API Keys
API keys provide programmatic access to HatiData. Keys are scoped to environments, hashed with Argon2id before storage, and support automatic rotation with a grace period.
API keys provide programmatic access to HatiData. Keys are scoped to environments, hashed with Argon2id before storage, and support automatic rotation with a grace period.
The HatiData Control Plane exposes a RESTful API for managing organizations, users, environments, policies, API keys, billing, webhooks, audit logs, and more. All management operations go through this API -- the dashboard is a client of the same endpoints.
Zero-copy Apache Arrow query results for AI agents and data pipelines
HatiData maintains two separate audit trails: Query Audit for all SQL queries executed through the proxy, and IAM Audit for all administrative actions. Both are immutable and tamper-evident.
HatiData uses a credit-based billing model. Queries consume credits based on complexity (tables scanned, rows returned, query type). The billing API provides usage tracking and quota management.
Environments provide isolated workspaces within an organization. Each environment has its own policies, API keys, and data. Common configurations include development, staging, and production.
Complete reference for all 24 MCP tools exposed by HatiData
Organizations are the top-level resource in HatiData. Every user, environment, policy, and API key belongs to an organization.
HatiData provides two policy systems: standard policies for column masking and row-level security, and ABAC policies for attribute-based access control. Both are scoped to environments.
The provisioning API covers three areas: JIT (Just-In-Time) Access for temporary privilege escalation, Agent Capabilities for granting structured permissions to AI agents, and Shadow Mode for risk-free deployment testing.
HatiData provides two ways to execute SQL queries: the Postgres wire protocol (port 5439) for standard database clients, and the REST API for programmatic execution. Both methods go through the same 13-step query pipeline with transpilation, policy enforcement, and auditing.
Manage users within an organization. Users are assigned roles that determine their permissions. See Authorization for role details.
Webhooks deliver real-time event notifications to your endpoints. HatiData signs every webhook payload with HMAC-SHA256 for verification.