Skip to main content

Technology Stack

SemanticFed is a managed, multi-tenant cloud service. There is nothing for you to install or operate — you work through the web app, the GraphQL API, or the ecosystem clients, and the service handles connectivity, planning, and governance for you.

What SemanticFed provides​

  • A federated query service — a cost-aware planner that pushes filters, projections, and aggregations down to each registered source and returns one result
  • A typed semantic layer — versioned models made of entities, dimensions, metrics, and relationships
  • Governance — access policies, audit, and lineage applied to every federated query
  • Three functional areas — sources (connectivity), model (the semantic layer), and queries (execution and governance)

Clients & surfaces​

  • Web app — the full product in your browser at app.semanticfed.com
  • GraphQL API — the federated model and all governance
  • SQL endpoint — a single SQL interface over the federated model (roadmap)
  • CLI — @semanticfed/cli — terminal-native automation
  • Node.js SDK — @semanticfed/sdk — typed programmatic access
  • Python SDK — semanticfed-sdk — async-first Python client
  • Browser Extension — Chrome MV3 popup and side panel
  • VS Code Extension — burdenoff.semanticfed-code-extension
  • MCP server — @semanticfed/mcp — AI agent tools and resources
Environment selection

All clients target production by default. Switch to local or alpha via BURDENOFF_ENV. See Environment Selection for per-client instructions.

The web app supports light, dark, and high-contrast themes and is built for keyboard and screen-reader accessibility.

Supported data sources​

SemanticFed registers and federates across:

  • Relational databases — PostgreSQL, MySQL, MongoDB
  • Cloud warehouses — Snowflake, BigQuery, Redshift, Databricks, ClickHouse
  • Object-storage lakes — S3 / Parquet
  • SaaS APIs — REST and GraphQL

Each connector advertises its push-down capabilities so the cost-aware planner uses every source to its strengths. (Live connector introspection and the federated execution engine expand through the roadmap.)

Included capabilities​

Single sign-on, role-based access control, multi-tenancy, billing and quotas, notifications, conversations, activity and audit trails, tags, files, groups, internationalization, accessibility, guided tours, feature flags, scheduling, workflow, analytics, and support are included with the product — so every workspace is enterprise-ready from day one.

Security & governance​

  • OIDC SSO with OAuth flows for the web app, CLI, MCP server, SDKs, and integrations
  • Every operation is permission-checked against your role-based access control rules before it runs
  • Policy at the query edge — row filters, column masking, and entity-level ALLOW/DENY policies
  • Tenant isolation by construction — every read and write is workspace-scoped
  • Credentials by reference — data sources hold a secretRef, never an inline secret; secret values are held in encrypted, environment-isolated storage and are never returned by the API
  • Secure delivery — dependency, image, and configuration scanning plus secret scanning on every build
Pre-launch

SemanticFed makes no third-party certification claims (e.g. SOC 2 / ISO 27001) ahead of launch; compliance evidence exports and SIEM streaming are on the roadmap.