Question 1

What is C1 AppHub?

Accepted Answer

C1 AppHub is a self-hosted platform that deploys, authenticates, and sets permissions for the internal applications your teams build. It runs in your own cloud account, and every application deployed on it comes out signed in through C1.ai, permissioned through C1.ai, and registered in C1.ai's identity graph with an owner.

Question 2

How do you secure internal apps built with AI coding agents?

Accepted Answer

You secure them by making governance a property of how the app is built, rather than something a review catches afterward. C1 AppHub ships with a skills file that AI coding agents read before writing code, so the app they produce arrives with sign-in, permissions, and credential handling already wired to C1.ai. Nobody has to find the app, register it, or ask the builder to retrofit anything.

Question 3

How is C1 AppHub different from an internal developer platform or a PaaS?

Accepted Answer

A PaaS gives you somewhere to deploy, a URL and a certificate, and logs and rollbacks. C1 AppHub gives you those and the identity wiring on top: sign-in, permissions, credential vending, network egress, and model access, plus registration in C1.ai with an owner, so that wiring stays correct as each piece changes instead of falling to whoever built the app.

Question 4

Can we run C1 AppHub in our own cloud environment?

Accepted Answer

Yes. C1 AppHub is self-hosted and deploys into your own cloud account. The workload, the network, and the data stay where they already are. C1.ai provides the identity services around it.

Question 5

How do internal apps and AI agents appear in access reviews?

Accepted Answer

The same way every other application does. Who may use an app is an entitlement, so it is requestable, approvable, and reviewable alongside everything else you certify. Offboarding and revocation cover it from the first day, without a separate list to maintain.

Question 6

Do we have to adopt all of C1 AppHub at once?

Accepted Answer

No. Sign-in is standard OIDC and works without permissions. Permissions work without moving sign-in. Take the pieces that fit what you already run.

Question 7

Is C1 AppHub open source?

Accepted Answer

C1 AppHub ships as a public repository, so you can inspect, deploy, and modify it yourself. It includes a skills file that lets an AI coding agent build and launch a governed application in a single prompt.

C1 AppHub

Your teams ship the apps. You govern them from day one.

Your data stays yours

Make the fundamentals easy

Builders ship instead of waiting

Security sees every app the day it ships

Deploys, authenticates, and sets permissions for what you build

Build it with a prompt. Publish it with the same one.

Every app appears in C1.ai's identity graph the day it ships

C1.ai solutions that meet your needs

Secrets Management

Deploy Custom Agents

Agent SSO & Runtime Governance

See C1 AppHub running in your environment.

Resources

C1 AppHub

Introducing C1 AppHub: connect AI-built apps to the controls they need

The New Paved Road: When Everyone Is an Engineer

FAQs

Your teams ship the apps. You govern them from day one.

Your data stays yours

Make the fundamentals easy

Builders ship instead of waiting

Security sees every app the day it ships

C1 AppHub

Your teams ship the apps. You govern them from day one.

Your data stays yours

Make the fundamentals easy

Builders ship instead of waiting

Security sees every app the day it ships

Deploys, authenticates, and sets permissions for what you build

Your account, your network, your data.

One pattern, every app.

Enterprise sign-in without auth code.

Permissions on the same graph you already govern.

The app never holds a credential of its own.

Build it with a prompt. Publish it with the same one.

Ship internal tools without lengthy approval cycles.

A public repository, so it runs wherever you do.

The same prompt that builds it also publishes it.

Builders own their app, not its identity plumbing.

A skills file that builds it the governed way by default.

Every app appears in C1.ai's identity graph the day it ships

Registered with an owner, automatically.

Inside the reviews you already run.

Offboarding covers it from day one.

Audit evidence without a collection exercise.

C1.ai solutions that meet your needs

Secrets Management

Deploy Custom Agents

Agent SSO & Runtime Governance

See C1 AppHub running in your environment.

Resources

C1 AppHub

Introducing C1 AppHub: connect AI-built apps to the controls they need

The New Paved Road: When Everyone Is an Engineer

FAQs

What is C1 AppHub?

How do you secure internal apps built with AI coding agents?

How is C1 AppHub different from an internal developer platform or a PaaS?

Can we run C1 AppHub in our own cloud environment?

How do internal apps and AI agents appear in access reviews?

Do we have to adopt all of C1 AppHub at once?

Is C1 AppHub open source?

Your teams ship the apps. You govern them from day one.

Your data stays yours

Make the fundamentals easy

Builders ship instead of waiting

Security sees every app the day it ships