stk is a lean Python SaaS framework built for the new AI cost curve. Generation is cheap now; verification, security, judgment, and product taste are the bottleneck. stk gives agents a secure app surface to build on, then makes that surface easier to inspect, verify, review, and ship.
AI made scaffolding, refactoring, and documentation cheap. It did not make security, review, or product judgment cheap. stk is shaped around that shifted center of gravity.
stk assumes ideas, scaffolds, refactors, and docs are cheaper than before. It optimizes the expensive part: turning output into a secure, reviewed app you can trust.
idea → scoped plan → app surface → inspect · verify · review · ship
The agent should not infer everything from random files. stk exposes boring, inspectable facts about the app and a verification gate before you trust the result.
$ uv run quart inspect routes --json $ uv run quart verify $ uv run quart report
The frontend runs on Vue 3, loaded directly in the browser. There's no separate JavaScript build to install or maintain, so the agent edits plain HTML templates instead of wrestling a toolchain.
# no build, no install step templates/index.html → Vue 3 from a CDN
User accounts, the admin dashboard, the async database layer, realtime, and migrations already exist and are tested, so the agent spends its time on your product instead of rebuilding the basics.
auth · admin · async-db · realtime migrations · sessions · rbac · audit-log
Your dependencies are Python only — one list to read, pin, and update, instead of two stacks to keep current.
User accounts and passwords stay in your own database. No third party holds them, and there's no per-user fee to log people in.
Because the frontend runs in the browser, it doesn't pull in the hundreds of small packages a typical web build depends on.
Registration, login, recovery, and server-side sessions, plus TOTP 2FA, WebAuthn passkeys (Touch ID, YubiKey), OAuth with account linking, recovery codes, account lockout, and rate limiting.
Quart, async SQLAlchemy, aiosmtplib, and native WebSockets. Real concurrency, not async bolted onto a sync core.
User CRUD, role-based access, an activity audit log, paginated tables with a JSON API, and realtime updates over WebSocket.
SQLite by default so you deploy anywhere. Drop in PostgreSQL when you need it. Alembic migrations included.
Vue 3 + Vuetify 3 in the browser with 7,000+ MDI icons. Edit a template, refresh, done.
Five commands, zero configuration. Need the full stack? docker compose up brings PostgreSQL, Redis, and Nginx with it.
One command to a fresh VPS with automatic SSL via Caddy.
./ignite deploy
Full stack in containers: PostgreSQL, Redis, and Nginx, production-ready.
docker compose up -d
Plain ASGI: Uvicorn behind Nginx or Caddy, managed by systemd.
uvicorn run:app
ReadyKit adds Stripe, multi-tenancy, and teams on top of stk.