Glossary
The words, without the jargon.
Short, plain definitions of what you meet when you host and share the apps your assistant builds.
AI gatewayA single managed entry point through which apps call language models.API keyA secret string that identifies a program to a service and grants it access, like a password for software.ApprovalAn explicit yes from an accountable person before a change or action takes effect.Audit logA record of who did what and when, such as who proposed and who approved a change.Blue-green deploymentRunning a new version beside the old one and switching traffic over when the new one is ready.CNAME recordA DNS record that makes one name an alias of another name.Cold startThe delay when a stopped app starts again to serve its first request after a quiet spell.CORSA browser rule controlling which websites may call an API from the browser.Cron expressionA five-field pattern for minute, hour, day of month, month and weekday that describes when a job runs.CSRFAn attack that tricks a signed-in person’s browser into sending an unwanted request to an app.DatabaseA system for storing, querying and updating structured data reliably.DNSThe system that turns names like tools.example.com into the addresses computers use.Environment variableA named setting provided to a running program from outside its code, such as PORT or DATABASE_URL.Health checkA simple request a platform sends to confirm an app is running and ready.HTTPSThe encrypted version of the web protocol, shown as a padlock in the browser.Human in the loopA design where a person must approve certain actions before software carries them out.IdempotencyThe property that doing something twice has the same effect as doing it once.Key rotationReplacing a secret with a new value and retiring the old one.Least privilegeGiving a person or program only the access it needs for its job and nothing more.LogsA running record of what an app did and any errors it hit.MCP (Model Context Protocol)An open standard that lets an AI assistant call tools in other systems through a common interface. A server lists its tools; the assistant picks and calls them.OAuthA standard for delegated access. You sign in with a provider and grant an app a limited permission, so the app never sees your password.Object storageA service for storing files such as uploads and exports separately from the app.Pinned dependencyA library listed with an exact version rather than “latest”.Port bindingTelling a program which network port to listen on and on which address.Rate limitA cap on how many requests a person or program can make in a period of time.RollbackReturning a live app to an earlier working version.Scale to zeroA hosting model where an app is stopped when idle and started on the next request, so you pay only for time it is awake.Scheduled jobWork that runs at set times rather than in response to a visitor.Scope (permission)The specific set of actions a connection allows, such as read-only access to one spreadsheet.SecretAny value that grants access and must stay private, such as keys, tokens, passwords and connection strings.SessionThe way an app remembers that a visitor is signed in across requests.Spending limitA cap on how much an app may spend, for example on language-model calls.SQL injectionAn attack where user input is interpreted as part of a database query.Stateless appAn app that keeps no required data in its own memory or disk between requests, so any copy can serve any request.Supply-chain riskThe risk that a library or tool your app depends on is malicious or compromised.TLS certificateA file that proves a site’s identity and enables encrypted HTTPS connections.TTL (time to live)How long other computers may remember a DNS answer before asking again.TXT recordA DNS record holding free text, often used to prove you control a domain.VersionA saved snapshot of an app’s code and settings at one point in time.WebhookA web address that another service calls to tell your app that something happened.