Questions, answered plainly.
Everything people ask before they put a small app online and share it, from the first deploy to the last limit.
The basics
What it is and who it is for.
A place to put the small apps your AI assistant builds and share them with other people. You deploy from your project folder, and Cohostly provides the hosting, sign-in, a database, AI model access, connections to Google and Microsoft, scheduled jobs and approvals, so you do not wire those together yourself.
How it worksAnyone who builds tools with Claude Code, Cursor, Codex or a similar assistant and wants teammates, clients or friends to use them. You do not need to be a full-time developer. The aim is that sharing a small app feels like sharing a document.
No. You deploy straight from a folder on your computer. You can also deploy a .zip or a GitHub repo, but nothing requires Git.
The deploy commandAnything that can run a command or speak MCP. You can deploy with the cohostly command, or connect your assistant to the Cohostly MCP server and ask it to deploy for you.
The MCP serverSmall, purpose-made tools: a team dashboard, a signup sheet, a client portal, a morning summary, an internal form. Apps used by a handful of people and quiet most of the day suit it best.
Use casesLarge, busy products and always-on systems. Apps sleep when nobody is using them, and a single run has a length limit. A big, high-traffic or multi-service system may fit another host better.
Compare with other hosts
Deploying
Getting an app from your computer to a link.
Install the command line with npm, sign in with cohostly login, start a tiny app with cohostly new, then run cohostly deploy. You get back an address. The quickstart takes about five minutes.
QuickstartNode, Python and Go apps, and folders of plain web files. The starter templates cover static sites, Flask, FastAPI, Express, Go and Next.js. Supported versions are Node 16, 18 and 20 to 24, Python 3.9 to 3.13 and Go 1.18 to 1.29.
LimitsNot by hand. Cohostly drafts the settings from your code and asks you to confirm them. They live in a file called cohostly.json, which you can edit when you want more control.
cohostly.jsonNode.js 20 or later, on macOS or Linux. Windows works through WSL2 for the snapshot and check commands. Docker is needed only for cohostly check, which builds your app locally to prove it works.
Command line overviewYes. cohostly check builds the app on your machine the way the platform would, and the develop commands let you run it locally with the platform’s services.
Develop locallyUp to 10 minutes, with about 1 MB of build log. Folders such as node_modules, .git and .next are left out of the upload already, so leave out build output and large data files too.
Builds and uploadsThe error names the reason, and a failed deploy comes with a ready prompt you can paste to your assistant with the whole log. The common causes are a missing secret, an app that listens on the wrong address or port, and a limit being reached.
TroubleshootingUsually it listens on 127.0.0.1 instead of 0.0.0.0, ignores the PORT variable, or writes files to disk that do not last. The how-apps-run page lists the five facts that explain most surprises.
How apps run
Safety and control
What keeps an AI-built app from going wrong.
A checkpoint where a person says yes before something important happens. When an assistant deploys, the new version can wait for approval. Your own app can also ask a person to approve an action, such as deleting rows or emailing a list, before it runs.
ApprovalsThe people the account allows. Some requests, such as opening an app wider or raising a spending limit, are held until an account owner or admin answers, and deciding one requires being signed in to the dashboard.
Who decidesIt expires, and an expired request counts as a no. Your app should treat every answer except "approved" as "do not do it".
Callbacks and waitingIn Cohostly’s secret store, never in your code, a chat or a settings file. You list the secret names in cohostly.json, set the values with cohostly secrets, and your app reads them from its environment.
SecretsThe value goes from your keyboard into the secret store and does not pass through the assistant. An assistant cannot add an AI provider key for the same reason: it would pass through the assistant.
Bring your own keyYes. A connection can be set so every call that changes something, such as sending an email or editing a sheet, waits for a person to say yes.
Holding writes for approvalYes. Every deploy is a numbered version. Promote an older one or roll back, and nothing is rebuilt, so it is quick. The newest 10 versions can be promoted.
Versions and rollbackYes. The account keeps an activity log of changes, including ones made by an AI agent.
