aidrop.itGet Access
PRIVATE BETA

Your employees are building small tools with Claude Code. This is where they put them.

A sales lead asks Claude Code for a pipeline tracker. A minute later it's live at pipeline.acme.aidrop.cloud, the fourteen people she shared it with open it with their work Google account, nobody else can, and it appears in one list with everything else anyone has built.

We'll reach out when a slot opens for your company. No newsletter.
Private beta · Google Workspace
TOOL
OWNER
LAST OPENED
ACCESS
STATUS
pipeline-tracker
JRJ. Rivera
2 min ago
sales@+14 people
live
qa-triage
MOM. Okonkwo
1 hour ago
eng-qa@+6 people
live
renewal-dashboard
SPS. Patel
3 days ago
AKTLRN3 people
live
interview-scheduler
DCD. Chen
6 days ago
people-ops@+9 people
live
WORKS WITH
GoogleGoogle Workspace
GitHub
ClaudeClaude Code
CursorCursor
CodexCodex
Copilot
HOW IT WORKS

Set it up once. After that, none of it is your work.

0
ADMINONE-TIME

Connect Google Workspace and push the connector to your domain.

One admin, one screen, about five minutes. Nothing gets installed on anyone's laptop.

GoogleConnect Google Workspace
Admin consent · one screen
GoogleSign in with Google
Connect GitHub org
Optional
Authorize
Push the connector
acme.com · 214 seats
Deploy to domain
1
EMPLOYEE

They ask Claude Code to deploy it.

The connector is already there, so they write it the way they'd say it out loud.

deploy this and give the sales team access
2
AIDROP.IT

It comes up with a URL.

Front end, back end, database and cron start together at pipeline.acme.aidrop.cloud. If an API key was sitting in the code, the deploy stops and Claude Code moves it into managed secrets first.

deploy this and give the sales team access
builtnext.js · postgres
deployedpipeline.acme.aidrop.cloud
sharedsales@acme.com · 14 people
loggedvisible in your registry
Ran from Claude Code. Nothing installed on the laptop.
3
EMPLOYEE

They share it by name.

sales@acme.com, or one person by email. That's the entire permission step — there's nothing else to configure.

sales
sales@acme.com14 members
JRj.rivera@acme.com
4
COLLEAGUE

She opens the link and signs in with Google.

No account to create, no invite to accept, no password. Anyone who wasn't on the list doesn't get a login form to guess at — they get told no.

pipeline.acme.aidrop.cloud
GoogleSign in with Google
acme.com
5
YOU

It's in your list before she opens it.

Name, owner, who has access, what it's attached to — and one switch to revoke.

TOOL
OWNER
LAST OPENED
ACCESS
STATUS
pipeline-tracker
JRJ. Rivera
just now
sales@+14 people
live

Steps 1 through 5 take about a minute and happen without you. Step 0 is the only one you do.

THE SITUATION
82%
of CIOs say employees create AI apps faster than IT can govern them.
Okta, AI Agents at Work 2026
95%
of technology leaders admit incomplete visibility into what's running in production.
Retool, State of AI Governance 2026
0 of 5,600
scanned AI-built apps had properly scoped access policies.
Escape.tech, reported by VentureBeat

You can't block this, and blocking isn't the goal. It needs somewhere sanctioned to land.

IDENTITY
Google
Google Workspace
your directory, your groups, your MFA
aidrop.it
access plane
Your team's tools
pipeline-tracker, qa-triage, +32
sign-in, groups, offboarding
who can open what

One connection. Everything else follows from it.

An admin connects Google Workspace once. From then on aidrop.it uses the directory you already maintain — same accounts, same groups, same offboarding. No second user list, no new passwords for your help desk.

People are who Google says they are.
Sign-in is your existing SSO, including the MFA you already enforce.
Groups are the unit of sharing.
Share with sales@acme.com and a new hire in that group has access on day one.
Offboarding is one place.
Suspend someone in Workspace and access to every tool ends at once.
We never own your user list.
We read the directory. We don't replace it.
THE CONNECTOR

It runs inside Claude Code.

aidrop.it ships an MCP connector. You install it once across the domain. After that, whatever your team writes — Next.js, FastAPI, Rails, Streamlit, a static page — goes live from inside the tool they're already working in. We don't generate the code and we don't change how anyone builds.

