C CTOx OS / Mini-app Builder Staff only

New in the OS · Team Guide

Build an app just by describing it.

There's a new tool in CTOx OS: type what you want in plain English and it builds a working little app against your real CTOx data — no coding, no dev ticket. It writes the app, checks it against a locked-down sandbox, fixes its own mistakes, and puts it live in a couple of minutes. This guide is how to find it, try it, and tell us what breaks.

01

What it is

A "describe it and it builds" tool — bounded so it can't go off the rails.

Think of it as a private, on-brand version of tools like Base44 or Lovable, but living inside the OS. You describe a small app — a planner, a tracker, a checklist — and it generates one that reads your actual CTOx data and runs right in the portal. The difference from a generic app-builder is the important part: every app it produces can only ever do what the OS allows. It runs in a sealed sandbox and can only reach a small, approved set of your data. That boundary is the whole point — it's why we can let apps go live automatically without a person reviewing the code each time.

🔒

The safety isn't "we trust the AI." Every app runs walled off from the OS and can only touch your own data through a single guarded doorway. Even a badly-written or hostile app physically can't reach another person's data or any system credential. More on that in section 06.

02

Where to find it & who can use it

Staff dashboard, Operations section.

Go to: DashboardOperationsMini-apps  (os.ctox.com/operations/mini-apps).

Building is staff-only — it's for the internal team, not our members. Any employee (marketer, consultant, facilitator, admin, superadmin) can build. Members and prospects never see it. The one page does both jobs: the box at the top is where you describe and build; the table below lists every app and its recent activity, with controls to pause or stop any of them.

03

Test it in 6 steps

Please actually do this by hand — build one, open it, use it, then stop it.

  1. Open Operations → Mini-apps
    Sign in to the dashboard and head to the Mini-apps page. You'll see the "Describe the app you want…" box.
  2. Describe an app (or click an example)
    Type what you want in plain English — a sentence is plenty. There are one-click example prompts under the box if you'd rather start from one.
  3. Hit "Build it" and wait ~1–2 minutes
    Behind the scenes it writes the app, checks it against the sandbox, and fixes its own errors (up to three tries). The build log shows how many attempts it took. Don't refresh.
  4. When it says it's live, click "Open the app →"
    The app opens right there in the portal, running in its sandbox.
  5. Actually use it
    Poke at it like a real user. Does your real CTOx data show up? Do notes save — and are they still there after a reload? Does anything feel broken or confusing?
  6. Find it in the table and try the controls
    Back on the Mini-apps page, your app is in the list with its 24-hour activity. Try Pause then Resume. Kill removes it for good — that's expected and fine for test apps.
04

Prompts to try

Copy one, tweak it, or write your own. Small and specific works best.

"A planner that lists my upcoming CTOx events and lets me keep private prep notes on each.Events + notes
"A habit tracker where I add a habit, check it off each day, and see how many days in a row I've done it.Private store
"A scratchpad for meeting notes I can search.Private store
"A checklist of things I want to ask on the next monthly call, grouped by topic.Private store
"Email me a summary of my upcoming events.Email verb
💡

Try to break it, too. Ask for something it shouldn't be able to do — "show me another member's data", "list everyone's phone numbers", "charge my card." The right outcome is that it either refuses, builds something harmless instead, or the app comes back empty. If you ever see it surface someone else's data, that's the #1 thing to report immediately.

05

What to check & report

Run through this for each app you build, then send us the rundown.

📮

Send your report with: the exact prompt you used, what happened (built / failed / rough), and a screenshot or two. Note anything that surprised you — good or bad. This first round is exactly what tells us where the rough edges are.

06

What it can — and can't — touch

The boundaries, in plain terms. This is why it's safe to let apps go live on their own.

✓ An app can

  • Read your own published CTOx events
  • Read + set your own event RSVPs
  • Read your own profile basics (name, email, milestone, timezone…)
  • Keep its own private notes store — scoped to you and that app only
  • Email you (the person running it) — never anyone else

× An app can never

  • See anyone else's data — every read is locked to whoever's running it
  • Reach the OS, its database, cookies, or any credential
  • Email, text, or charge an arbitrary person
  • Touch sensitive fields (notes, deal values, addresses, billing)
  • Escape the sandbox — even hostile code is boxed in by the browser

Known limits while it's new — set expectations: the data it can use is exactly the list above (events, your RSVPs, your profile, a private notes store, email-to-self). No SMS, payments, or Slack yet. Any staff member can open any live app, though the data it shows is still only ever the opener's own — per-app audience limits are coming. And it's brand new, so expect rough edges. That's what this test round is for.

07

If something misbehaves

Every app has a stop button. You're never stuck with one.

PauseInstantly stops an app from running or making any calls. Fully reversible.
ResumeBrings a paused app back to live.
RollbackPoint a rebuilt app back to an earlier version in one click.
KillPermanently stops an app — it can't be resumed. Use for anything clearly wrong.

Two more safety nets run automatically: a global kill switch can dark-frame every app at once if we ever need it, and an hourly watchdog auto-pauses any app that starts throwing an unusual number of errors or running up cost. There's also a soft cap of 12 builds per person per hour so a stuck loop can't run away.

🚨

Found something that looks like a real problem — an app showing data that isn't yours, an error you can't explain, an email to the wrong place? Pause or Kill it first, then flag it right away with the app name and a screenshot. Don't keep testing that one.