Everything you need. Nothing you don't.

A complete CMS backend. Zero frontend baggage.

BlogAPI gives your team a powerful content backend with a REST API that delivers clean JSON to any frontend. Built by NonStop Corp, Nagpur.

Start building free View pricing

Content Management API & Developer Tools Teams & Organizations Security Notifications Integrations

Content Management

Write, organise, and publish — your way

A powerful dashboard built for content teams. Block-based editing, markdown support, SEO controls, and media management — all in one place.

Rich Content Editor

Notion-like block editor with markdown support, inline formatting, embeds, and code blocks. Write naturally, publish instantly.

SEO Metadata Control

Set custom meta titles, descriptions, OpenGraph images, and canonical URLs per post directly from the dashboard.

Media Asset CDN

Upload images once. We auto-resize, convert to next-gen formats (WebP/AVIF), and serve via CDN globally.

Draft & Publish Workflow

Keep posts in draft until ready. Schedule publish dates or go live instantly with a single click.

API & Developer Tools

A REST API built for speed and simplicity

Clean, predictable JSON responses. Scoped API keys. Edge-cached delivery. Everything a frontend developer needs — nothing they don't.

Edge-Cached REST API

Every content request is served from the edge. Sub-50ms latency globally so your frontend never waits on your CMS.

Scoped API Keys

Generate read-only API keys scoped to individual projects. Restrict keys to specific allowed origins for extra security.

Framework Agnostic

Unopinionated JSON output. Works with Next.js, Nuxt, SvelteKit, Astro, React Native — any client that can make an HTTP request.

Advanced Querying

Filter by category, tag, author, date range, and status. Paginate with cursor or offset. Sort by any field.

Teams & Organizations

Built for teams of every size

Multi-tenant organizations with role-based access control. Invite teammates, assign roles, and manage permissions at both the org and project level.

Multi-Tenant Organizations

Create multiple organizations under one account. Each org has its own members, projects, and billing — fully isolated.

Role-Based Access Control

Four roles: Owner, Admin, Editor, Viewer. Assign at the org level and override per-project for fine-grained control.

Project-Level Permissions

Override a member's org role for specific projects. Give a viewer editor access on one project without changing their org role.

Email Invite System

Invite teammates by email. Invitations are time-limited, tracked in Redis, and delivered with branded email templates.

Security

Security baked in, not bolted on

From hashed API keys to reCAPTCHA bot protection and Redis rate limiting — every layer of the platform is hardened by default.

Google reCAPTCHA v2 & v3

All authentication forms are protected by Google reCAPTCHA. v3 assigns a risk score; submissions below 0.5 are automatically rejected.

Hashed API Keys

API keys are stored as bcrypt hashes. The plaintext key is shown exactly once at creation — we never store it.

JWT Session Management

Access tokens expire in 15 minutes. Refresh tokens rotate on every use. View and revoke individual sessions from your account.

Redis Rate Limiting

Every sensitive endpoint is rate-limited per IP using Redis. Signup, login, password reset, and contact forms all have independent windows.

Notifications

Stay informed without the noise

Per-user notification preferences with granular controls. Get alerted on org activity, team updates, and security events — or silence what you don't need.

In-App Notification Centre

A dedicated notifications panel with read/unread state, timestamps, and one-click mark-all-read.

Granular Preferences

Toggle notifications independently: push, platform, welcome messages, org activity, team updates, and security alerts.

Security Alerts

Get notified on new logins from unrecognised devices, password changes, and API key creation or revocation.

Email Notifications

Critical events — email verification, password reset, org invites — are delivered via branded transactional emails.

Integrations

Plug into your existing workflow

Google OAuth, SMTP email delivery, CDN media hosting, and a REST API that fits into any CI/CD pipeline or deployment workflow.

Google OAuth

SMTP Email Delivery

Works with any SMTP provider — Gmail, SendGrid, Mailgun, Postmark. Configure host, port, and credentials in your .env.

CDN Media Delivery

Uploaded assets are served via a global CDN with automatic format conversion and responsive resizing.

REST API for CI/CD

Trigger content updates, manage API keys, and query posts programmatically — fits naturally into any deployment pipeline.

How BlogAPI compares

See how we stack up against traditional and headless CMS alternatives.

BlogAPI

WordPress

Contentful

API-first architecture

Edge-cached delivery

Scoped API keys

Built-in reCAPTCHA protection

Redis rate limiting

Role-based access control

Multi-tenant organizations

Framework agnostic output

Zero plugin dependencies

Free tier available

Ready to build the perfect blog?

Free to start. No credit card required. Upgrade when your team grows.

Start for free See pricing

BlogAPI.