Teams & Billing — Plans, Sharing & Access Control

// Project Visibility

Every project has a visibility setting that controls who can invoke its APIs and functions via the invoke URL.

// Endpoint-Level Visibility

Each Mock API can override the project's visibility with its own setting:

Set endpoint visibility in the Mock API Editor header using the Inherit / Public / Private selector.

// API Key Authentication

Every project has an API key for authenticating external requests (e.g. from Postman, cURL, or frontend apps). Pass it as the X-API-Key HTTP header.

curl https://moqapi.dev/api/invoke/{projectId}/my-api/users \
  -H "X-API-Key: moqapi_abc123def456..."

const res = await fetch('https://moqapi.dev/api/invoke/{projectId}/my-api/users', {
  headers: {
    'X-API-Key': 'moqapi_abc123def456...',
  },
});
const data = await res.json();

// Invoke URL

Every project gets a unique invoke URL based on its project ID. This is the base URL for all API calls, mock APIs, and function invocations:

# API Gateway routes
https://moqapi.dev/api/invoke/{projectId}/{basePath}/{route}

# Mock API endpoints
https://moqapi.dev/api/invoke/{projectId}/{basePath}/{resource}

# Direct function invocation
https://moqapi.dev/api/invoke/{projectId}/fn/{functionName}

The projectId is a UUID automatically assigned when you create a project. You can find it on the project detail page.

// Teams

Teams let you share projects with other moqapi.dev users. In Free Mode, everyone can create teams. When billing is enabled, the Team plan ($29/mo) is required.

Creating a Team

1. Navigate to /teams in the sidebar
2. Click "Create Team"
3. Enter a team name and optionally invite members by email
4. You become the owner automatically

Team Roles

Inviting Members

moqapi uses an email-based invite system:

1. Go to the team detail page and click "Invite Member"
2. Enter the member's email address
3. If they already have an account, they're added directly
4. If not, they receive an email invitation to sign up and join the team
5. Pending invites are shown on the team page and can be cancelled

// Project Sharing (via Teams)

Projects can optionally be assigned to a team. When assigned, all team members gain access to the project.

Two Ways to Share

What Team Members See

• Team projects appear in the Projects page alongside personal projects
• Team projects show a team name badge for identification
• Members can view, invoke, and interact with all resources (functions, APIs, mock APIs) within team projects
• Only the project owner can delete or reassign the project

// Access Control Flow

Here's how moqapi.dev determines whether an API invocation request is allowed:

// When someone calls /api/invoke/{projectId}/...

if (project.visibility === 'public') {
  // Allow — no auth needed
  return proceed()
}

if (project.visibility === 'moqapi_users') {
  // Check if caller has a valid session
  if (authenticatedUser) return proceed()
  else return 401 // Unauthorized
}

if (project.visibility === 'private') {
  // Must be the owner OR a team member
  if (user.id === project.user_id)       return proceed()
  if (user is member of project.team_id) return proceed()
  else return 403 // Forbidden
}

// Managing Your Subscription

This section applies only when billing is enabled (NEXT_PUBLIC_BILLING_ENABLED=true). In Free Mode, the settings page shows "Free Mode — All features unlocked" and no upgrade options.

1. Go to /settings and scroll to the Billing & Plan section
2. See your current plan, usage bars (projects, requests/day, functions, etc.), and limits
3. Click "Upgrade" on a higher plan card to start a Stripe checkout session
4. Click "Manage Subscription" to access the Stripe customer portal (change plan, update payment method, cancel)

// API Reference