CData Alternative

CData Publishes OData and REST Over Its Driver Catalog.
DreamFactory Generates Row‑Governed REST and MCP.

CData API Server is one product in the CData family, publishing OData and REST endpoints over any source in CData's driver catalog. DreamFactory generates the governed REST API from your database — roles, scripting, and a built‑in MCP server included — on an open‑source core at a flat published price.

What the Docs Say

Five Things to Weigh Before Standardizing on CData API Server

CData API Server is a mature way to publish OData and REST APIs over a wide catalog of sources, with a free Community edition for non‑commercial use. The questions worth asking are about editions, pricing, custom logic, the authorization model, and where MCP lives in the product family.

1. Sources Depend on the Edition

As published, the free Community edition covers MySQL, Excel, SQLite, and PostgreSQL with up to two connections. SQL Server, Snowflake, Databricks, Redshift, BigQuery, and SAP HANA are Pro sources; Oracle, DB2, Sybase, and Greenplum require Enterprise. Additional CData drivers used as sources are licensed separately.

2. Pro and Enterprise Are Priced on Request

CData prices the Pro and Enterprise editions on request; the Community edition is free for non‑commercial, on‑premises use. AWS and Azure Marketplace images are billed hourly. Subscriptions include standard email support; premium phone support is a separate one‑year contract. Get the quote for the edition your sources require.

3. Custom Logic Is Written in APIScript

Server‑side customization uses APIScript, CData's XML‑based scripting configuration language for defining table columns and stored‑procedure operations. Documented customizations (renaming or removing columns, changing data types, re‑pointing connections) can be made from the API Server UI or by editing schema files, and CData notes most table definitions need no conditionals or loops. APIScript is a CData‑specific skill to staff for.

4. Two Roles Plus Per‑User Method Privileges

As documented, each API Server user holds the Admin or Query role and is granted HTTP‑method privileges — GET, POST, PUT/MERGE/PATCH, DELETE — along with token expiration and, from the Pro edition, per‑user rate limits. Table‑level permissions, OpenID single sign‑on, and the Management API are listed under the Enterprise edition. Map your access model to that structure before you commit.

5. MCP Access Lives in Sister Products

The API Server product page lists AI agents and LLMs among its consumers, working with an MCP Server. CData's published MCP offerings are separate products: local CData MCP Servers (beta from May 2025, initially for Claude Desktop on Windows) and CData Connect AI, the SaaS platform formerly Connect Cloud, from $79/month billed annually. Scope the MCP product alongside API Server.

The DreamFactory Way

One Governed Layer for REST and MCP

Generating the API is the starting line. DreamFactory keeps every piece around it in the same layer — roles mapped from your identity provider and scoped to the row, scripting in mainstream languages, and an MCP server — on an open‑source core with published tiers.

Instant REST API Generation

Connect SQL Server, MySQL, PostgreSQL, Oracle, MongoDB, Snowflake, and more — DreamFactory auto‑generates a full, documented REST API in minutes, with Swagger/OpenAPI docs included.

See all connectors →

Access Control Down to the Row

Every API key is bound to a role that controls each service, table, verb, and field. Record‑level filters with server‑resolved user tokens restrict which rows a caller sees — declared in the role, not coded — with rate limits and audit logging on the same endpoint.

Explore features →

Open Core, Published Tiers

The core is Apache‑2.0 open source, self‑hostable at no cost. Commercial tiers — $1,500/mo (single connector) and $4,000/mo (unlimited connectors including Oracle, Snowflake, and DB2) — include unlimited API creation and requests, with SSO, rate limiting, and ELK audit logging from the DF Linux Professional tier; optional support and maintenance packages add SLA‑backed options.

Logic in Languages You Know

Business rules run server‑side in Node.js, Python, or PHP — as pre‑ or post‑process scripts on any endpoint, or as standalone scripted services — ordinary application code.