The whole app, not just a front end.
Database, cron and file storage come up with it and inherit the same access rules.
Secrets never reach the repo.
A key found at upload fails the deploy and Claude Code is told to move it into managed secrets. It fixes it itself.
nothing to install
on anyone's laptop.
deploy this and give the sales team access
builtnext.js · postgres
deployedpipeline.acme.aidrop.cloud
sharedsales@acme.com · 14 people
loggedvisible in your registry
Ran from Claude Code. Nothing installed on the laptop.
deploy this
blockedOPENAI_API_KEY found in src/config.ts:12 → moved to managed secrets
pipeline-tracker
Private
Add a person or group…
sales@acme.com14 members
JRj.rivera@acme.com
JRJ. RiveraOwner
sales@RemoveCan use
TLT. LindqvistCan use
Anyone at acme.com can open this
Public access is off. Only an admin can turn it on.
JRJ. Riverarequested 4 minutes ago
pipeline-tracker
wants to attachpostgres1 secret
SALESFORCE_API_KEY••••••••
ApproveDenyView the code diff
SHARING

As simple as sharing a doc. As controlled as you need.

Private by default.
A new tool is visible to its author and nobody else.
Share with a person or a group.
The recipient needs no account with us, no invite to accept, no password to create.
Two roles, not twenty.
Use it, or own it. Permission models nobody understands are permission models nobody configures correctly.
Revoke instantly.
Access ends the moment you remove it, mid-session included.
Public is a separate decision.
Exposing a tool outside the company is off until an admin turns it on, per tool.
Approvals where they matter.
Attaching a secret or going public can require a reviewer — everything else stays instant.
Individual shares can expire.
Group access follows the group; one-off shares can time out on a schedule you set.
NO AUTH TO WRITE

The login already exists. Nobody writes one.

The tool never sees an unauthenticated request. Everyone who opens the link signs in with Google first, and aidrop.it checks them against the access list before the page loads. Someone who wasn't given access doesn't get a login form to guess at — they get told no.

No login screen to build.
It's in front of every tool by default.
No user list to maintain.
Your Google directory is the user list.
No passwords.
Nothing for your help desk to reset, nothing for anyone to reuse.
Nothing for the employee to configure.
They asked for a tool, not for an authentication system.
pipeline.acme.aidrop.cloud
JRj.rivera@acme.com
In sales@acme.com
Pipeline · Q3
ACCOUNT
VALUE
STAGE
Northwind Logistics
$48,000
Eval
Halcyon Health
$21,500
Legal
Brightwater Co.
$9,200
Demo
TNt.novak@acme.com
Not on the access list
You don't have access to this tool.
Ask J. Rivera for access.
Same link. The list decides.
CUSTODY

Connect your GitHub org and every tool lands in a repo you own.

Today this code lives on a laptop. Connect GitHub and each tool becomes a private repository in your organization, updated on every deploy, with the real author attributed. Your Dependabot, your code scanning, your branch protection and your audit log start applying to software that until now had no owner and no history.

No GitHub licenses required.
Commits carry the real author without consuming a seat.
One direction by default.
We deploy, GitHub mirrors. Two-way sync is opt-in, per tool.
Cancel and keep everything.
The repositories are in your org. They stay there.
ACME-TOOLS
pipeline-trackerprivate
Deployed by aidrop.it · authored by J. Rivera
JRJ. RiveraTypeScriptUpdated 2 minutes ago
qa-triageprivate
Deployed by aidrop.it · authored by M. Okonkwo
MOM. OkonkwoPythonUpdated 1 hour ago
THE ALTERNATIVE
TODAY
WITH AIDROP.IT
Pick a host, configure a build, add a domain[host]
One sentence in Claude Code
Add a database as a separate vendor[database]
Comes up with the tool
Coworker needs an account on your dev platform[auth]
They sign in with their work Google account
Stand up an SSO proxy in front of it[proxy]
Included
Store keys somewhere safe[secrets]
Blocked at upload, stored managed
Point a domain at it[dns]
toolname.acme.aidrop.cloud
Track what exists in a spreadsheet[spreadsheet]
The list is the product
7 products · 7 bills · 3 permission models · per tool
1 connection · 1 bill · 1 permission model

Every line on the left is achievable today. That's the point — seven products, seven bills and three permission models, per tool.

Get Access
CONTROL

One list. Every tool your company has built.

