Five products · live in production
Auth, Mail, Waitlist, Social and Trawl — five REST APIs behind one account, one API key and typed Node SDKs. Install the parts you keep rebuilding; build the part only you can.
Each service has a free tier large enough to ship a side project on. Pricing is coming soon.
npm install productcraftimport { ProductCraft } from "productcraft";
// Key from PRODUCTCRAFT_API_KEY
const pc = new ProductCraft();
// Auth — sign in an EndUser
const consumer = pc.auth.consumer("my-app");
const tokens = await consumer.auth.signin({
identifier: "alice@example.com",
password: "...",
});import { ProductCraft } from "productcraft";
// Key from PRODUCTCRAFT_API_KEY
const pc = new ProductCraft();
// Auth — sign in an EndUser through the BFF flow
const consumer = pc.auth.consumer("my-app");
const tokens = await consumer.auth.signin({
identifier: "alice@example.com",
password: "...",
});
// Mail — send a template-rendered email from the same backend
await pc.mail.client.POST(
"/v1/workspaces/{workspace_id}/templates/{name}/send",
{
params: {
path: { workspace_id: "<workspace-uuid>", name: "welcome" },
header: { "Idempotency-Key": "welcome-2026-05-22-alice" },
},
body: {
from: "hello@yourbrand.com",
to: "alice@example.com",
data: {},
},
},
);The lineup
Use one or all five. Each is its own REST API with its own docs, npm package and console pages; the account, the API key and the workspace are shared.
The boring half
In the console: Apps · End users · Roles · Tenants · Passkeys · Audit
ProductCraft's own transactional email goes through it.
In the console: Domains · SMTP relay · Templates · Messages · Suppression list
// No auth — public surface
POST /v1/waitlists/{workspace_slug}
/{waitlist_slug}/entries
// → { id, position }In the console: Overview · Waitlists · Webhooks · Settings
The interesting half
import { Trawl } from "@productcraft/trawl";
// Key from PRODUCTCRAFT_API_KEY
const trawl = new Trawl();
const { data, error } =
await trawl.client.POST(
"/v1/workspaces/{workspaceId}/jobs",
{
params: {
path: { workspaceId: "<workspace-uuid>" },
},
body: {
description:
"Extract the product title " +
"and price from each page.",
json_schema: {
type: "object",
properties: {
title: { type: "string" },
price: { type: "number" },
},
required: ["title"],
},
suggested_urls: [
"https://example.com/product",
],
},
},
);
if (error) throw error;
console.log(data.id, data.status);
// → "<job-uuid>", "queued"import { Trawl } from "@productcraft/trawl";
// Key from PRODUCTCRAFT_API_KEY
const trawl = new Trawl();
const { data, error } = await trawl.client.POST(
"/v1/workspaces/{workspaceId}/jobs",
{
params: { path: { workspaceId: "<workspace-uuid>" } },
body: {
description: "Extract the product title and price from each page.",
json_schema: {
type: "object",
properties: { title: { type: "string" }, price: { type: "number" } },
required: ["title"],
},
suggested_urls: ["https://example.com/product"],
},
},
);
if (error) throw error;
console.log(data.id, data.status); // → "<job-uuid>", "queued"In the console: Jobs · Webhooks
POST /v1/communities/{communityId}
/posts
X-Acting-As: <actor_id>
{
"actor_id": "<actor-uuid>",
"text": "Hello, world!",
"visibility": "public"
}In the console: Overview · Analytics · Moderation · Settings
Pick the one that brought you here. The other four are already in your workspace.
One workspace
Sign in once at auth.productcraft.co and every product trusts the same session. A workspace owns your apps, domains, templates, waitlists, communities, jobs and API keys, and the console shows the same workspace for all five.
{
"token": "eyJhbGciOiJSUzI1NiIs...",
"permission": "user.read"
}
→ { "authorized": true }From your editor
An MCP server at mcp.productcraft.co. You approve the connection in the browser, a policy preset caps what it may do, and every call lands in the audit log.
claude mcp add --transport http productcraft 'https://mcp.productcraft.co/mcp'
# then, inside Claude Code:
/mcp # pick "productcraft" and follow the browser promptNote what is not in any of those snippets: a token, a key, a client id, a secret. The only configuration is the URL.
Changelog
Every entry is a production deploy. The full list is on the changelog.
Send one message to a segment or topic, now or on a schedule, with a one-click unsubscribe in every email and results per broadcast.
Auth apps can delete accounts whose email was never verified after a number of days you choose, freeing the address for its real owner.
Group contacts into segments: static lists you fill by hand, or rules on contact fields and properties that stay current as your contacts change.
Open a workspace, create an API key, call the product that brought you here. The other four are on the same key.