About Every App
Every App is an MCP server published by every-app in the Healthcare category: make every SaaS open source.
The repository has 766 stars and 66 forks, with the last commit 4 days ago. Recent commit activity is the strongest signal that reported issues will get attention.
Install
git clone https://github.com/every-app/every-appThis server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.
Tools (66)
NotesPlain-text notes.
Parameters not published.
add_todoAdd a todo to the board.
Parameters not published.
ai_defaultSet the workspace
Parameters not published.
ai_showWhat the workspace
Parameters not published.
call_readRun one tool that only reads data, by its name (
Parameters not published.
call_writeRun one tool by its name (
Parameters not published.
create_todoCreate a todo.
Parameters not published.
delete_todoDelete a todo.
Parameters not published.
finish_todoMark a todo done.
Parameters not published.
get_todoOne todo by id.
Parameters not published.
Show all 66 tools
list_appsList the EveryApp apps this connection can use: what each is for, its URL, and how many tools it offers. Tool names are
Parameters not published.
list_todosList every todo on the board, open and done, with its id.
Parameters not published.
lookupPortA port
Parameters not published.
mcp_addAdd a remote MCP server by its URL as an MCP app: the Gateway serves its tools on /mcp as
Parameters not published.
mcp_listList the organization
Parameters not published.
mcp_offStop serving an MCP app
Parameters not published.
mcp_onServe an MCP app
Parameters not published.
mcp_removeRemove an MCP app, built-in or remote: it stops being served, and everyone
Parameters not published.
mcp_showShow one MCP app: its URL and its credential
Parameters not published.
mcp_toolChange one tool of a remote MCP app: its risk (read or write; annotations goes back to the server
Parameters not published.
my_connectionsList the AI apps you connected to this Gateway over OAuth, in every organization: id, organization, client, which apps, read only or read & write, when made and last used. Any member.
Parameters not published.
my_tokensList your own personal access tokens in this organization: id, name, prefix, scopes, the app it is bound to, when it was made, expires, was last used, and whether it is revoked. Never the token value. Any member.
Parameters not published.
provider_addRegister a provider on this Gateway: an API provider from its spec
Parameters not published.
provider_connectionsList the accounts connected to OAuth providers on this Gateway: the caller
Parameters not published.
provider_disconnectRemove a connection to an OAuth provider: the caller
Parameters not published.
provider_listList the API providers this Gateway brokers: the built-in catalog and the ones registered on this Gateway, each with its id (what an app lists under
Parameters not published.
provider_removeRemove a provider registered on this Gateway (an OAuth preset
Parameters not published.
remove_todoRemove a todo from the board.
Parameters not published.
revoke_connectionRevoke one of your own AI connections by its id (from everyapp_my_connections). Revoking the connection this call came through ends it on the next request. Any member.
Parameters not published.
revoke_tokenRevoke one of your own personal access tokens, by its id or its name. Any member.
Parameters not published.
scuttleSink a vessel on purpose. It cannot be undone.
Parameters not published.
search_toolsFind tools this connection can call, by words, by app id, or both: each result has the tool
Parameters not published.
setBerthAssign a vessel to a berth in a port.
Parameters not published.
signin_listList the ways people can sign in to this Gateway beside their password (Manage workspace → Sign-in): every sign-in provider (google, microsoft, github, apple, cloudflare, oidc) with its status (on; off; incomplete, which means needs setup: some settings are set and the provider stays off until the rest are), the settings it reads with whether each is set (never a value), the redirect URL to regist
Parameters not published.
signin_showShow one sign-in provider as
Parameters not published.
whoamiShow who this connection acts as: the user, their organization and role, the access it was granted, and the apps it can use.
Parameters not published.
workspace_activityOne page of the organization
Parameters not published.
workspace_app_accessWhether the app is available to everyone (
Parameters not published.
workspace_app_access_setSet which members hold direct access to an app: give
Parameters not published.
workspace_app_deleteDelete an app from the catalog: it stops being served and leaves every list. Its Worker stays until
Parameters not published.
workspace_app_setChange an app
Parameters not published.
workspace_appsList every app of the organization (and the shared apps on a hosted Gateway): row id, manifest id, name, description, status, whether it is available to everyone, how many members can open it (accessCount), and what it still needs before it opens (setup). Owners and admins.
Parameters not published.
workspace_auditOne page of the organization
Parameters not published.
workspace_cap_defaultSet or clear the organization
Parameters not published.
workspace_deactivateLock a member out everywhere: no sign-in, every session ended, their personal access tokens and AI connections revoked. They stay listed and can be reactivated. Only an owner deactivates an admin; never yourself or an owner. Owners and admins.
Parameters not published.
workspace_event_deliveriesOne page of the organization
Parameters not published.
workspace_event_redeliverSend one failed or dead delivery again now, its retry schedule starting over, and answer where it stands after that attempt. A delivered one is left alone and the answer says so. Owners and admins.
