Apps

Publish a server app once and reach it at a stable public URL — no infrastructure to manage. CloudClawer runs it inside your existing sandbox using the same slot mechanism as custom tools.

{
  method:  string;                  // "GET" | "POST" | "PUT" | "DELETE" | ...
  path:    string;                  // e.g. "/api/users/42" (relative to /apps/{id}/web)
  query:   Record<string, string>;  // parsed query string
  headers: Record<string, string>;  // request headers (host, authorization stripped)
  body:    string;                  // raw request body as a string
}

{
  status:   number;                  // HTTP status code, e.g. 200
  headers?: Record<string, string>;  // optional response headers
  body:     string;                  // response body as a string
}

// server.mjs
export default async function handler(input) {
  return {
    status: 200,
    headers: { "content-type": "application/json" },
    body: JSON.stringify({ hello: "world", path: input.path }),
  };
}

// server.mjs
export default async function handler(input) {
  return {
    status: 200,
    headers: { "content-type": "application/json" },
    body: JSON.stringify({
      method: input.method,
      path:   input.path,
      query:  input.query,
      body:   input.body,
    }),
  };
}

// server.mjs
export default async function handler(input) {
  const { method, path, body } = input;

  if (method === "GET" && path === "/health") {
    return { status: 200, headers: { "content-type": "text/plain" }, body: "ok" };
  }

  if (method === "POST" && path === "/echo") {
    return { status: 200, headers: { "content-type": "application/json" }, body };
  }

  return { status: 404, body: "Not found" };
}

{
  "manifestVersion": "1",
  "name": "my-server-app",
  "displayName": "My Server App",
  "description": "A minimal HTTP server app",
  "version": "1.0.0",
  "author": "your-username",
  "entrypoint": "handler.mjs",
  "execution": {
    "lifecycle": "per-call",
    "timeout_ms": 30000,
    "input_schema": { "type": "object", "properties": {} }
  },
  "permissions": {},
  "web": {
    "entrypoint": "server.mjs",
    "type": "server"
  }
}

export CLOUDCLAWER_API_KEY="YOUR_API_KEY"
export API="https://api.cloudclawer.com"

# GET request
curl "https://api.cloudclawer.com/apps/$APP_ID/web/"

# POST with a body
curl -X POST "https://api.cloudclawer.com/apps/$APP_ID/web/api/submit" \
  -H "Content-Type: application/json" \
  -d '{"name": "Alice"}'

# Sub-paths are forwarded as-is
curl "https://api.cloudclawer.com/apps/$APP_ID/web/dashboard/metrics?range=7d"

#!/usr/bin/env bash
set -euo pipefail

API="https://api.cloudclawer.com"
KEY="$CLOUDCLAWER_API_KEY"

# Write the two handler files
cat > handler.mjs << 'JS'
export default async function handler() { return { result: "ok" }; }
JS

cat > server.mjs << 'JS'
export default async function handler(input) {
  return {
    status: 200,
    headers: { "content-type": "application/json" },
    body: JSON.stringify({ method: input.method, path: input.path, query: input.query }),
  };
}
JS

# Register
REG=$(curl -sf -X POST "$API/u/dkr/apps/registry" \
  -H "X-Api-Key: $KEY" -H "Content-Type: application/json" \
  -d '{"manifest":{"manifestVersion":"1","name":"echo-server","displayName":"Echo Server",
       "description":"Returns method and path of every request","version":"1.0.0",
       "author":"your-username","entrypoint":"handler.mjs",
       "execution":{"lifecycle":"per-call","timeout_ms":10000,"input_schema":{"type":"object","properties":{}}},
       "permissions":{},"web":{"entrypoint":"server.mjs","type":"server"}}}')

APP_ID=$(echo "$REG" | python3 -c "import sys,json; print(json.load(sys.stdin)['appId'])")
H_URL=$(echo "$REG" | python3 -c "import sys,json; print(json.load(sys.stdin)['uploadUrl'])")

# Upload handler + activate
curl -sf -X PUT "$H_URL" -H "Content-Type: text/javascript" --data-binary @handler.mjs
curl -sf -X POST "$API/u/dkr/apps/registry/$APP_ID/activate" -H "X-Api-Key: $KEY"

# Get web upload URL, package zip, upload + activate
W_URL=$(curl -sf -X POST "$API/u/dkr/apps/registry/$APP_ID/web/upload-url" \
  -H "X-Api-Key: $KEY" | python3 -c "import sys,json; print(json.load(sys.stdin)['uploadUrl'])")
zip bundle.zip server.mjs
curl -sf -X PUT "$W_URL" -H "Content-Type: application/zip" --data-binary @bundle.zip
curl -sf -X POST "$API/u/dkr/apps/registry/$APP_ID/web/activate" -H "X-Api-Key: $KEY"

echo ""
echo "Published! App ID: $APP_ID"
echo "Test: curl $API/apps/$APP_ID/web/"
echo "      curl $API/apps/$APP_ID/web/hello?name=world"

Yes. The app runs inside the publisher's sandbox. If your sandbox stops (or times out), requests return 503. CloudClawer does not start a new container per request — the sandbox must already be running.

Add them to the zip alongside server.mjs: zip bundle.zip server.mjs utils.mjs data.json. Import them with relative paths inside server.mjs: import { helper } from "./utils.mjs".

Yes, using the standard fetch API. Outbound domains listed in permissions.proxy in your manifest are allowed. Add them before publishing.

Repeat steps 4–6: get a new presigned URL, upload the new zip, call web/activate again. The new bundle takes effect on the next request.

You can publish as many apps as you like. Each server app that is actively receiving traffic consumes one sandbox slot. You have 9 slots total, shared with custom tools.