IntelliApps

IntelliApps (html-app-builder) is IntelliAsk's Interactive HTML Apps service — it turns uploaded spreadsheets and prompts into persistent, publishable, interactive data apps. This is the complete reference for its architecture, its full environment surface, and its security model.

IntelliApps (internally html-app-builder) is the service behind IntelliAsk's Interactive HTML Apps feature. A user chats with the builder agent, uploads a spreadsheet or describes what they want, and the service produces a persistent, versioned, interactive HTML app — dashboards, reports, forms, presentations, even small games — that can be previewed, published to a shareable page, or exported as a single self-contained file.

It is a stateless MCP service: identity is resolved per request from headers, so it scales horizontally with no session state. The builder agent drives it entirely over the Model Context Protocol (MCP); published pages are served over plain HTTP with a strict, isolated security model.

Looking to just run it?

To wire IntelliApps into the stack (image tag, the INTELLIAPPS_* keys the IntelliAsk container needs, and the service's own secrets), see Connecting to IntelliAsk. For the end-user feature overview, see Features → IntelliApps.

What's in this section

Architecture

The three data planes (control, app-data, assets), how a build flows from MCP to a published page, the served routes, the Identity Bridge, and the runtime injected into every page.

Configuration

The complete environment-variable reference — every core, storage, "ask-the-data" LLM, branding, theming, and feature-tuning key it reads, plus how it connects to the IntelliAsk stack.

Published-page features

The live, collaborative features a published page can turn on — ask-the-data chat, comment board, polls, presence, applause, follow-the-presenter, annotations, forms — and the env knobs that tune each one.

Security model

The Sensitive Data Guard, signed preview/download tokens, publish modes, the two-plane Identity Bridge, SSRF-guarded image fetch, and the strict page CSP.

At a glance


Internal name	`html-app-builder`
Transport	Stateless Streamable HTTP MCP at `/mcp` + HTTP display routes
Default port	`8000`
Control plane	MongoDB (app definitions, HTML, versions, shares, comments, forms)
App-data plane	PostgreSQL (per-app datasets + live collections, isolated by `app_id`)
Asset plane	S3-compatible object storage (content-addressed images/fonts)
Auth (MCP)	Shared service key (`X-App-Service-Key`) + per-request IntelliAsk identity headers
Auth (pages)	Signed HMAC preview/download tokens; optional password + identity cookie

Key capabilities

Spreadsheet → app — import datasets in bounded chunks, then generate an interactive HTML app (charts via bundled ECharts, tables, filters) grounded in the data.
Persistent & versioned — every save is an immutable version; apps can be previewed, published to a shareable page, or exported to one self-contained file.
Live data — apps own read/write collections (per-app PostgreSQL tables) reachable over a same-origin runtime API, so a leaderboard or presence list updates live for every viewer via a server-sent-events stream.
Collaborative published pages — opt-in per app: ask-the-data chat, a live comment board, polls, viewer presence, applause, follow-the-presenter, shared annotations, and a reusable forms engine.
Branded & themed — a deployment logo and one of several visual themes are inlined into every page, surviving preview, publish, and offline export.
Safe by default — a Sensitive Data Guard scans every app for personal information before publish and forces PI-bearing apps into a protected password + expiry flow.

How it fits together

IntelliApps is an optional, independently-versioned service that runs as part of the stack and powers one IntelliAsk feature.

Service	Powers the feature	Talks to
IntelliApps (`html-app-builder`)	Interactive HTML Apps	MongoDB (control), PostgreSQL (app-data), S3 (assets), IntelliAsk model gateway (ask-the-data)