PostgREST review: instantly turn a PostgreSQL database into a REST API. Features, setup, pricing and alternatives compared for 2026.
PostgREST is an open-source web server that inspects an existing PostgreSQL database and automatically exposes its tables, views and functions as a RESTful HTTP API, removing the need to hand-write CRUD backend code.
Created by Joe Nelson around 2014 and now maintained by a small open-source team including Steve Chavez, PostgREST has become widely known as the API layer that powers Supabase, contributing to its adoption well beyond its original standalone use case.
PostgREST automatically generates REST endpoints for database tables, views and stored procedures, supporting filtering, sorting, pagination and resource embedding (joining related tables) entirely through URL query parameters, with no custom route code required.
Authorization is delegated to PostgreSQL itself: PostgREST decodes JSON Web Tokens to determine a database role for each request and relies on Postgres row-level security and grants, keeping permission logic declared in a single place rather than duplicated in application code.
PostgREST is completely free and open source under the MIT license, with no paid tier, since it is a self-hosted developer tool rather than a hosted commercial product.
The only costs involved are for the underlying PostgreSQL database and whatever infrastructure a team uses to run the PostgREST server itself, whether self-hosted or as part of a platform like Supabase that bundles it into a broader paid or free hosting plan.
Yes, PostgREST is free and open source under the MIT license with no paid tier.
PostgreSQL is the relational database itself. PostgREST is a separate tool that sits in front of a PostgreSQL database and automatically exposes it as a REST API.
PostgREST was created by developer Joe Nelson (begriffs) around 2014 and is now maintained by a small open-source team including Steve Chavez.
No, PostgREST automatically generates REST endpoints from your database schema, removing the need to hand-write CRUD backend code for most use cases.
Yes, PostgREST powers the auto-generated REST API layer inside Supabase.
It decodes JSON Web Tokens to assign a database role to each request and relies on PostgreSQL's own row-level security and permission grants.
Hasura and PostGraphile offer similar database-to-API generation but produce GraphQL APIs instead of REST, and hand-built frameworks like Django REST Framework are a manual alternative.