Parameters not published.
workspace_eventsList the organization
Parameters not published.
workspace_events_addSubscribe a webhook URL (Slack
Parameters not published.
workspace_events_removeRemove an event subscription: events stop going to it at once, and its signing secret goes with it. A built-in one (Cap alerts) is turned off instead, so the Gateway never recreates it behind the person
Parameters not published.
workspace_events_setChange an event subscription: turn it off or on (
Parameters not published.
workspace_events_testSend a test event (type
Parameters not published.
workspace_group_createCreate a group. Names are unique in the organization, letter case aside. Owners and admins.
Parameters not published.
workspace_group_deleteDelete a group. The app access it granted its members ends with it. Owners and admins.
Parameters not published.
workspace_group_setChange a group
Parameters not published.
workspace_groupsList the organization
Parameters not published.
workspace_inviteInvite an email address to the organization as a member or an admin. Creates the invitation and mails it when the Gateway can send email; the answer says whether it was mailed and never carries the invitation link (an admin copies it from Admin → Users). Refused for an address that is a member or already invited, and once the organization holds 100 pending invitations. Owners and admins.
Parameters not published.
workspace_linked_devTurn linked dev on or off for the organization: whether its owners and admins may run
Parameters not published.
workspace_reactivateLet a deactivated member sign in again. Tokens and connections revoked at deactivation stay revoked. Owners and admins.
Parameters not published.
workspace_removeRemove a member from the organization: their membership, app access, group places, tokens and AI connections go, and their account when it belongs to no other organization. Cannot be undone: needs confirm: true. Owners and admins; an owner is removed only by another owner, never the last one.
Parameters not published.
workspace_renameRename the organization. The slug (its address) stays as it is. Owners and admins.
Parameters not published.
workspace_reset_emailMail a member a password-reset link. The link goes to their inbox, never to you. Refused where the Gateway sends no email (an admin copies a reset link from Admin → Users instead) or password sign-in is off; only for active members of this organization alone, never yourself or an owner. Owners and admins.
Parameters not published.
workspace_showShow this organization: its id, name and slug, your role, whether the Gateway can send email, whether linked dev is on (
Parameters not published.
workspace_uninviteCancel a pending invitation (an expired one too), by its id or the invited email address. Owners and admins.
Parameters not published.
workspace_usageWhat the organization
Parameters not published.
workspace_usersList the organization
Parameters not published.
Ask AI
Ask AI about Every App
Powered by Claude
Security checks
Static checks derived from the repository 3 days ago. Heuristics on the source, not an audit.
- ✓README presentThe repository ships documentation.
- ✓License declaredUsable under a stated license.
- ✓Tests presentA test suite exists in the repository.
- ✓Dependencies pinnedA lockfile pins dependency versions.
2 checks have not been run yet.
Releases
README
EveryApp
Make every SaaS open source
Lots of people are cloning desktop apps, but what about SaaS?
EveryApp is focused on what's after "cloning" by making the next generation of web apps, built for agents.
Get your agent's apps off localhost
Your agent can build an internal tool in an afternoon, but hosting, database, sign-in, permissions, API keys and backups are still hard.
EveryApp handles all of that: one command sets up a Gateway in your Cloudflare account, and your team signs in once to use every app.
Who are we?
We're the team behind OpenSEO, the open source alternative to Semrush and Ahrefs (25k stars).
Why use EveryApp?
Secure by default
- Every request passes through the Gateway. Apps have no public address.
- Connect an API once. Apps ask for access, and the Gateway makes the call, so no app ever holds your keys.
- Don't trust us? Good. Put it all behind Cloudflare Access.
Scales from zero to infinity
- Fully serverless, in your own Cloudflare account.
- An app nobody uses costs $0.
- $5/month for Cloudflare's Workers Paid plan hosts hundreds of apps.
Standardized
- When you add an app, it’s immediately accessible through the Every App MCP Gateway.
- No infra decisions. Every app runs on Cloudflare's building blocks: Workers, D1, R2 and KV.
- Your agent builds with our stack and component library, so it never has to invent patterns.
Apps
- OpenSEO: SEO research you pay for by use, not by the month.
- OpenCRM: A CRM that fills itself in.
- OpenAnalytics: Web analytics on your own Cloudflare account. No cookies.
- OpenMail: An inbox where an AI agent drafts your replies and you hit send.
Run one as it is, or fork it as the starting point for your own. Many more are coming.
Get started
[!NOTE] EveryApp is in early development, so expect some rough edges. For early adopters says how to get help and tell us what could be smoother. Questions? Ask in Discord.
You need a Cloudflare account on Workers Paid ($5/month) and a domain on Cloudflare. Setup takes about 15 minutes.
npm install -g everyapp
everyapp setup --domain apps.yourcompany.com
Or paste one prompt into Claude Code, Codex or Cursor and let it set everything up.
Then install an app with everyapp install https://github.com/every-app/open-seo, or build your own with everyapp create my-app.
What's on the roadmap?
Oh, nothing much. Just rebuilding every SaaS for agents.
Community
⭐ Star the repo to follow along.
- Docs: everyapp.com/docs (for your agent: everyapp.com/llms.txt)
- Join Discord to chat
- Local development and contributing: CONTRIBUTING
- Security holes: report them privately, not in a public issue (how).
License
MIT, see LICENSE.
README fetched from the repository 3 days ago. The original is authoritative.