The Control Plane and App Portal for AI-built Applications

SpringRoll MCP

Ask your agent. SpringRoll handles the handoff.

One MCP prompt reads your organization context, records an immutable release, starts the deployment, and returns the live URL.

One governed route

From coding agent to company app.

Codex, Claude, and Cursor build. SpringRoll reviews, deploys, and connects each app to approved company systems before it reaches the people who use it.

BUILD

AI coding agents

Codex
Claude
Cursor

Control Plane

Identity · approval · policy · audit

CONNECT

External Data

Database
SAP
Salesforce
Notion
Files
APIs

LIVE AFTER DEPLOY

A URL your team can open and share.

https://your-app.com

Use the preview for feedback, then promote the same release.

Example apps you can deploy to SpringRoll

HR chatbot
Finance
IT tools
Any AI-built apps

Deploy with the skill

One command to deploy your AI-built app.

Install the skill in one line, then ask your agent to deploy, promote, check policy, or request governed data. The skill guides the complete MCP workflow and tells you when secure authorization or a human decision is required.

1
Install the SpringRoll skill
One command teaches your coding agent how to deploy with SpringRoll, request approvals, and access governed data.
```
npx skills add springroll-dev/springroll-skill --skill springroll
```
2
Ask your agent to deploy
The agent registers the application, freezes an immutable release, and deploys it. The first live call opens your browser once so you can choose an organization and authorize. There is no token to paste.
```
/springroll deploy
```
Open and share the URL
SpringRoll returns a live URL your colleague can open, with ownership and approval already recorded.
https://your-app.comlive

Advanced: Connect SpringRoll MCP manually

Choose your client to configure and authorize the SpringRoll MCP endpoint yourself.

Terminal. One command, then authorize.

01
Add SpringRoll
Run this once, from anywhere.
```
claude mcp add --transport http springroll https://springroll.dev/api/mcp
```
Then start Claude and authorize. Your browser opens by itself.
```
/mcp
```
02
Authorize
Choose your organization in the browser and approve the connection. No credential is exposed for you to store.
03
Deploy
Ask the agent to register, validate, and deploy the project.
```
/springroll deploy
```

Also claude.ai. Added as a custom connector.

Custom connectors are a paid feature on Claude: Pro, Max, Team, or Enterprise.

01
Add SpringRoll
Open Settings, then Connectors.
Choose Add custom connector.
Name
```
SpringRoll
```
URL
```
https://springroll.dev/api/mcp
```
Save, then connect. Claude opens this authorization page itself.
02
Authorize
Choose your organization in the browser and approve the connection. No credential is exposed for you to store.
03
Deploy
Ask the agent to register, validate, and deploy the project.
```
Deploy this project to SpringRoll.
```

Web. Needs developer mode turned on first.

Connectors are available on ChatGPT Pro and Plus on the web. Use your public SpringRoll MCP endpoint below; ChatGPT must be able to reach it over the internet.

01
Add SpringRoll
In Settings, open Connectors, then Advanced settings, and turn on Developer mode.
Back in Connectors, choose Create.
Name
```
SpringRoll
```
MCP server URL
```
https://springroll.dev/api/mcp
```
Authentication
```
OAuth
```
Create, then authorize. The connector appears under Developer mode in the composer.
02
Authorize
Choose your organization in the browser and approve the connection. No credential is exposed for you to store.
03
Deploy
Ask the agent to register, validate, and deploy the project.
```
Deploy this project to SpringRoll.
```

Terminal. The CLI finds the authorization server itself.

01
Add SpringRoll
Run this once. Codex probes the URL, sees it supports OAuth, and opens your browser.
```
codex mcp add springroll --url https://springroll.dev/api/mcp
```
The entry is written to ~/.codex/config.toml. Add it inside a project to scope it to that project instead.
02
Authorize
Choose your organization in the browser and approve the connection. No credential is exposed for you to store.
03
Deploy
Ask the agent to register, validate, and deploy the project.
```
Deploy this project to SpringRoll.
```

Editor and CLI. One project file, then OAuth login.

01
Add SpringRoll
Create .cursor/mcp.json in your project. Cursor and Cursor Agent both read this file.
.cursor/mcp.json
```
{"mcpServers":{"springroll":{"url":"https://springroll.dev/api/mcp"}}}
```
Authorize SpringRoll from Cursor Agent. Your browser opens for organization approval.
```
cursor-agent mcp login springroll
```
02
Authorize
Choose your organization in the browser and approve the connection. No credential is exposed for you to store.
03
Deploy
Ask the agent to register, validate, and deploy the project.
```
Deploy this project to SpringRoll.
```

One URL. Nothing else to configure.

01
Add SpringRoll
Remote MCP endpoint
```
https://springroll.dev/api/mcp
```
Any MCP client that speaks streamable HTTP can be pointed straight at this URL. It still opens a browser to authorize. The endpoint advertises its own authorization server, so the URL is the only thing to configure.
Clients that register a private-use redirect scheme without a dot in it are refused at registration. Use a client path with an HTTPS, loopback, or reverse-domain callback.
02
Authorize
Choose your organization in the browser and approve the connection. No credential is exposed for you to store.
03
Deploy
Ask the agent to register, validate, and deploy the project.
```
Deploy this project to SpringRoll.
```

Your App Portal

A real home for every AI app.

See what is running, who owns it, what data it can use, and who approved it. When something changes, the history stays with the app.

Example workspace

App Portal

Organization: Your company
View: Approved applications

People Policy Assistant
Approved HR policies and benefits
In focus
Deal Desk Assistant
Quotes, pricing rules, and exceptions
Support Quality Coach
Conversation QA, coaching, and themes

Selected application

People Policy Assistant

people-policy-assistant

Answers employee questions from approved HR policies and benefits material.

PRODUCTIONREADYinternal

Owner: People Operations
Audience: All employees

Knowledge access

Only approved material reaches the answer.

Sources: HR policies and benefits guide
Access: Approved sources only

Questions before you deploy

FAQ

SpringRoll is built for the handoff after an AI coding tool has made the app: deployment, approval, access, and a URL your team can actually use.

Is SpringRoll another AI app builder?

No. Codex or Claude remains the coding agent. SpringRoll handles the deployment and governance handoff after an application exists.

What happens after I connect my coding agent?

Your agent registers the app, creates an immutable release, and deploys it directly to Production by default. SpringRoll returns a live URL you can open and share.

Can I share the deployed app?

Yes. Every deployment returns a URL. Direct applications are live immediately; staged applications can share previews before promoting the same recorded release.

Which coding agents can I use?

Claude Code, Cursor, Codex, ChatGPT, Claude Desktop, and other OAuth-compatible MCP clients are supported.

What does SpringRoll do for a team shipping what an agent built?

The Control Plane and App Portal for AI-built Applications. It does not write applications; it governs what happens after one exists. SpringRoll registers an immutable release, deploys it safely, connects it to approved company data through its own identity and grants, and makes it available to approved users in the App Portal.

Which hosting providers can SpringRoll deploy to?

SpringRoll currently deploys to managed Vercel and Cloudflare. Vercel and Cloudflare are SpringRoll-managed. Customers do not provide provider credentials. Products that cannot run the workload or supply a required capability are excluded before cost is compared. SpringRoll compares eligible Vercel and Cloudflare plans, selects the lowest-cost qualified fit, and records the estimate, assumptions, and limits.

Does my app move between providers on its own?

No. A production placement is sticky. SpringRoll keeps re-scoring it, and it raises a migration recommendation only when the saving is worth at least 20 percent and 5 US dollars a month with no loss of compliance. An administrator must approve the new placement decision.

What does SpringRoll give the platform and security owners who have to allow it?

Every application has a named owner, a support contact, a data classification, and an approval on record. Secrets are write-only and never displayed. A deployed app reaches company data through its own identity, scoped by a data owner to specific fields, rows, and query volume, revocable without a redeploy. Every governed action appends a hash-chained audit event that the database itself refuses to let anyone rewrite.

Does the app get our database password?

No. SpringRoll keeps the source credential. The app receives its own identity and can only request the fields, rows, and volume a data owner approved.