Frequently asked questions
What is the difference between DreamFactory and AWS API Gateway?
They solve different halves of the problem. AWS API Gateway is a managed front door: it routes, throttles, and secures traffic to APIs your team has already built on Lambda or other backends. DreamFactory generates the API itself — point it at a database and it produces documented, governed REST endpoints in minutes, with gateway-style controls (keys, RBAC, rate limits, logging) built into the same platform.
Is AWS API Gateway cheaper than DreamFactory?
Its metered gateway fee can be very small at low traffic — published REST-API pricing starts at $3.50 per million requests, and there is a 12-month free tier. But that fee only covers the front door: the backend doing the actual data access is a separate build-and-run cost, plus data transfer, caching, and logging. DreamFactory's flat published tiers (from $1,500/month) include the generated API, its security, and its documentation — so the honest comparison is total cost, not sticker price.
Can DreamFactory run inside AWS?
Yes. DreamFactory is self-hosted software — it runs on EC2, EKS, or any Linux/Docker/Kubernetes environment, in AWS or anywhere else, including fully air-gapped networks. Running it beside your AWS databases is a common deployment.
Does DreamFactory replace API management features?
For the APIs it generates, yes: API keys, role-based access control, OAuth/JWT, rate limiting, request/response scripting, and audit logging are built in — one governance layer covering both the API and its traffic.
What about API Gateway's payload and timeout limits?
AWS documents a 10 MB payload quota, and the integration timeout defaults to 29 seconds — raisable for Regional and private REST APIs, though at the cost of account-level throttle quota. DreamFactory is self-hosted, so payloads, timeouts, and throttles are simply configuration on your own infrastructure.
Can AI agents use DreamFactory APIs?
Yes. DreamFactory includes a built-in MCP (Model Context Protocol) server that exposes your databases as standardized tools for MCP-compatible models like Claude, GPT, Llama, and Gemini — governed by the same role-based access control and audit logging as every other API call.