The hard part of an internal tool isn't the API. It's the second user.

I replaced a SaaS subscription with a container that glues together services I already run. The integrations took a weekend. Everything that came after — isolation, three auth modes, audit — took the rest of the time, and that is the part nobody writes up.