Everything your team needs, in one place

A full-width editor with tables, callouts and media, over a document model that can check its own accessibility.

Content types are declared in your repository, generate real Postgres tables, and ship with your code.

Compose filters with and, or and nested groups, reach through relations, and share the exact view you were looking at.

Folders, assets and alt text, with the bytes on your disk or in your bucket rather than in the database.

One row per language, with each field marked shared or per-language, and a fallback chain when one is missing.

A readiness check that runs the server’s own validation, and a status that admits the state everyone else hides.

Branch protection for content: a content type can require N approvals before anything of that kind goes live.

Every save writes an immutable snapshot of the whole entry, in the same transaction as the change.

REST and GraphQL over one implementation, with the same token, the same permissions and the same visibility rules.

Decide who may read a published entry. One predicate, enforced on REST, GraphQL and MCP alike — relation hops included.

A signed POST to your endpoint when content changes, sent from a queue that never holds a transaction open for somebody else’s server.

Content out in four formats and back in through the same writer every editor uses — one hop deep, matched on natural keys, never past your own permissions.

Three roles, 34 permission keys, checked in the API rather than in the interface.

Invite-only accounts, sessions you revoke with a delete, and three identity-provider adapters that replace the credential check without replacing the way in.

Separate brands, clients or markets in one installation, with membership deciding where each person may act.

A searchable record of who changed what, and a dashboard of how the content itself is doing.

Write down what your team counts as wrong, and see it flagged wherever that content is touched — without blocking anybody.

Your servers, your Postgres database, your files. Nothing calls home, and there is no hosted edition.

An assistant inside the editor that holds exactly your permissions — never more, and never its own.

Apograph is an MCP server. An outside agent connects with an API token and works through the same permission-checked tools.

Every capability in the product is a plugin on the same public contract your own code uses.