A skill teaches Claude Code a procedure. An MCP server gives it tools. A plugin packages skills, tools and more into one install. SpringRoll uses two of these: an MCP server with the tools to deploy and share apps, and a skill with the procedure for doing it well. This guide explains each piece, shows where it lives and how to install it, and sets up SpringRoll as the worked example.
Shadow AI means employees using AI tools or AI-built apps IT has not approved. See the risks and examples, and how SpringRoll gives those apps a sanctioned path.
SpringRoll is a remote MCP server. Follow its streamable HTTP endpoint and OAuth sign-in step by step, and connect it from Claude Code, Codex, Cursor or ChatGPT.
Vercel Hobby limits, its non-commercial rule and how Pro compares, checked 7 November 2026, and how SpringRoll runs team apps without a personal Vercel account.
Govern employee-built AI apps with an inventory, accountable owners, release review, scoped data and launch access. Use a practical IT policy template.
