# BackGen > Backend project scaffolding CLI — generate production-ready Node.js/Express/Prisma backends in seconds. Plugins, presets, auth, RBAC, audit logs, and more. - **Type:** MCP server - **Install:** `agentstack add mcp-ibrahimkhaled19-backgen` - **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior - **Seller:** [IbrahimKhaled19](https://agentstack.voostack.com/s/ibrahimkhaled19) - **Installs:** 0 - **Category:** [Integrations](https://agentstack.voostack.com/c/integrations) - **Latest version:** 1.11.2 - **License:** MIT - **Upstream author:** [IbrahimKhaled19](https://github.com/IbrahimKhaled19) - **Source:** https://github.com/IbrahimKhaled19/BackGen ## Install ```sh agentstack add mcp-ibrahimkhaled19-backgen ``` Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent. ## About # BackGen [](https://github.com/IbrahimKhaled19/BackGen/actions/workflows/ci.yml) [](https://www.npmjs.com/package/@ibrahimkhaled19/backgen) [](https://opensource.org/licenses/MIT) [](https://www.npmjs.com/package/@ibrahimkhaled19/backgen) [](https://github.com/IbrahimKhaled19/BackGen) ## 🤖 AI-Ready [](https://glama.ai/mcp/servers/IbrahimKhaled19/BackGen) [](https://glama.ai/mcp/servers/IbrahimKhaled19/BackGen) BackGen ships a built-in **MCP (Model Context Protocol) server** that AI assistants (Claude, Cursor, GitHub Copilot, VS Code) can use to scaffold projects on your behalf. Run via CLI: ```bash backgen mcp ``` Or configure your AI tool's MCP client: ```json { "mcpServers": { "backgen": { "command": "npx", "args": ["-y", "@ibrahimkhaled19/backgen", "mcp"] } } } ``` **Available MCP tools:** | Tool | Description | |------|-------------| | `init_project` | Scaffold a new production-ready backend project with chosen ORM, preset, and plugins | | `add_plugin` | Install a plugin (jwt, clerk, stripe, s3, ratelimit, ci-github, dependabot, codeql, docker-registry, release) | | `remove_plugin` | Remove a previously installed plugin | | `generate_resource` | Generate a CRUD resource with fields, relations, validation, and Swagger | | `generate_seed` | Generate a database seed file for a resource | | `generate_factory` | Generate a test factory for a resource | | `doctor` | Validate an existing BackGen project for configuration issues | | `list_plugins` | List all available plugins with descriptions | | `list_presets` | List all available domain presets | | `project_info` | Show project metadata from the manifest | Then just ask: *"Scaffold a SaaS backend with Prisma, JWT auth, and Stripe payments"* --- > Generate production-ready backend foundations so developers can focus on business logic, not boilerplate. BackGen is a CLI tool that generates complete Express.js backend projects on **Prisma, Drizzle, or Mongoose** — with authentication, multi-tenant infrastructure, production hardening, Docker, and testing — all working out of the box. ```bash npx @ibrahimkhaled19/backgen init my-api --orm drizzle cd my-api npm run dev ``` Swagger docs at `http://localhost:3000/docs` in under 60 seconds. Pick your ORM, keep everything else. --- ## Features - **Express + TypeScript** — strict mode, ESLint 9 (flat config), Vitest - **Multi-ORM** — Prisma, Drizzle, or Mongoose. Pick at `init` time, switch later via the manifest - **SaaS-ready** — `saas-core` preset ships Organizations, Memberships, Invitations, RBAC, tenant-scoped queries - **Hardened by default** — helmet, strict CORS, request ID, request timeout, xss + mongo-sanitize, graceful shutdown, `/health` + `/ready`, error envelope - **Plugin System** — JWT, Clerk, Stripe, S3, ratelimit via `backgen add` - **Resource Generator** — CRUD modules with relations, validation, Swagger - **Domain Presets** — saas-core, healthcare, SaaS, ecommerce, CRM, LMS — full domain in one command - **Seed & Factory Generators** — development data and test factories - **Docker** — multi-stage Dockerfile + docker-compose - **Swagger/OpenAPI** — auto-generated API documentation - **Manifest** — `.backgenrc.json` tracks ORM, plugins, versions, and ownership for **upgrade/rollback** --- ## Quick Start ```bash # Install globally npm install -g @ibrahimkhaled19/backgen # Create a project (pick your ORM) backgen init my-api --orm prisma backgen init my-api --orm drizzle