Application Platform

Built for your business.
Deployed to your cloud.

Kyte is the application platform behind KeyQ's client work — data models, APIs, and web applications that run on your own AWS account. The core is open source, and your AI assistant can build on it directly.

Describe the application. Kyte builds it.

Kyte ships an MCP server, so Claude, ChatGPT, Cursor and Codex work your application directly — creating data models, writing controllers, publishing pages and provisioning sites.

Equipment Tracker Built with Kyte
A live equipment-tracking web application: summary tiles reading 5 total assets, 2 on loan, 3 available, above a table of assets with status pills, the current holder, and an overdue due-date highlighted in red.
A working internal tool, built from a chat window in about ten minutes — three data models with real foreign keys, an API with per-model access rules, a published page, and its own S3 and CloudFront site. Every schema change ran as an actual database migration.

Not a prototype tool

Everything an agent creates is a first-class object your team can open, read and edit — in a full IDE, with version history and a review step before anything goes live.

The Kyte Shipyard code IDE: an explorer tree listing pages, functions, scripts, email templates and web components beside a syntax-highlighted JavaScript editor with HTML, JavaScript and CSS tabs.
Kyte Shipyard — the builder and IDE. Pages, controllers, scripts, email templates and scheduled jobs all live here. Edits are drafts until they are published, so a change is reviewable before it reaches production.
The Kyte Shipyard model attributes screen showing a data model's columns with their SQL types, nullability, private and unsigned flags, and default values.
And underneath, real database tables — real column types, constraints and defaults, not documents in a schemaless store. Your data outlives the tool that created it.
Closed by Default

Nothing is public
until you say so

Exposing data to an anonymous visitor takes five separate, deliberate decisions. No single setting can do it.

That is the point: a mistake in one place cannot leak your data, because the other four still refuse. Accidental exposure is the most common way business applications lose records, and Kyte is built so it takes intent, not a slip.

  1. 01

    Signed requests by default. Applications start in HMAC mode, which has no anonymous path at all.

  2. 02

    Anonymous access is opt-in. It must be switched on for the application, and read-only is a separate level from writes.

  3. 03

    Each model decides for itself. A controller must explicitly waive authentication — there is no global switch that opens everything.

  4. 04

    And for which verbs. Opening reads leaves creates, updates and deletes closed unless you name them.

  5. 05

    The application still overrides. A read-only application refuses writes even when a controller permits them.

Your install. Your AWS account.

Every customer gets a dedicated Kyte installation. Your data never shares a database with anyone else's.

No shared tenancy

Each application gets its own isolated database. There is no pooled multi-tenant store holding your records next to another company's.

Your region, your rules

Deployed into your AWS account, in the regions you choose. Data residency is a configuration decision, not a support ticket.

No lock-in

The framework and client libraries are MIT licensed and public. If you ever part ways with us, the code and the infrastructure are already yours.

We build the application with you, deploy it into your cloud, and support it. For regulated work — healthcare especially — a dedicated install is usually the only answer that survives a security review.

What comes in the box

The plumbing every business application needs, already built and already audited.

Model-Driven Data Layer

Define your models and Kyte runs the real migrations — tables, columns, foreign keys and constraints — with per-account scoping applied automatically on every query.

Single Sign-On

Your application's users can sign in with Microsoft or Entra, and any standard OIDC provider by configuration. Identity binds to the immutable subject claim, never a mutable email address.

Scoped API Tokens

Grant read, draft, publish, provision or schema rights independently. Tokens carry expiry, IP allow-lists, revocation and a full audit trail — and never more access than you granted.

Build Any Front End

An API-first backend with official client libraries for JavaScript, Python, Swift, Dart and Flutter, Java, and C and C++ — so your web app, mobile app and back office share one source of truth.

Sites & Publishing

Kyte provisions S3 and CloudFront for each site and publishes your pages to it. Static delivery, custom domains and certificates, without a separate hosting stack to run.

Scheduled Work & Email

Cron jobs with dead-letter tracking and success rates, plus a built-in email template editor — the background machinery real applications need, monitored from the same dashboard.

Let's talk about what you need built

Tell us the problem. We will tell you honestly whether Kyte is the right fit — and what it would take.