Oracle APEX + ORDS · OpenAPI 3.0 · AI-Ready

Reuse APEX regions
Secure REST endpoints
AI skills

Leverage the data regions already defined in your on-premise APEX applications — no duplicated SQL, no new models. Each region becomes a documented, token-secured REST endpoint, discoverable through an OpenAPI 3.0 catalog and ready to plug into Claude, ChatGPT, and enterprise integrations.

Multiple APEX apps · One secure REST & AI gateway Token-secured · OpenAPI catalog · No SQL duplicated APEX App · HR APEX App · Sales APEX App · Finance Any region · Any app ARS REST ENGINE SECURE AES-256 API TOKENS OpenAPI Catalog Discoverable · Self-documenting QUERY JSON Any Client 📱 Mobile 🤖 AI agents 📊 BI tools 🏢 On-prem apps 🌐 Web apps ⚙️ ETL / ESB

Stop Building Custom REST APIs by Hand

Every time you need to expose APEX data externally, you face the same tedious work. There's a better way.

⚠️ Without APEX REST Services

  • Manually duplicate SQL queries into ORDS handlers
  • Rebuild pagination, filtering, and sorting from scratch
  • Maintain two codebases — APEX regions and REST endpoints
  • Write custom JSON serialization for every data type
  • Build token management and access control per endpoint
  • No schema discovery — clients guess your data model

✅ With APEX REST Services

  • Any APEX region becomes a REST endpoint instantly
  • Built-in pagination, offset, and limits out of the box
  • Single source of truth — the APEX region IS the API
  • Automatic type-aware JSON with full Oracle data type mapping
  • Centralized token auth with AES-256 encryption
  • Auto-generated JSON Schema endpoint for every region

Everything You Need, Built In

A complete API platform for Oracle APEX — from data exposure to security, documentation, and monitoring.

📊

Dynamic Region Access

Query Interactive Reports, Interactive Grids, Classic Reports, Charts, and any SQL-based region by static ID. No hardcoded SQL required.

📄

Auto-Generated Schema

Every region gets a dedicated /schema endpoint returning JSON Schema with column names, data types, and formats. Self-documenting APIs.

Smart Pagination

Built-in offset/limit pagination with navigation links, hasMore detection, and configurable page sizes up to 1,000 rows per request.

🔗

Session State Support

Pass APEX page items and values through the API to drive filters, computations, and conditional logic — just like a real APEX session.

📁

Saved Report Support

Access named saved reports and alternative views — REPORT, CHART, GROUP_BY, and PIVOT modes — all through the same endpoint.

🔄

Multiple JSON Formats

Choose from Simple, ORDS-compatible, or JSON:API response formats with full pagination metadata and navigation links.

📚

OpenAPI 3.0 Catalog

A single /catalog endpoint returns a full OpenAPI 3.0 document describing every REST-enabled region, saved report, view mode, and bind variable — scoped to your bearer token.

🧠

AI Skill for Claude & ChatGPT

Ships with a ready-to-use apex-rest-query skill plus an OpenAI agent manifest. Drop it into Claude or ChatGPT and agents can discover, introspect, and query your APEX data autonomously.

🎫

Preview Tokens & Config

Generate short-lived preview tokens for safe demos and testing. Centralized configuration table lets you tune defaults — page size, JSON format, host — without redeploying code.

Plug Your APEX Data Into Claude, ChatGPT, and Any Agent

APEX REST Services ships with a packaged AI skill and an OpenAI agent manifest — so modern LLMs can discover, introspect, and query your APEX regions the moment they're exposed.

🗂️

Catalog-First Discovery

Agents start by calling /catalog to find the right application, page, region, saved report, and view mode — no guessing, no prompt engineering.

🧩

Claude Skill Included

The apex-rest-query skill bundles a Python CLI (catalog, find, schema, data, query) that Claude invokes to answer data questions safely.

🤖

OpenAI Agent Manifest

A ready agents/openai.yaml exposes the skill as a ChatGPT agent with allow-implicit-invocation — plug it into an Assistants workflow in minutes.