backgen init my-api --orm mongoose # Create a full multi-tenant domain backgen init my-saas --preset saas-core --defaults # Add authentication backgen add jwt backgen add clerk # Add production hardening backgen add ratelimit # Generate a resource backgen generate resource Product name:string price:number stock:number # Start developing cd my-api npm run dev ``` --- ## Commands ### `backgen init [name]` Generate a new backend project. ```bash backgen init my-api # interactive ORM picker backgen init my-api --orm prisma # explicit ORM backgen init my-api --orm drizzle --defaults # Drizzle, non-interactive backgen init my-api --orm mongoose --skip-install backgen init my-api --preset saas-core --defaults # full multi-tenant domain backgen init my-api --preset healthcare # healthcare domain ``` **Output:** - Express app with TypeScript strict mode - ORM-specific data layer (Prisma / Drizzle / Mongoose) - Environment validation (Zod) - Swagger/OpenAPI documentation - Docker + docker-compose - Hardened by default: helmet, CORS, request ID, timeout, xss + mongo-sanitize, graceful shutdown, health checks - ESLint 9 + Vitest - `.backgenrc.json` manifest (records `project.orm` + plugins) No auth by default — choose your auth provider with `backgen add`. --- ### `backgen add [plugin]` Install a plugin. Interactive multi-select if no argument. ```bash backgen add # interactive multi-select backgen add jwt # JWT authentication backgen add clerk # Clerk auth-as-a-service backgen add stripe # Stripe payments backgen add s3 # AWS S3 storage backgen add ratelimit # Per-IP / per-user rate limiting backgen add devops # Install all devops plugins at once ``` **Available Plugins:** | Plugin | Category | Description | |--------|----------|-------------| | `jwt` | auth | JWT authentication with refresh tokens | | `clerk` | auth | Clerk auth-as-a-service (conflicts with jwt) | | `stripe` | payment | Stripe checkout, webhooks, customers | | `s3` | storage | AWS S3 upload, download, presigned URLs | | `ratelimit` | production | Per-IP rate limiting with Redis-ready store | | `ci-github` | devops | GitHub Actions CI pipeline (lint, typecheck, test, build, optional deploy) | | `dependabot` | devops | Automated dependency updates via Dependabot | | `codeql` | devops | CodeQL security analysis on push and schedule | | `docker-registry` | devops | Docker image build and publish to GHCR | | `release` | devops | Semantic release with npm publish and GitHub releases | **Conflict detection:** `jwt` and `clerk` cannot be installed together. --- ## Domain Presets Generate a complete domain in one command. Each preset creates multiple resources with relations, auto-installs JWT auth, and wires everything together. ```bash backgen init my-api --preset healthcare backgen init my-api --preset saas --defaults ``` ### healthcare Patient, Doctor, Appointment, Prescription, MedicalRecord — appointments between patients and doctors, prescriptions linked to patients, medical records per patient. ### saas Organization, Team, Membership, Subscription, Invoice — organizations with teams and memberships, subscriptions with invoices. ### ecommerce Category, Product, Cart, Order, OrderItem, Payment — products in categories, carts with items, orders with line items and payments. ### crm Contact, Company, Deal, Activity — companies with contacts, deals tracked through pipeline, activity logging. ### lms Course, Lesson, Enrollment, Progress, Certificate — courses with lessons, student enrollments, progress tracking, certificates. --- ### `backgen remove [plugin]` Remove a plugin. Interactive multi-select if no argument. Supports `devops` shorthand to remove all devops plugins. ```bash backgen remove # interactive multi-select backgen remove stripe # remove specific plugin backgen remove devops # remove all devops plugins ``` --- ### `backgen generate resource [fields...]