See a scripted service wrapping a stored procedure →

Your Identity Provider Assigns the Role

SAML 2.0, OpenID Connect, OAuth 2.0, and LDAP/Active Directory sign‑in, with IdP groups and attributes mapped to DreamFactory roles at login. Identity passthrough puts the real user's name in the database's own audit log.

Ready for AI Agents

A built‑in MCP server exposes your databases as governed tools for Claude, ChatGPT, Cursor, VS Code, and any MCP‑compatible client — with the same RBAC and audit trail as every other call.

See a governed MCP deployment →
Side by Side

DreamFactory vs CData API Server at a Glance

DreamFactory is an open‑core, self‑hosted CData alternative for teams whose primary need is governed REST APIs on their databases — generated in minutes, role‑scoped down to the row, with published pricing and MCP for AI agents in the same layer. CData API Server is a Java web application that publishes OData and REST endpoints from any source in CData's driver catalog, deployed on your own servers or from cloud marketplace images.

CapabilityWhy it mattersDreamFactoryCData API Server
REST APIs from a databaseThe faster the data layer exists, the sooner apps and AI can use itAuto‑generated in minutes with live OpenAPI docs — tables, views, stored procedures, and functions, with filtering, pagination, sorting, and related‑record joins — from 30+ connectors including SQL Server, PostgreSQL, MySQL, Oracle, Snowflake, and MongoDBStrong parity: OData and REST/JSON endpoints with an OpenAPI definition over tables and stored procedures from CData's driver catalog — hundreds of enterprise sources, per its API Server download page
Pricing modelPredictable budgets need published numbersApache‑2.0 open‑source edition free; published flat tiers from $1,500/mo (single connector) and $4,000/mo (unlimited connectors, including Oracle, Snowflake, and DB2), with unlimited API creation and requestsCommunity edition free for non‑commercial use (up to 2 connections); Pro and Enterprise priced on request; AWS and Azure Marketplace images billed hourly
Access controlWho can see which rows and fields is the compliance storyAPI keys bound to roles; SAML, OIDC, OAuth, and LDAP/AD sign‑in with IdP group‑to‑role mapping; permissions per service, table, verb, and field; record‑level filters; rate limits per user, role, service, or endpoint; Logstash/ELK audit logging — field‑level permissions in the commercial editions; SSO, rate limiting, and ELK logging from the DF Linux Professional tierAdmin and Query roles, per‑user GET/POST/PUT/DELETE privileges, per‑user rate limits (Pro and Enterprise), token expiration, trusted‑IP allowlist; query log with caller login ID; table‑level permissions and OpenID SSO in Enterprise
Custom logicReal APIs transform, validate, and enforce rulesNode.js, Python, or PHP scripts (PHP in every edition; Python and Node.js in the commercial editions) as pre‑ or post‑process hooks on any endpoint, or as standalone scripted servicesAPIScript, CData's XML‑based scripting configuration language, for table columns and stored‑procedure operations; stored procedures published as POST actions
DeploymentRegulated data often can't depend on a vendor's cloudFully self‑hosted — admin console, control plane, and data path on your Linux, Windows Server, Docker, or Kubernetes, air‑gapped included; also offered on the AWS MarketplaceStrong parity: on‑premises Java (Jetty) web application with Windows and Linux installers — installed as a Windows service by default, with a systemd/init.d service script on Linux — plus AWS and Azure Marketplace VM images
AI agent accessAgents need the same governance as applicationsBuilt‑in MCP server — OAuth 2.0 sign‑in, tools filtered to the user's role, same audit trail as RESTSeparate CData products: local CData MCP Servers (beta launched May 2025, initially for Claude Desktop on Windows) and CData Connect AI, a managed MCP platform (SaaS, from $79/mo billed annually)

Competitor details verified September 2026 from vendor documentation. Product names are trademarks of their respective owners.

An Honest Framing

Which One Fits Your Team?