🔑

Secure by Design

Tokens are loaded from environment, local .env, or the OS keychain — never hardcoded. Every agent call flows through the same AES-256 token + application whitelist.

Zero-boilerplate data access for AI agents 🤖 Claude Agent / Desktop 💬 ChatGPT Assistants API 🧩 Claude skill apex-rest-query Python CLI · bundled 📜 OpenAI manifest agents/openai.yaml Drop-in · auto-invoke 🔐 BEARER TOKEN ARS REST ENGINE OpenAPI 3.0 catalog · auto-discovered catalog schema find data

From Install to API in Four Steps

Get up and running in under 15 minutes with a single SQL install script.

1

Install

Run @install.sql in your Oracle schema. Packages, views, and ORDS module are deployed automatically.

2

Configure

Register API tokens, set allowed applications, and choose your preferred JSON response format.

3

Discover

Call /apex/regions/catalog to fetch an OpenAPI 3.0 document listing every region, saved report, and view mode available to your token.

4

Integrate

Hit /data from any frontend, BI tool, or AI agent — or drop in the bundled Claude skill / OpenAI manifest and let the agent do it.

Flexible JSON Output for Any Consumer

Choose the format that fits your client — from minimal arrays to fully compliant JSON:API structures.

Simple
{ "items": [ { "EMPNO": 7839, "ENAME": "KING", "JOB": "PRESIDENT", "SAL": 5000 }, ... ] }
ORDS Format
{ "count": 25, "hasMore": true, "limit": 25, "offset": 0, "links": [ {"rel": "next", ...}, {"rel": "first", ...} ], "items": [...] }
JSON:API
{ "meta": { "count": 25, "hasMore": true }, "links": { "self": "...", "next": "...", "first": "..." }, "data": [...] }

Secure by Default, Not by Afterthought

AES-256 encrypted tokens, application whitelisting, full audit trails, and integration with APEX authorization schemes.

🔐

AES-256 Token Encryption

Cryptographically generated 32-byte tokens stored with AES-256-CBC encryption and PKCS5 padding.

🛡️

Application Whitelisting

Control exactly which APEX applications each API token can access. Granular per-token restrictions.

📋

Full Audit Trail

Every token creation, modification, and API request is logged with timestamps, users, and context.

⏱️

Token Expiration

Set expiration dates on tokens for temporary access grants. Expired tokens are rejected automatically.

Enterprise-grade token security 👤 APEX Admin register_token() Name · Apps · Expiry 🔌 API Client Mobile · Agent · BI Sends bearer token issues presents Token Vault ars_tokens AES-256-CBC encrypted Never stored in cleartext Validation Gate validate_token() App whitelist · Expiry Rejects on mismatch lookup ARS REST Engine Serves data only after validation passes 📝 Full audit trail · Oracle Logger Every issue · validation · data call is logged

Built for Real-World Integration

From mobile apps to AI-powered dashboards — ARS fits wherever your data needs to go.

📱 Mobile & SPA Frontends

Build React, Angular, or Flutter apps powered by your existing APEX regions. No backend rewrite needed — your APEX SQL is the API.

🤖 AI & LLM Integration

Ship the bundled Claude skill and OpenAI agent manifest and let agents auto-discover regions through the OpenAPI catalog — no custom tool wiring required.

📈 BI & Analytics Tools

Connect Power BI, Tableau, or custom dashboards directly to APEX data via standard REST. Real-time data, no ETL pipelines required.

🔄 System-to-System Integration

Expose APEX data to ERP, CRM, and third-party systems using standard HTTP and JSON. Works with any integration platform.

🌐 Headless APEX

Decouple your data layer from the APEX UI. Serve the same data to web, mobile, IoT, and partner channels from a single source of truth.

🧪 Testing & Automation

Automated test suites can validate APEX region data through REST calls. Includes a ready-made test harness with 12+ test scenarios.

Enterprise-Grade Foundation

Built on proven Oracle technologies. No external dependencies. Installs in your existing environment.

🏛️
Oracle Database
12c and above
Oracle APEX
24.2 and above
🔌
ORDS
19.1 and above
📝
Oracle Logger
Optional (stub included)