Create, read, update, and delete data in your Base44 app
The entities module lets you work with your app’s data. Each entity type in your app has methods for creating, reading, updating, and deleting records.You access entity methods through your entity name: base44.entities.YourEntityName.methodName(). For example, if you have a Task entity, you use base44.entities.Task.list() to get a list of tasks.
Generate TypeScript types from your entities to get autocomplete and type
safety. Run base44 types generate in your
project, and all entity fields, methods, and return types will be fully typed.
Learn more about dynamic
types.
Data access is controlled by the client’s authentication mode and your app’s permission rules. You can configure the permissions for each entity in your app’s security settings. Learn more about changing data permissions.
Anonymous users: Can only access entities marked as public.
Authenticated users: Can access entities and records they have permission to view or modify based on your app’s configured access rules.
Service role: Bypasses entity access rules and field-level security entirely. Has full read and write access to every entity and record in the app.
// After running: base44 types generateconst newTask = await base44.entities.Task.create({ title: "Complete documentation", status: "pending", // TypeScript knows which fields exist // and validates their types});// Autocomplete works for fieldsconsole.log(newTask.id);console.log(newTask.created_date);
Retrieve data using get() for a single record, list() for all records, or filter() for records matching specific criteria.Use get() with a record ID to retrieve a specific record:
By default, data access is scoped to the current user’s permissions. With service role authentication, you can read and write any data in your app. Entity access rules and field-level security are bypassed entirely, regardless of how the entity is configured.Use base44.asServiceRole.entities to access data without access-rule restrictions:
// User-level access (limited to current user's permissions)const myTasks = await base44.entities.Task.list();// Service role access (bypasses entity access rules)const allTasks = await base44.asServiceRole.entities.Task.list();
Service role access skips every access rule on the entity. Use it only for trusted backend logic. If your function needs access checks, you’re responsible for enforcing them yourself.
Every Base44 app includes a built-in User entity that stores user account information. This entity has special security rules:
Regular users can only read and update their own user record
With service role authentication, you can read, update, and delete any user
You cannot create users through the entities module - use the auth module instead
You can add fields to the User entity to store additional user data, then use those fields in security rules to control data access or in your app to personalize the experience. See User Schema for details.