` Generate a CRUD resource module. ```bash # Interactive backgen generate resource Product # Non-interactive backgen generate resource Product name:string price:number stock:number # With relations backgen generate resource Appointment date:datetime status:string \ --relations "doctor:Doctor,patient:Patient" # With --fields flag backgen generate resource Product --fields "name:string,price:number" ``` **Generated files:** ``` src/modules/product/ product.controller.ts # CRUD endpoints product.service.ts # business logic product.repository.ts # database operations product.validation.ts # Zod schemas product.types.ts # TypeScript interfaces product.routes.ts # route definitions + Swagger product.test.ts # test placeholder ``` **Field types:** `string`, `number`, `boolean`, `date`, `datetime` **Relations:** `doctor:Doctor` (belongsTo), `patients:Patient` (hasMany) --- ### `backgen generate seed ` Generate seed data for development. ```bash backgen generate seed Product --count 10 ``` Output: `prisma/seeds/product.ts` (Prisma), `db/seeds/product.ts` (Drizzle), or `seeds/product.ts` (Mongoose) --- ### `backgen generate factory ` Generate a test factory. ```bash backgen generate factory Product ``` Output: `src/factories/product.factory.ts` Usage: ```ts import { createProduct } from "./factories/product.factory.js"; const product = await createProduct({ name: "Widget" }); ``` --- ### `backgen generate route [name]` Generate a custom route module with a complete controller, service, validation, types, and route file -- including Swagger annotations. Routes are automatically registered in `app.ts` with the `REGISTER_ROUTES` marker. Use this when you need a custom endpoint that doesn't fit the CRUD pattern (e.g., dashboards, reports, webhooks, custom actions). For standard CRUD, use `generate resource` instead. ```bash backgen generate route # interactive prompt backgen generate route reports # generate a /api/reports module backgen generate route webhooks # generate a /api/webhooks module ``` **Generated files:** ``` src/modules/reports/ reports.controller.ts # request handlers reports.service.ts # business logic reports.validation.ts # Zod schemas reports.types.ts # TypeScript interfaces reports.routes.ts # route definitions + Swagger ``` **Key differences from `generate resource`:** - No database model, repository, or test file - No field specification required - Pure controller/service pattern for custom endpoints - Mounted at `/api/` with full Swagger docs --- ### `backgen generate migration [name]` Generate a database migration (ORM-aware). ```bash backgen generate migration add-product-table # runs prisma migrate dev / drizzle-kit generate / no-op for Mongoose ``` --- ### `backgen sync` Reconcile `.backgenrc.json` with the project. Regenerates missing plugin files. ```bash backgen sync ``` --- ### `backgen mcp` Start BackGen as an MCP server over stdio. Used by AI assistants (Claude, Cursor, VS Code) to scaffold projects programmatically. ```bash backgen mcp ``` This is the same server exposed via the `npx @ibrahimkhaled19/backgen backgen-mcp` binary. It registers all 10 MCP tools listed in the [AI-Ready](#-ai-ready) section. --- ### `backgen health` Show system health information. ```bash backgen health ``` **Displays:** - Node.js version - Platform and architecture - BackGen version --- ### `backgen doctor` Check project health with ownership integrity diagnostics. ```bash backgen doctor # health check + ownership audit backgen doctor --fix # auto-fix missing manifest entries ``` **Checks:** - Node.js version (>= 18) - npm availability - .env file - DATABASE_URL - Prisma schema / Drizzle config / Mongoose connection - Dependencies - Package manager version - **File integrity** — all manifest-tracked files exist on disk - **Ownership integrity** — framework vs user file classification --- ### `backgen upgrade` Upgrade a generated project to the latest template version. Creates a backup, then applies pending migrations sequentially. ```bash backgen upgrade # show pending migrations, prompt before applying backgen upgrade --yes # skip confirmation, apply all pending ``` **What happens:** - Reads current `generatedVersion` from `.backgenrc.json` - Loads pending core + plugin migrations - Creates backup in `.backgen/backups/pre-/` - Applies migrations in order (semver-sorted) - Updates ownership register + `generatedVersion` in manifest --- ### `backgen rollback` Restore a project to its pre-upgrade state from the most recent backup. ```bash backgen rollback # show latest backup, prompt before restoring backgen rollback --yes # skip confirmation ``` **What happens:** - Lists available backups in `.backgen/backups/` - Restores the most recent backup (all tracked files + manifest) - Project returns to exact pre-upgrade state --- ### `backgen rotate-secrets` Rotate JWT secrets in the project's `.env` file. Generates cryptographically secure 256-bit random hex values for `JWT_SECRET` and `JWT_REFRESH_SECRET`, backs up the current `.env` to `.env.backup`, and writes new values. All existing tokens are immediately invalidated on next server restart -- users must re-login. ```bash backgen rotate-secrets ``` **What happens:** - Generates two 256-bit random hex secrets via `crypto.randomBytes` - Old `.env` saved to `.env.backup` - Previous values preserved as comments in the new `.env` - Print summary of changes --- ## Plugin System Every plugin implements the `BackGenPlugin` interface: ```ts interface BackGenPlugin { name: string; category: string; description: string; version: string; dependencies?: string[]; devDependencies?: string[]; requires?: string[]; conflicts?: string[]; env?: Record; templates: string[]; migrations?: PluginMigration[]; // versioned plugin migration scripts install(ctx: InstallContext): Promise; uninstall?(ctx: InstallContext): Promise; } ``` Plugins can: - Install npm dependencies - Inject environment variables - Register routes in app.ts - Replace existing middleware - Add database models (Prisma / Drizzle / Mongoose) - Carry versioned migrations for own upgrades --- ## Project Manifest `.backgenrc.json` tracks plugins, versions, generated version, and file ownership: ```json { "version": "1.0.0", "generatedVersion": "1.9.0", "project": { "name": "my-api", "framework": "express", "database": "postgresql", "orm": "prisma", "preset": "saas-core" }, "plugins": { "jwt": { "version": "1.0.0", "installedAt": "2026-06-01", "source": "core" } }, "files": { "src/app.ts": { "owner": "shared", "version": "1.9.0" }, "src/server.ts": { "owner": "framework", "version": "1.9.0" }, "src/config/env.ts": { "owner": "framework-editable", "version": "1.9.0" }, "prisma/schema.prisma": { "owner": "user" }, "src/modules/user/user.service.ts": { "owner": "user" }, "docker-compose.yml": { "owner": "shared", "version": "1.9.0" } } } ``` **Ownership levels:** | Level | Description | Upgrade behavior | |-------|-------------|-----------------| | `framework` | BackGen owns fully | Safe to overwrite | | `framework-editable` | Generated but user may customize | Smart merge via migration | | `shared` | Generated skeleton, user extends (e.g. docker-compose) | Migration-aware update | | `user` | User owns entirely | Never touched | --- ## Generated Project Structure ``` my-api/ ├── prisma/ # Prisma ORM only │ ├── schema.prisma │ └── seeds/ ├── src/db/ # Drizzle ORM only │ ├── schema/ │ │ └── index.ts │ └── seeds/ ├── src/models/ # Mongoose ORM only │ └── seeds/ ├── src/ │ ├── app.ts # Express app setup │ ├── server.ts # Server entry point │ ├── config/ │ │ ├── env.ts # Zod env validation │ │ ├── database.ts # Prisma client / Drizzle db / Mongoose connection │ │ └── swagger.ts # Swagger config │ ├── middleware/ │ │ ├── auth.ts # JWT/Clerk auth │ │ ├── validate.ts # Zod validation │ │ ├── error.ts … ## Source & license This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code. - **Author:** [IbrahimKhaled19](https://github.com/IbrahimKhaled19) - **Source:** [IbrahimKhaled19/BackGen](https://github.com/IbrahimKhaled19/BackGen) - **License:** MIT Install and usage instructions live in the source repository linked above. ## Pricing - **Free** — Free ## Security capabilities Automated source analysis of v1.11.2 — what this tool can access: - **Network access:** no - **Filesystem access:** no - **Shell / process execution:** no - **Environment & secrets:** yes - **Dynamic code execution:** no *"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.* ## Versions - **1.11.2** — security scan: passed — Imported from the upstream source. ## Links - Listing page: https://agentstack.voostack.com/l/mcp-ibrahimkhaled19-backgen - Seller: https://agentstack.voostack.com/s/ibrahimkhaled19 - Browse the marketplace: https://agentstack.voostack.com/browse --- Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.