Choose CData API Server if…

Your consumers read OData (Salesforce Connect) or are the low‑code builders CData names (OutSystems, Unqork, AppSheet); you already license CData drivers and want one API layer over that catalog; the source you need is a SaaS application those drivers cover; or you want a free edition for a non‑commercial project on MySQL, PostgreSQL, SQLite, or Excel.

Choose DreamFactory if…

Your goal is secure, documented REST APIs — and MCP access for AI agents — on the databases you already run. You want roles mapped from your identity provider, logic in Node.js, Python, or PHP, the entire platform self‑hosted (air‑gapped included), one flat published price, and a working API this week.

Frequently asked questions

What is the difference between DreamFactory and CData API Server?

They do the same core job with different scope. CData API Server is one product in the CData family: it publishes OData and REST endpoints, with OpenAPI documentation, over CData's driver catalog; MCP access comes through separate CData products. DreamFactory is a self-hosted API generation platform: it produces documented, governed REST endpoints from a database in minutes, with RBAC, API keys, rate limiting, audit logging, server-side scripting, and a built-in MCP server in one layer.

How much does CData API Server cost compared to DreamFactory?

CData publishes a free Community edition for non-commercial use (up to two connections; MySQL, Excel, SQLite, PostgreSQL); Pro and Enterprise are priced on request, and AWS and Azure Marketplace images are billed hourly. DreamFactory publishes flat tiers — $1,500/month for a single connector, $4,000/month for unlimited connectors including Oracle, Snowflake, and DB2 (billed annually) — each with unlimited API creation and requests, with optional support packages adding SLA-backed options, plus an Apache-licensed open-source edition.

Does CData API Server support OData and OpenAPI?

Yes. API Server publishes OData — version 4.0 by default, with 2.0 and 3.0 compatibility — and supports $filter, $select, $orderby, $top, $skip, $count, $expand, and $search, with full-text search on SQL Server, MySQL, and MongoDB ($expand and full-text search are listed under the Pro and Enterprise editions); an OpenAPI (Swagger) definition is served at $swagger, and responses can be JSON, XML, CSV, TSV, RSS, HTML, or JSONP. DreamFactory generates REST endpoints with live OpenAPI (Swagger) documentation, returns JSON or XML, and supports filtering, field selection, pagination, sorting, and related-record joins — one consistent interface whether the source is SQL Server, Snowflake, or MongoDB.

Does DreamFactory replace CData API Server?

For REST APIs on databases, yes: DreamFactory generates and governs the API from 30+ connectors including SQL Server, PostgreSQL, MySQL, Oracle, Snowflake, and MongoDB, with MCP access for AI agents in the same layer. CData's catalog is broader — its API Server download page says it supports hundreds of enterprise sources — and API Server publishes the OData protocol that consumers such as Salesforce Connect read. If OData itself is the requirement or the source is a SaaS application that CData's drivers cover, API Server fits that job; for governed REST and MCP on the databases you already run, DreamFactory delivers it in one self-hosted layer.

How do custom business rules work in DreamFactory compared to CData API Server?

In CData API Server, customization uses APIScript, CData's XML-based scripting configuration language for defining table columns and stored-procedure operations, and stored procedures are published as POST actions. In DreamFactory, stored procedures and functions become endpoints alongside the tables, and custom logic runs as server-side scripts in Node.js, Python, or PHP — ordinary application code — attached to any endpoint as a pre-process, post-process, or queued event script, or exposed as a standalone scripted service.

Can AI agents use DreamFactory APIs?

Yes. DreamFactory includes a built-in MCP (Model Context Protocol) server that exposes your databases as standardized tools for MCP-compatible clients such as Claude, ChatGPT, Cursor, and VS Code — governed by the same role-based access control and audit logging as every other API call.

Free 30-Minute Demo

One Governed API for Apps and Agents

Give one of our engineers 30 minutes and watch a secure, documented REST API come to life on your data — roles, scripting, and MCP included.