Dropyour
io.dropyour/dropyourPublish AND operate micro-apps from your AI. No account, no API key. Stable URL, EU-hosted.
Watch this dependency
Get before/after evidence when observed tools, schemas, authentication access, availability or the endpoint changes.
Inspect evidence and set up a watch Share public evidence report
Score: 100/100
Handshake verified by our own probe.
why this score
Tools · 37
Check how this session is authenticated: resolved tier (anonymous / free / pro) and its limits. Call this after configuring an account token (dyk_...) to confirm it is recognized — an invalid token si…
Publish a self-contained HTML file to Dropyour. Returns a stable public URL (one origin per drop — same address across updates, browser data survives) and a managementToken. KEEP THE TOKEN: it is show…
Publish 1 to 5 apps in ONE call, each at its own stable URL, all managed by ONE system token (ADR-0352). No account needed. Each app is a self-contained HTML file and goes through the same safety scan…
Replace the content of an existing drop — HTML, or a base64 .zip once the app has GRADUATED to tier 4. The URL never changes (origin contract): visitors' browser data survives the update. A drop keeps…
Change a drop's visibility (private = link-only + noindex, public = indexable), its expiration, or remove the "Hosted on Dropyour" badge (badgeHidden — Pro account token required), or its private name…
Store a SECRET for a graduated app (tier 4), bound to a host pattern. The value is encrypted at rest and NEVER readable back — by anyone, ever. The platform's egress membrane attaches it on outbound r…
Delete a secret from a graduated app's vault by name. Deleting a name that does not exist is not an error — the final state is what you asked for.
Read a graduated app's own log buffer (tier 4): the last 200 lines, most recent first — explicit `app.log(...)` calls from the app's server code, plus platform-captured errors the code could not log i…
Cut a host your graduated app is calling — in ONE call, taking effect on the next request, with NO republish. This is the verb for the moment you read in dropyour_logs that a key is leaving toward som…
List a graduated app's secrets: NAMES, host bindings and dates only — values are never returned, by design (a vault whose values can be read is a vault worth stealing). Use it to know what to rotate o…
GRADUATE one of your drops to tier 4 — a real backend (server code, queryable store, isolated SQLite) behind the SAME URL, with its data carried over. This ACTS: it creates the app, moves the data acr…
Bring an EXISTING app to Dropyour in one call: zip its files (you have them — from GitHub, disk, another host) and pass the archive. A single-HTML archive publishes like dropyour_publish, any tier, no…
Read what a GRADUATED app actually SERVES right now — not the seed captured before it graduated. Without path: the list of files in the served version, with their size, and whether each one is server …
Call a route of YOUR OWN drop and get the real HTTP answer back: status, headers, duration, body. This is how you check that what you just published actually works, without asking a human to open the …
Your app's clock, in one verb. action='read' (default) tells you when it next rings, whether the app is frozen, and the last runs WITH THEIR EFFECT: verdict, duration, and the state version before and…
Get a drop's status: URL, visibility, expiration, size, approximate view count, and its private name (if set). With an account token, owned drops need no managementToken. This reads the DROP's record,…
Read a drop's source HTML (what you published — no shared-memory shim, no attribution badge). For multi-file sites, also returns the list of asset paths (not their bytes). Large content is truncated (…
Read a drop's app data — the shared-memory state (a JSON key/value snapshot mirroring the app's localStorage), so you can answer questions about what the app holds. Returns scope='server' with {versio…
Write a drop's app data — replace the shared-memory state (the JSON key/value object mirroring the app's localStorage), so you can update what the app holds (mark a task done, add a row…). Read it fir…
List the published versions of a GRADUATED app (level 4), newest first, with the one currently served. Each version carries its network and AI inventory (`inventaire`): the external hosts its SERVER c…
Roll a GRADUATED app back to a previously published version — this is the EXPECTED FAILURE PATH of dropyour_release, which calls it for you when a check fails. Reach for it directly when you published…
A milestone records the version currently SERVED by every GRADUATED app of the anchor's system (dropyour_system), callers first; when the anchor is in no system, by the anchor and every app it is link…
Summarise what a GRADUATED app keeps in its queryable store: one line per collection with the number of records and the bytes they occupy. Nothing is downloaded. Levels 1-3 have no store (it needs a b…
Read one page of a collection from a GRADUATED app's queryable store, most recently updated first. Pass the returned cursor to get the next page; no cursor means you reached the end. IMPORTANT: every …
Declare how much you delegate to the machine on ONE of your apps. Three modes. 'copilote' — nothing is autonomous: every call is a human gesture you are relaying, and everything your authority allows …
Let one of your graduated apps call ANOTHER of your apps over the network. By default no app can reach another — that refusal is the platform's isolation, not an oversight. This opens exactly the app …
Mint a NEW management token for a drop and kill the old one — the self-serve way out of a lost or leaked token. Works with the old token (rotation) or with your connected account for a drop you own (r…
Replace ONE literal anchor in the SERVED content without re-uploading everything — the Edit semantics you already know. old = the exact literal text to find; new = its replacement; occurrences (defaul…
Make YOUR graduated app callable by a third party's agent, as an MCP server at https://<dropId>.dropyour.site/mcp — live as soon as ONE tool is declared; no tool declared = no /mcp at all (404). actio…
Events between YOUR server apps, SIGNAL ONLY. A topic (e.g. 'devis.signe') declares the identifier keys its signal carries, e.g. ['devisId']; a signal never carries data, the subscriber reads the deta…
Declare the visibility of ONE collection of your graduated app's store. Two values, no policy language. 'partagee' (the default): all in-app reads see the whole collection — today's behaviour, nothing…
Write (or replace) ONE row in a graduated app's store, without republishing anything. The store is the app's queryable database (tier 4); this is the same table your app code reads with records.list/g…
Publish new content AND check it works, in one transaction. If any check fails, the previous version is put back automatically and you get the failing check plus your app's log lines for that attempt.…
Permanently delete a drop. Immediate and final — the URL is never reassigned. With an account token, owned drops need no managementToken.
Let ANOTHER Dropyour account maintain one of your apps, with a closed role, and take it back at any time. action='list' (default) shows who has access. action='grant' gives `email` (the email of an EX…
Manage SYSTEMS: named groups of up to 9 of your apps, handled as one (ADR-0353). action='list' (default) shows your systems and their apps. 'create' needs `name` and optionally `apps` (dropIds you own…
List your drops. With an account token: all LIVE drops attached to your account (across sessions and channels — manageable without managementToken), plus, under `delegated`, the apps OTHER accounts en…
Resources · 4
Publish a single HTML file to a stable public URL with Dropyour, with no account. Use when the user wants to put a page, a tool or a demo online from the chat.
dropyour://guide/publish
Write server-side code (server.js) for a graduated Dropyour app: queryable store, clock, secrets, signed-in visitors, files, realtime. Use when the app needs data shared between visitors, a scheduled …
dropyour://guide/server
Diagnose and fix a Dropyour app that broke: read its log, list versions, roll back. Use when a published app returns an error, stopped working, or an update went wrong.
dropyour://guide/repair
ui://dropyour/drop.html
Prompts · 1
The exact rules to follow before generating a file for Dropyour (mode: html | zip | server).
How to use
Add to your Claude Desktop / Cursor / Cline MCP config:
{
"mcpServers": {
"dropyour": {
"url": "https://mcp.dropyour.io/mcp",
"transport": "streamable-http"
}
}
}