A headless CMS separates the content management backend from the frontend presentation layer. Instead of rendering pages itself, it delivers structured content via APIs — letting you build any frontend with any technology.

PagibleAI takes this further as an API-first CMS: full headless capabilities via JSON:API and GraphQL, plus optional Blade template rendering when you want a complete website without building a separate frontend.

composer require aimeos/pagible
php artisan cms:install
php artisan migrate

PagibleAI gives you three content delivery options — choose what fits your project, or combine them:

JSON:API for Content Delivery — A read-only, JSON:API-compliant REST endpoint optimized for frontend consumption. Delivers all page data, nested elements, and file references in a single request — ideal for SPAs, mobile apps, and static site generators. Engineered to handle billions of requests with minimal latency.

GraphQL Admin API — Powered by Lighthouse, the admin API provides complete control over pages, elements, files, versions, and user permissions. It's the backbone of the Vue.js admin panel and can be used to build custom admin interfaces or automate content workflows.

Blade Templates with Themes — The fastest way to build a complete website. PagibleAI ships with a theme engine that renders pages using Laravel's Blade templates. Publish and customize the views, create your own themes, or assign different themes per page. Perfect for server-rendered sites where you want full control over the HTML without building a separate frontend.

PagibleAI grows with your application — from a simple blog to a high-traffic enterprise platform:

• Any database — Works with SQLite, MySQL, PostgreSQL, and SQL Server, all with built-in full-text search
• Smart caching — Per-page cache with configurable duration keeps your site fast without extra setup
• Multi-tenancy — Run multiple sites from a single installation with automatic data separation per tenant
• Cloud-ready — Deploy on AWS, Google Cloud, Azure, or Kubernetes and scale across multiple servers
• Fast page trees — Hierarchical pages are stored efficiently so even deep navigation structures load instantly
• Built-in rate limiting — All endpoints are protected against overload out of the box

PagibleAI takes security seriously so you don't have to worry about common vulnerabilities:

• Content sanitization — All user input is automatically cleaned to prevent malicious code from reaching your visitors
• Security headers — Content Security Policy headers are set up out of the box to block unauthorized scripts
• Bot protection — Built-in HCAPTCHA keeps forms safe from automated spam submissions
• Data consistency — Database constraints ensure your content stays intact, even when deleting related items
• Tenant isolation — Each tenant's data is completely separated, so there's no risk of cross-site leaks