API behind a JWT you did not issue

Auth0, Entra, Cognito or your own issuer in front of an endpoint: signature and claims verified against a JWKS, scope checked separately, rows scoped to the proved subject.

Uses a workspace database. Forking copies the blocks, never the author's rows — your copy starts with an empty database, and the blocks create what they need on their first call. Included from the Pro plan up.