Changelog

Additions — 2026-09-26#

GET /myip returns the address you connect from and the allowed_networks entry for it. See Restricting where an account connects from.
People and groups are found by name, e-mail address or group name when granting access, in the console and through GET .../directory?q=. You no longer type ids.
The console covers the whole API. You can now:
- create, rename and delete realms;
- edit an account's grants, networks, limits and lock;
- delete databases;
- manage tenant admins and API tokens on the new Tenant page.
API tokens can be given an expiry date.
Accounts can be restricted to single IPv6 addresses (/128), as well as IPv4 networks. A dual-stack host needs both its addresses listed.
Raised the per-source connection rate limit from 60 to 300 new connections per 10 seconds, and documented it together with the "lost connection" error it causes.

Initial release:

Self-service databases and accounts on shared std clusters in nlwest and nlsouth, through the console and the API.
Tenants, realms and roles for users and groups; privilege profiles; IPv4 source restrictions; connection and statement-time limits; API tokens.
Continuous, encrypted backups in the other region, with 14 days of point-in-time restore into a new database.
Export of any point in that window as a plain .sql.gz.
Purge of a deleted database's backups on request.