I tried PostgREST for a small internal and it was a decent experience. I followed the following rules: 1- Don't expose your real database but expose a database

I tried PostgREST for a small internal and it was a decent experience. I followed the following rules: 1- Don't expose your real database but expose a database consisting of view on your real database so you can refactor. 2- Wrap your bussines logic in stored proc to keep your sql readable 3- Use jwt for authentication That said, I would not recommend it for a large scale application. I consider it, maybe wrongly, as the MSAccess of the backend.