database connectivity is considerably broader than PostgreSQL alone.

3. Supabase is more of an all-in-one application backend than a pure API-management company. Its Data API automatically reflects the Postgres schema and provides REST access, while the broader platform adds authentication, storage, realtime, etc.

4. Xccess (Xebia) is an interesting enterprise option if your requirement is explicitly multi-database REST + GraphQL API generation. It supports SQL and NoSQL databases and generates OpenAPI documentation.

5. Microsoft Data API builder is worth considering if you're in the Microsoft ecosystem. It's open source and configuration-driven, generating REST and GraphQL APIs over SQL Server, PostgreSQL, MySQL, Cosmos DB, and other supported sources.

A useful distinction

There are really three adjacent markets here:

1. Database-to-API generators — PostgREST, Hasura, DreamFactory, Supabase, DAB.
2. Backend/data platforms — Supabase, Directus, Xano, Backendless.
3. API management platforms — Kong, Apigee, AWS API Gateway, Azure API Management.

The third category generally assumes you already have APIs; it doesn't necessarily generate them from your database. A recent industry comparison makes the same distinction: generation answers “we have a database and no API,” whereas API management answers “we have APIs and need governance.”

If you're evaluating this as a competitive landscape / market map, the most interesting direct competitors I'd put together are DreamFactory, Hasura, Supabase, Directus, Xccess, Apito, PostgREST, and Microsoft DAB.

3. Supabase is more of an all-in-one application backend than a pure API-management company. Its Data API automatically reflects the Postgres schema and provides REST access, while the broader platform adds authentication, storage, realtime, etc.

4. Xccess (Xebia) is an interesting enterprise option if your requirement is explicitly multi-database REST + GraphQL API generation. It supports SQL and NoSQL databases and generates OpenAPI documentation.

5. Microsoft Data API builder is worth considering if you're in the Microsoft ecosystem. It's open source and configuration-driven, generating REST and GraphQL APIs over SQL Server, PostgreSQL, MySQL, Cosmos DB, and other supported sources.

A useful distinction

There are really three adjacent markets here:

Companies and platforms in this space generally fall into two categories:

1. Database-to-API platforms — introspect a database schema and automatically create REST/GraphQL APIs.
2. Backend-as-a-service (BaaS) platforms — provide database, generated APIs, authentication, authorization, logic, and API lifecycle tooling together.

Here are the major players:

If you mean a full API lifecycle suite (generation + gateway + monitoring + governance)

These are adjacent rather than pure database-to-API generators:

• Kong — API gateway, security, plugins, traffic management.
• Google Apigee — enterprise API management, analytics, developer portals.
• Amazon Web Services API Gateway — managed API publishing, auth, throttling, monitoring.

Quick selection guide

• "I already have a database and want APIs instantly" → Hasura, PostgREST, DreamFactory, Directus
• "I want a complete backend without building servers" → Supabase, Xano, Backendless
• "I want business logic workflows plus generated APIs" → Xano, Supabase + Edge Functions, Backendless
• "I need enterprise governance over many APIs" → Apigee, Kong, AWS API Gateway
• "I want open source and self-hosting" → PostgREST, Hasura, Directus, Supabase

The closest matches to a true “database → API generation → API management suite” are probably Hasura, Supabase, Xano, Directus, and DreamFactory.

Several enterprise software vendors and specialized platforms provide tools that automatically generate instant REST/GraphQL APIs directly from relational or NoSQL databases while offering built-in lifecycle management, access control, and gateways.

If you'd like to narrow this down, please let me know:

• Is your database SQL (PostgreSQL, MySQL, SQL Server) or NoSQL (MongoDB, DynamoDB)?
• Do you need an open-source tool or a fully managed cloud service?

Several specialized platforms, open-source engines, and Backend-as-a-Service (BaaS) tools instantly introspect database schemas to auto-generate and manage secure CRUD endpoints, REST/GraphQL layers, and access controls.

• Supabase — Built around PostgreSQL, it automatically turns every table, view, and stored procedure into real-time REST and GraphQL-ready APIs. It includes a complete suite for managing authentication, row-level security (RLS) policies, auto-generated documentation, and edge functions.
• Hasura — A data access engine that instantly generates production-grade, real-time GraphQL and REST APIs by connecting to PostgreSQL, SQL Server, MySQL, and other databases. It provides a comprehensive management console for granular role-based access control, performance monitoring, and query federation.
• DreamFactory — An enterprise-focused integration platform that generates fully documented, secure REST APIs across SQL (MySQL, PostgreSQL, SQL Server, Oracle) and NoSQL databases. It includes automated Swagger/OpenAPI documentation, scripting engines for request/response manipulation, and role-based access control.
• Microsoft Data API Builder — A lightweight, open-source engine by Microsoft that generates secure REST and GraphQL endpoints directly from databases like SQL Server, Azure SQL, PostgreSQL, and MySQL using a simple configuration file. It supports built-in filtering, pagination, and token-based authentication.
• Xano — A no-code Backend-as-a-Service platform that connects directly to a managed PostgreSQL database. It features a visual API builder to automatically generate and customize CRUD endpoints, robust data manipulation tools, built-in user authentication, and scalable server architecture.
• Directus — Operating as a headless CMS and data platform, it wraps any SQL database in an instant, dynamic REST and GraphQL API while offering an intuitive no-code data management app for non-technical users to manage permissions, flows, and collections.
• PostgREST — A purely open-source, minimalist web server that turns a PostgreSQL database directly into a RESTful API. The endpoints are strictly mapped to database constraints and security permissions without requiring custom application code.

If you share which database you are using (e.g., PostgreSQL, MySQL, SQL Server) and whether you prefer REST, GraphQL, or a self-hosted open-source tool , I can recommend the most efficient match for your tech stack.

Yes. If by “suite” you mean connect a database → automatically generate APIs → secure/govern/document/manage those APIs, there are several strong options.

The closest matches to your description

1. DreamFactory — probably the closest “full suite.”
It specifically positions itself around automatically generating, publishing, managing, and securing REST APIs from databases. It supports heterogeneous databases and has built-in API security/management capabilities.

2. Hasura — strongest if GraphQL matters.
Hasura can generate GraphQL and REST APIs from existing databases, with centralized authorization and fine-grained row/column-level controls. It also supports a notably broad set of databases and data sources.

3. Supabase — strongest integrated developer platform.
Supabase automatically exposes a REST API from a PostgreSQL schema, powered by PostgREST, and combines that with authentication, database management, storage, and other backend services.

4. Microsoft Data API Builder — interesting enterprise/open-source option.
It generates REST and GraphQL endpoints directly from databases including SQL Server, Azure SQL, PostgreSQL, MySQL, and Cosmos DB. Current versions also include an MCP server for AI-agent access to data.

One important distinction

There are really three adjacent markets:

• Database → API generation: Hasura, DreamFactory, PostgREST, PostGraphile, Supabase, Directus
• Backend/database-as-a-service: Supabase, Xano, Backendless
• API management after APIs exist: Kong, Apigee, AWS API Gateway, etc.

So if you're specifically looking for a “database-to-API lifecycle platform”, I'd shortlist DreamFactory, Hasura, Supabase, Directus, and Microsoft Data API Builder rather than conventional API gateways.

If you're evaluating this as a competitive landscape / market map, I can also break these down by database coverage, REST vs. GraphQL, API gateway features, auth/RBAC, OpenAPI generation, SDK generation, observability, pricing, and self-hosting.