Appwrite Plugins

Cloud Data

Access Appwrite databases and storage with the same $x API as local data.

Setup

Complete the Appwrite setup steps to connect your Appwrite and Manifest projects.

Add the Appwrite SDK and manifest.js scripts to the HTML head. manifest.json is also required for Appwrite credentials and to register database tables or storage buckets.




<!-- Meta -->
<link rel="manifest" href="/manifest.json">

<!-- Scripts -->
<script src="https://cdn.jsdelivr.net/npm/appwrite@latest"></script>
<script src="https://cdn.jsdelivr.net/npm/mnfst@latest/lib/manifest.min.js"></script>

Overview

Appwrite's cloud data sources work identically to local data sources in the frontend, using the same $x magic method syntax. The plugin automatically handles authentication, permissions, and realtime updates.

Key Features:

  • Unified Syntax: Same $x.sourceName pattern for databases, storage, and local files
  • Realtime Updates: Changes sync automatically across all active sessions
  • Permission-Aware: Respects Appwrite permissions and scopes
  • CRUD Operations: Create, read, update, and delete using intuitive methods
  • Team Scoping: Automatically scope queries by team, user, or role

Rendering Untrusted Content

Cloud data is the case where Manifest's default-permissive rendering deserves a second thought: the values in an Appwrite table can be written by your end users (reviews, comments, bios, uploaded SVGs, etc.), not just by you.

For those cases, prefer the safe variants when rendering into HTML or SVG sinks:

Source Default render Safe opt-in
User-submitted markdown <div x-markdown="$x.comments.body"> <div x-markdown.safe="$x.comments.body">
User-uploaded SVG <span x-svg="$x.profile.avatar"> <span x-svg.safe="$x.profile.avatar">
Plain text in toasts/tooltips $toast($x.errors.message) Escape at source, or render via x-text

x-text, attribute bindings (:href, :src, :alt), and the standard Alpine x-show / x-if always treat values as data — they're safe by default. The .safe opt-ins exist for the HTML/SVG sinks where the default has to be permissive so authors can render their own rich content.

Next Steps

Complete cloud data support using the guides for: