PagibleAI is a standard Composer package. Add it to any Laravel 11, 12 or 13 application and run the migrations — no separate services, no external dependencies.

composer require aimeos/pagible
php artisan cms:install
php artisan migrate

PagibleAI gives you three ways to deliver content — choose what fits your project, or combine them:

GraphQL Admin API — Powered by Lighthouse, the admin API provides complete control over pages, elements, files, versions, and user permissions. It’s the backbone of the Vue.js admin panel and can be used to build custom admin interfaces or automate content workflows.

JSON:API for Content Delivery — A read-only, JSON:API-compliant REST endpoint optimized for frontend consumption. Delivers all page data, nested elements, and file references in a single request — ideal for SPAs, mobile apps, and static site generators.

Blade Templates with Themes — The fastest way to build a complete website. PagibleAI ships with a theme engine that renders pages using Laravel’s Blade templates. Publish and customize the views, create your own themes, or assign different themes per page. Perfect for server-rendered sites where you want full control over the HTML without building a separate frontend.

PagibleAI grows with your application — from a simple blog to a high-traffic enterprise platform:

• Any database — Works with SQLite, MySQL, PostgreSQL, and SQL Server, all with built-in full-text search
• Smart caching — Per-page cache with configurable duration keeps your site fast without extra setup
• Multi-tenancy — Run multiple sites from a single installation with automatic data separation per tenant
• Cloud-ready — Deploy on AWS, Google Cloud, Azure, or Kubernetes and scale across multiple servers
• Fast page trees — Hierarchical pages are stored efficiently so even deep navigation structures load instantly
• Built-in rate limiting — All endpoints are protected against overload out of the box

PagibleAI takes security seriously so you don’t have to worry about common vulnerabilities:

• Content sanitization — All user input is automatically cleaned to prevent malicious code from reaching your visitors
• Security headers — Content Security Policy headers are set up out of the box to block unauthorized scripts
• Bot protection — Built-in HCAPTCHA keeps forms safe from automated spam submissions
• Data consistency — Database constraints ensure your content stays intact, even when deleting related items
• Tenant isolation — Each tenant’s data is completely separated, so there’s no risk of cross-site leaks