The account
What comes built in
Services your app can use without setup. The docs call them bindings.
A service Cohostly lends your app. You declare it in cohostly.json, and the platform gives your app an address and a token for it. The real keys behind the service never enter your app.
Bindings overviewYes. The AI binding lets your app ask a language model a question without holding a provider key. A gateway checks the model, the rate and the budget on every call.
The AI bindingThe platform pays for a small set of models. For others, such as the Claude models, you bring your own key from the company that makes them, and that company bills you directly.
Models and costsYes. Managed data is a small hosted SQLite database for each project. Your app never holds a connection string. Rules written above each table decide who can read and who can write.
The data bindingIt is a small database, not a data warehouse: no joins through the data service, no multi-statement transactions, and one writer at a time. A read returns at most 1000 rows.
Data limitsYes. A connection lets your app use someone’s Google or Microsoft account after they agree once on a consent screen. Your app never sees a password or a token. Slack is not available yet.
ConnectionsYour choice. In owner mode everyone acts through one connected account, such as the shop’s own sheet. In visitor mode each person connects their own account, and the app acts as that person.
Owner and visitor modeYes. The clock binding runs your code at times you choose, such as every weekday at 9:00, in the time zone you set. It records every run, retries failures and stops two runs overlapping.
Scheduled jobsA sleeping app runs no code, so a timer inside it stops. The platform keeps the clock outside your app and wakes the app when a job is due.
Why not setInterval
How apps run
What to expect once an app is online.
After 10 minutes with no visits by default, it goes to sleep, and the next visit wakes it. The first visit after a sleep is slower, so open it yourself before showing it to someone.
How apps runNot reliably. Files can disappear on a restart, a new version or a long sleep. Keep anything that matters in the managed database, which survives restarts and returns with the right version on a rollback.
Data bindingIf the project is marked stateful, the command line can back up and restore its /data folder, up to 256 MiB. A backup is a safety copy, not a promise that the disk lasts.
Backup and restore512 MB by default, and you can choose 256, 512, 1024 or 2048 MB. The account has a limit on the total memory of apps awake at the same moment. A sleeping app does not count.
Machines0.0.0.0, on the port in the PORT variable. After a deploy the platform asks your health address until it answers, for up to 5 seconds by default.
How apps runYes, in the dashboard and from the command line, along with the version history to compare against.
Limits and fixes
Limits and costs
The numbers, and what happens at the edge.
At the moment: 5 projects, 2 apps running at once, 2048 MB of memory across running apps, 10 deploys an hour and 40 builds a day. The docs call these starting values that may change.
LimitsThe message names the limit, says what your account has and how to raise it. A refused action is a 403, and at the web address itself it is a 429.
LimitsBy default $2.00 per project per month and $10.00 per account. A call that would pass a cap is refused before anything is spent.
Models and costsRate limits apply at the edge: 600 requests a minute from one network address to one project, and 6000 from everyone. Only the address over its limit is refused.
LimitsYes. The cost command and the dashboard show usage per app. Pricing is not set, so costs shown are estimates, and compute time and AI spend are not measured everywhere yet.
CostPricing is not published yet, and costs shown today are estimates. Email us and we will tell you where things stand.
Account and contact
Keys, privacy and reaching a person.
cohostly login shows a code, you approve it in the dashboard, and a key is handed over once. It is saved in a file only you can read. Scripts and CI use an API key that starts with plk_.
Sign in and keysYou sign in once in the browser and approve a consent screen. Access lasts 30 minutes and refreshes for up to 30 days.
Sharing, sign-in and rolesShared secrets, AI provider keys, connections, API keys, the activity log, approval rights and usage.
The accountApps, secrets and connected accounts belong to you. The privacy page describes exactly what the website and dashboard measure and what they never collect.
PrivacyAt cohostly.cloud/docs, with a quickstart, every command, the SDK, each binding and sample apps.
Read the docsEmail hello@cohostly.cloud, or use the contact form on the home page.
Still have a question?
Write to hello@cohostly.cloud and a person will answer.