DreamFactory is an API management platform used to generate, secure, document, and extend APIs. The platform is used within a wide variety of sectors, including banking, auto manufacturing, online gaming, consulting, and government.

Perhaps best known for its API generation capabilities, the platform can generate APIs for 20 databases including MySQL, Microsoft SQL Server, Oracle, and MongoDB, among others. Generators are also available for Excel, AWS S3, email delivery providers, and IoT.

Authentication and security is another core feature. APIs can be authenticated using API keys, Active Directory, LDAP, OAuth, OpenID Connect, SAML 2.0, and Okta. A robust yet convenient set of role-based access controls (RBACs) allow administrators to easily create highly tailored API access rules.

DreamFactory's scripting engine supports PHP, Python (version 2 and 3) and NodeJS. Developers can use the engine to create entirely scripted APIs which incorporate third-party libraries and packages. The scripting engine can also be used to extend existing endpoints, allowing developers to implement API composition, apply data masking and hiding, response transformation, and more.

Recently added features include restricted administrators, API scheduling, API auditing, and API generation connectors for Snowflake, Hadoop, and Apache Hive.

Main features: - All types of HTTP requests: GET, POST, PUT, PATCH, DELETE, HEAD, OPTIONS, COPY, LINK, UNLINK, PURGE, LOCK, UNLOCK, PROPFIND, VIEW. - Powerful GraphQL editor with full-scale experience: body editor with Queries, Mutations, Subscriptions and syntax support; variables editor; documentation explorer; request settings and metadata. - WebSocket testing tool. Handles connection and message exchange via WS or WSS. - API calls with any kind of request data encoding and transfer type (query params, URLEncoded params, FormData, raw data, send files from device storage, cloud, remote server). - Settings. TLS can be skipped, redirects can be disabled, timeouts are adjustable. Weak SSL verification can be enabled and replaced with self-signed certificate. - Import request or collection by curl, link or file from your device. And naturally, there is any type of collection for you: Swagger, OpenAPI, Postman, YAML. - Need to share request in seconds? One tap and done. Deep link and cURL command supported. - Integrations: Shortcuts, Widgets, Apple Watch app.

Additional little things: - Autocomplete for most common headers keys. - Syntax highlighting; Auto formatting. - Optimized for viewing on any device screen. - Cookies. Collect, edit, create. - Request metrics. Measure request duration, response size, status code changing. - History of all request calls. - Request authorisation. Basic Auth with password and username. OAuth with header or query access token.