Back to catalog
Lowdefy
Apache-2.0Lowdefy is an open-source alternative to Retool that lets developers build internal tools and database dashboards using declarative YAML configuration.
Open-source alternative to — compare it against:
Overview
South African engineers Gerrie van Wyk, Sam Tolmay, and Albert van Wyk created Lowdefy to eliminate the recurring effort of writing bespoke React interfaces and database connectors for internal tools. Instead of hand-coding administrative panels or relying on closed visual builders, they structured entire web applications as declarative YAML configurations. That design provides a Git-friendly, schema-validated stack where internal tools can be versioned, reviewed in pull requests, and maintained alongside application code.
Why Lowdefy instead of Retool
Where Retool centers its platform on an interactive browser canvas with visual query inspectors, Lowdefy treats integrations as code. Data sources are declared in YAML as reusable connections and requests, supporting PostgreSQL, MySQL, MongoDB, REST endpoints, Google Sheets, S3, and Stripe. Database credentials and API tokens never reach the browser; they resolve on the server using environment secrets. Built on Next.js and Auth.js, authentication integrates with dozens of identity providers, and teams can add custom protocols through modular npm plugins.
The trade-off lies in visual discovery and catalog breadth. Retool lets teams browse schemas, test queries interactively, and preview payloads in seconds, whereas Lowdefy requires writing queries, state bindings, and data transformations in YAML using functional operators. Retool also provides pre-built integrations for niche SaaS services that require custom REST wrappers in Lowdefy. In exchange, Lowdefy eliminates proprietary lock-in and per-seat fees, running as a self-hosted Next.js service on existing infrastructure without licensing penalties as team size grows.
What it does well
- Declarative configuration as code: Applications are defined in YAML or JSON files, keeping UI blocks, event handlers, and queries versioned in Git.
- Server-side credential isolation: Database passwords and API keys referenced in configuration resolve strictly on the server tier, preventing secrets from leaking to browsers.
- Native database and API connectors: Built-in drivers for PostgreSQL, MySQL, MongoDB, Elasticsearch, and REST endpoints handle connection pooling and parameter sanitization.
- Extensible npm plugin architecture: Teams can publish custom React components, data connectors, and logic operators as npm packages to share internal UI standards.
