Project management API built with the Lcore framework
Click any endpoint below to load it, or type your own. Login first to get a token for protected routes.
Click "Send" or use a quick action to see the response here.
Write and run Lcore framework code live. The full framework is available — create apps, routes, test with TestClient, hash passwords, and more.
This API uses HMAC-SHA256 signed tokens. Try the full auth flow below.
Click a user to login. The token will be saved automatically for API requests.
With a token, try these protected endpoints:
Login as alice (member) and try /admin/dashboard — you'll get a 403 Forbidden. Login as admin and it works.
These run in order on every request. Lower order = runs first (outermost wrapper).
All routes registered in the application. Click any to load it in the API Tester.
Config loaded from defaults + .env + environment variables. Secrets are redacted.
Loading...
The RequestCounterPlugin tracks per-route hit counts. Refresh to see updated counts.
Loading...
Real database with projects, tasks, users, comments
Multi-source config loading + dataclass validation
7 built-in + 4 custom (timing, auth, admin, audit)
Token auth, Basic auth, signed cookies, RBAC
Token bucket per-IP rate limiting on every endpoint
Body + query parameter schema validation
Task attachments with static file serving
Task assignment notifications via smtplib
Dashboard overview uses asyncio.gather
Singleton cache, scoped DB, transient trace IDs
API versioning + request counter plugins
Interactive docs at /docs (debug mode)