Skode Platform
The shared spine every Skode product builds on — the language, custom UI, functions, and the marketplace. Everything below is live — try it right here.
Widgets & Custom UI
Live demoBuild popups, panels, and full apps that run inside Skode products under Skode branding. These two widgets are real — sandboxed iframes talking to a live host over the Widget SDK. Click the buttons; watch the host record update.
{"name":"Acme — Enterprise","stage":"Qualified","amount":84000,"daysOpen":23}{"name":"Sam Rivera","score":92}<script src="https://developer.skode.ai/widgets/skode-widget.js"></script>
<script>
const deal = await skode.crm.record.get();
// ...compute something useful...
await skode.crm.record.update({ stage: 'Won' });
skode.ui.toast('Deal won!');
</script>A widget declares a manifest (mount points + least-privilege permissions). The host injects auth and enforces it — no tokens ever reach widget code.
Functions & Skode Functions
Live runnerWrite a function in Skode Skript and run it against real input — the same sandboxed engine that powers Code nodes and connectors. Hosted Skode Functions (schedules, secrets, quotas) build on this runtime.
All platform capabilities
Functions (Skript)
Skode’s sandboxed scripting language, running today inside Skode Automate (stdlib, workspace modules, capability gate). Memory limits, a preemptive governor, and a single language name across the toolchain are pending.
One adapter interface per product exposing its data to scripts. CRM, Flow and Forms each expose a small fixed namespace; a stable, documented host contract is pending.
Widgets & Custom UI
Build custom UI (panels, popups, buttons) embedded inside a Skode product. The bridge protocol and host contract are specified; no product hosts a third-party widget yet.
Connectors & Marketplace
Publish and install connectors. Live in Automate with publisher tiers and a DRAFT→PUBLISHED lifecycle; version pinning, install consent, an app detail page and uninstall are pending.
OAuth & SDKs
Central identity at auth.skode.ai: authorization code + PKCE, refresh rotation, JWT access tokens, OIDC discovery. Hardened token endpoints live under /oauth/*; the discovery document still advertises the stock /o/* endpoints, and SCIM 2.0 is not yet released.
Register a third-party app to get a client_id/secret. Self-service registration is not yet open: per-application scope restriction is not enforced, so clients are provisioned by Skode until it is.
One key store across products. Today keys are per-product (Automate sk_, Forms scoped keys) and Flow cannot mint one at all.
Typed clients for the product APIs. Built and downloadable from developer.skode.ai/sdks; npm and PyPI publication, tests, a corrected Flow auth header, and a CRM client on API v1 (0.1.0 calls older CRM endpoints that refuse keys) are pending.
AI & MCP
One MCP endpoint fronting every product’s tools. Today each product runs its own MCP server with its own auth model.
Serverless
Run code off the request path with schedules, secrets and quotas. Skript Servers in Automate serve HTTP handlers today; schedules, a secret store and quotas are pending.