Owners, not mysteries.
Who made it, who can open it, when it was last used.
Dormant tools surface themselves.
Nothing runs unnoticed for a year.
Unowned tools are flagged.
The author left; the tool didn't.
The inventory is yours.
Export it to CSV, JSON or a Google Sheet, or pull it from the API.
Rules, not vigilance.
Who may deploy, what needs approval, when access expires — set once in the console.
Tools 37
All ownersExport
TOOL
OWNER
LAST OPENED
ACCESS
STATUS
pipeline-tracker
JRJ. Rivera
2 min ago
sales@+14 people
live
qa-triage
MOM. Okonkwo
1 hour ago
eng-qa@+6 people
live
renewal-dashboard
SPS. Patel
3 days ago
AKTLRN3 people
live
interview-scheduler
DCD. Chen
6 days ago
people-ops@+9 people
live
margin-calculator
AWA. Whitfield
2 weeks ago
AWSP2 people
live
vendor-audit
No owner
41 days ago
RN1 person
unowned
survey-export
TLT. Lindqvist
3 months ago
TL1 person
dormant
TOOL DETAIL
TOOL
OWNER
LAST OPENED
ACCESS
pipeline-tracker
J. Rivera
2 min ago
sales@ +14
qa-triage
M. Okonkwo
1 hour ago
eng-qa@ +6
renewal-dashboard
S. Patel
3 days ago
3 people
interview-scheduler
D. Chen
6 days ago
people-ops@ +9
margin-calculator
A. Whitfield
2 weeks ago
2 people
pipeline-trackerliveJR
URL
pipeline.acme.aidrop.cloud
Access
sales@acme.comj.rivera@+14 people
Attached
postgrescron2 secrets
Repository
acme-tools/pipeline-tracker
Transfer ownerFreezeDelete
WHEN SOMEONE LEAVES
DCD. ChenSuspended in Google Workspace
Access removed automatically12 tools
Needs a new owner3 tools
interview-schedulerM. Okonkwo
offer-letter-draftS. Patel
headcount-planA. Whitfield
Transfer all to…
EXPORT
CSV
JSON
GoogleSend to Google Sheets
Include access lists
ExportAlso available via API.
acme.com
Tools
People
Policies
Connections
Audit log
Billing
Policies
Who can deploy
engineering@data@Add group
Require approval when a tool attaches secretsApprovers: it-admins@acme.com
Require approval before a tool is made publicEnforced by aidrop.it
Access expires after90 daysApplies to individual shares, not groups
Freeze tools when the owner leaves
Allowed regionsus-east
SECURITY
Where does it run?
On our infrastructure, isolated per company.
What's reachable from the internet?
Nothing, unless an admin makes a specific tool public.
Where do secrets live?
Managed storage, injected at runtime, never in the repo, never in generated code. Values are masked in the console and revealing one needs admin approval.
What do you log?
Deploys, access changes, and sign-ins to tools. We don't monitor employees and we don't read tool data.
Who can see the code?
Your GitHub org if you connect it; otherwise the author, the owners, and our build systems.
Compliance?
SOC 2 is in progress and not yet complete. We'd rather say that than imply otherwise.
SECRETS, AS THE CONSOLE SHOWS THEM
3 keys moved out of source code by aidrop.it
NAME
ADDED BY
LAST USED
VALUE
SALESFORCE_API_KEY
J. Rivera
4 min ago
••••••••Reveal
POSTGRES_URL
aidrop.it
2 min ago
••••••••Reveal
OPENAI_API_KEY
J. Rivera
Never
••••••••RevealRequires admin approval
ROLLOUT
GoogleConnect Google Workspace
Admin consent · one screen
GoogleSign in with Google
Connect GitHub org
Optional
Authorize
Push the connector
Workspace admin console
acme.com · 214 seats
Deploy to domain
5 min
Connect Google Workspace.
One admin, once.
2 min
Connect GitHub.
Optional.
1 min
Push the connector to the domain
from the Workspace admin console.
0 min
Employees do nothing
until the first time they ask Claude Code to deploy.

Nothing to install on laptops, no change to how anyone works, nothing at all for the people who just open the tools.

SCOPE

Not a scanner.

We don't hunt shadow apps across your network. We give them a place to live where you can see them by default.

Not an app builder.

Your team keeps Claude Code and keeps their code. We generate nothing.

Not a replacement for your cloud.

When something needs real scale, we help you move it out.

QUESTIONS
Does this work if we're not on Google Workspace?
No. aidrop.it is built on Google Workspace identity.
Do employees need a GitHub license?
No.
What can they deploy?
Anything that runs in a container: Next.js, Python, Rails, Go, static sites, Streamlit.
Does it work with Cursor or Codex?
Yes, anything that speaks MCP. Most teams we talk to are on Claude Code.
What if a tool becomes business-critical?
Take it over. It's already a repo in your org with full history.
What does it cost?
One price for the whole company, not per user and not per app. Being set with the first cohort.
Can we restrict who's allowed to deploy?
Yes, by Google group.
Is this available today?
No. Private beta, onboarding the first 20 teams.

Your employees have already started. Give it somewhere to land.

We'll reach out when a slot opens for your company. No newsletter.

Private beta. We're onboarding the first 20 teams and working with each directly.