Crate Plugins

Crate’s power lies in its extensibility. Our plugin system allows you to intercept and transform traffic at the edge, providing robust security, flexible payload manipulation, and advanced routing logic.

🧱 Plugin Architecture

Plugins are defined at the Organization level and can be activated for specific domains or individual routes. They are executed in two phases:

1. Inbound (Request): Executed after matching the route but before forwarding to the backend.
2. Outbound (Response): Executed after receiving the response from the backend but before returning it to the client.

---

📂 Plugin Categories

Explore our built-in plugins categorized by their primary use case:

🛡️ Security

Protect your endpoints from unauthorized access and malicious bots.

• IP Filter: Allow or deny traffic based on IP/CIDR.
• API Key Auth: Authenticate requests via the X-API-Key header.
• AI Shield: Advanced bot detection and management.

⚖️ Traffic Management

Control the flow and shape of your API traffic.

• CORS: Manage Cross-Origin Resource Sharing effortlessly.
• Payload Limit: Restrict the size of incoming request bodies.

🏗️ Transformation

Dynamically modify requests and responses.

• Request Transform: High-performance JSONata-based transformations.
• Mocking: Simulate backend responses for rapid development.