SpringRoll
io.github.springrolldev/springrollRegister, deploy, review, and govern internal applications built with coding agents.
Score: 100/100
Handshake verified by our own probe.
Tools · 23
Start the company's configured security checks for an immutable release and environment. May send code only to policy-approved audit models within the configured budget. Does not deploy or waive Block…
Read the current job status, company policy decision, redacted findings and unchecked controls. Never starts or retries a scanner.
Submit a bug report, idea, or other feedback about SpringRoll on behalf of the authenticated member. Do not include credentials. Reuse the idempotency key when retrying the same submission.
List only the authenticated member's SpringRoll feedback in the current organization, newest first. Use nextOffset for the next page.
Returns the organization, identity, and permissions this agent token acts as, together with the deployment runtimes configured for it. Call this first: it tells you which tenant you are in, what you a…
Registers the project if it is new, attaches whatever source you give it, and deploys it using the application's Deployment workflow. Direct applications go to Production; Staged applications go to De…
Returns a deployment's current status, refreshing it from the runtime provider when the build is still in progress. Statuses: QUEUED, VALIDATING, BUILDING, DEPLOYING, READY, FAILED, CANCELLED, SUPERSE…
Promotes a tested deployment into the next environment (development -> uat, uat -> production). Reuses the already-built artifact rather than rebuilding, so the bytes that were tested are the bytes th…
Scores where SpringRoll would place this application and what it would cost, without deploying or writing anything. It shares its implementation with springroll.deploy, so the receipt it returns is wh…
Returns an application's registry record: metadata, lifecycle stage, risk score, and whichever of the optional sections you ask for. No secrets are included. Sections, all returned by default: • `s…
Lists applications in this organization, newest first. Use `search` to find one by name or slug.
Updates App Portal metadata: description, icon, tags, department, support contact, and data classification. Visibility is deliberately not editable here, because widening an audience requires an appro…
Read a private app listing draft and available artwork. Does not publish or expose the app.
Save listing copy and selected image IDs to a private draft. Read the revision first. Use factual copy and real, reviewed screenshots. Only the owner or admin can publish in SpringRoll.
Upload a real screenshot or app icon as base64 PNG, JPEG, or WebP (8 MB maximum). Metadata is stripped. Images remain private until selected in an owner-published snapshot. Never upload confidential s…
Queue one premium icon draft from the app's reviewed purpose. Requests are limited and deduplicated. Artwork never blocks deployment or publishes itself.
Submits an approval request of any supported type: UAT_PROMOTION, UAT_SIGN_OFF, PRODUCTION_PROMOTION, VISIBILITY_CHANGE, OWNERSHIP_TRANSFER, RETIREMENT, DOMAIN_CHANGE, or ROLLBACK. **An agent may subm…
Returns an approval request with its assigned reviewers, decisions so far, and the policy snapshot taken at submission. Poll this to find out whether a release has been approved.
Reports which governance policies an application would pass or fail for an environment. Send `manifest` (YAML or JSON) to validate a document without creating anything. Call this before springroll.de…
Without `dataProduct`, lists the governed data products this organization publishes: what each one holds, who owns it, and how sensitive it is. With `dataProduct`, returns that product's schema: its …
Requests access to a data product for one environment, naming the exact fields the application needs. A data owner must approve, and may narrow the field list or add a row filter before doing so. Noth…
Returns the status of a data access request: REQUESTED, APPROVED, REJECTED, REVOKED, or EXPIRED, with the fields actually approved. Approved fields are often narrower than requested, and a row filter …
Attaches the conversation that produced this application to its record, as reference for whoever maintains it next and for the reviewer who has to approve it. Ask the user before calling this, every …
Resources · 3
A complete, valid SpringRoll manifest to copy from. Read this before writing one, then check yours with springroll.policy.check.
springroll://manifest/example
springroll://blueprint/current
Approval requests waiting on a decision from this token's identity: routed to them, still needing a reviewer like them, and not yet decided by them. Read this to report outstanding work to the user. A…
springroll://approvals/pending
Prompts · 3
Register the project and deploy it using the organization's configured workflow, then report the live URL.
Find a governed data product, request only the fields this application reads, and wire up the SpringRoll SDK once a data owner approves.
For a Staged application, submit a tested release for production approval and poll for a decision.
How to use
Claude Desktop or claude.ai: add a custom connector (Customize → Connectors; on Team and Enterprise plans an owner adds it under Organization settings → Connectors) with this server URL: https://springroll.dev/api/mcp
Cursor or Cline: add to your MCP config:
{
"mcpServers": {
"springroll": {
"url": "https://springroll.dev/api/mcp",
"transport": "streamable-http"
}
}
}