MakkQ: Before purchasing Tier 5, I’d like to clarify three final points:
1. Authentication: Earlier, you said authenticated requests require a database lookup for session validation, but later you said JWTs are verified locally, and the API layer is stateless. Which architecture is currently used in production? Does an authenticated API request hit the database for session validation or not?
2. Tier 5: Can you confirm that the current Tier 5 includes 250 databases and 250,000 records per database as permanent lifetime entitlements, not just current limits?
3. Scaling: If a SaaS reaches thousands/tens of thousands of concurrent users, are there any infrastructure-level concurrency limits or unexpected usage-based charges beyond the documented record/add-on costs?
Riya_NoCodeBackend
Sep 18, 2026A: 1. Authentication Architecture: How does it work in production?
The reason both concepts were mentioned is that NoCodeBackend uses two distinct authentication mechanisms depending on how your API is accessed:
--> Client / End-User Sessions:
When your end-users log in via web or mobile apps (using session cookies or the x-session-token header), the API gateway validates the session against the database.
Why? This provides enterprise-grade security: immediate session revocation (e.g. on logout or password reset), active expiration enforcement, and dynamic user-role resolution for Row-Level Security (RLS).
--> Server-to-Server / Developer API Keys (Authorization: Bearer <secret_key>):
When your backend, scripts, or worker services call the REST API using your secret API key, requests are validated in-memory. The API gateway caches verified secret keys locally in memory, meaning authenticated server requests execute at sub-millisecond speeds without hitting the database for auth lookup on every call.
2. Tier 5 Entitlements: Are these permanent lifetime limits?
Yes, absolutely.
Your Tier 5 purchase includes:
250 Databases
250,000 Records per database
Unlimited tables and columns
Unlimited webhooks, 25 Prehooks, and 20 Database Snapshots
20 User / Team invites with customizable database allocation
These are permanent lifetime entitlements tied to your AppSumo license. If future campaigns or promotions introduce different limits or revised tier structures, your plan will never be downgraded or altered.
3. Scaling & Concurrency: Are there hidden fees or limits?
Zero Hidden Fees: You only ever pay if you voluntarily purchase optional add-on packs.
Concurrency Safeguards: Each workspace handles 15 parallel in-flight requests with an automatic 30-request FIFO buffer. Because queries execute in single-digit milliseconds (5–25ms), this comfortably serves tens of thousands of requests per hour. Dedicated /bulk/create and /bulk/update endpoints are available for heavy data ingestion.
High Growth: If your SaaS scales to tens of thousands of active concurrent users requiring dedicated resources or custom regional clustering, our team works with you directly on enterprise scaling—you will never receive a surprise automatic bill.
Please let us know if you have any further questions!
Kind regards,
Riya