It's intentionally narrow: plain text only on the free/self-hosted core, one shared token, self-hosted flat-file storage — no CMS migration, no per-framework SDK. MIT licensed, reference server included.
A few things I spent real time on since this is meant to run on other people's production sites: the token never touches innerHTML (writes go through textContent), it's scoped per-backend in localStorage so embedding two Editbar instances on one page can't cross-contaminate, and there's a no-referrer meta injected early so a one-time admin link doesn't leak into third-party Referer headers. Full write-up in docs/ARCHITECTURE.md.