Everything it takes to get your web app live — the steps, our automated AI review, and how we keep every listing secure.
Before you start
Created privately, then straight into the automated pipeline — most low-risk apps go live within minutes.
A Claude-powered reviewer checks the app is legitimate, that permissions match what it claims, and flags phishing or misleading claims. Your input is treated as untrusted.
In parallel it’s graded on a five-level risk scale. Sensitive permissions raise the level, and the model can only ever raise the risk, never lower it.
We re-check embed compatibility and auto-capture a screenshot so your listing looks complete from day one.
Approve + Minimal risk → published instantly, no waiting.
Anything in between waits for a human moderator’s call.
Reject, or High/Unacceptable risk → rejected with feedback.
Fewer sensitive permissions → lower risk, faster live.
Track where your app is from your dashboard.
Embeddable apps run in a locked-down iframe — they can’t reach the parent page or other apps.
Every URL is fetched through a guarded client that blocks private/loopback/metadata addresses.
All text you enter is sanitised server-side before storage, preventing XSS in your listing.
Full model: Security · Developer Agreement
Health-checks mark your app Healthy, Degraded or Down.
Re-scans for HTTPS, CSP and security headers; Pass / Warn / Fail.
Spots content changes and nudges you to publish a new version.
Repeated downtime or failed scans auto-suspend until fixed.
Completely free, and live within minutes.
