Overview
Use this page when your app needs more than standard screens, fields, and actions. Buzzy can be extended and governed through code widgets, functions, constants, REST APIs, MCP, Tests, Security Review, toolkits, cookbooks, and widgets.
Choose the Right Extension Point
Custom UI, charts, maps, advanced filters, file managers, or embedded tools
Server-side logic, external APIs, webhooks, AI calls, or sensitive processing
External systems reading or updating Buzzy app data
AI assistants interacting with an existing app as tools
An AI agent building, adapting, or testing the app itself
Repeatable workflow checks and regression confidence
Permission, Private Data, and sensitive-data review before release
Shared UI layouts, app patterns, widgets, and reusable AI build guidance
Future in-app agent workflows
For a side-by-side comparison of code widgets, Async API, REST API, Node.js client, Buzzy Functions, and Custom MCP, see API and Extension Surfaces.
Recommended Build Order
Model the core app first: brief, flows, data, screens, and permissions.
Use approved toolkits and cookbooks where they exist so the app follows shared layout, workflow, and governance patterns.
Add code widgets only where standard Buzzy components are not enough.
Move secrets and reusable configuration into constants.
Put external calls and privileged logic in Buzzy Functions.
Use REST API or Custom MCP only after the app's access rules are clear.
Run Security Review for apps with sensitive data, role-based access, APIs, MCP exposure, or external integrations.
Create Tests for the critical paths you need to trust before publishing or promoting the app.
Agent-Assisted Development
Agents such as Codex or Claude Code are useful for planning, writing code-widget internals, drafting Buzzy Functions, and running Playwright or browser-based checks. For app-building work, connect them through Buzzy Builder MCP so they work with Buzzy artifacts rather than guessing from screenshots or prompts alone.
For code widgets and functions, ask the agent to keep the runtime contract explicit:
which table, screen, row, or action invokes it
which fields or constants it depends on
which errors users should see
how it should be tested
Governed Extension Workflows
New extension work should be reviewed in the same context as the app definition:
Brief: confirm the app intent, roles, data, external functions, and security posture are still accurate.
Toolkits and cookbooks: use approved shared patterns before inventing app-specific structure.
Security Review: check Private Data, datatable permissions, field-level access, and external exposure.
Tests: capture repeatable checks for the workflows most likely to break or create risk.
Coming Soon
Buzzy Agents are coming soon. Until dedicated docs are available, use Buzzy Agents as the placeholder page and use Builder MCP for agent-assisted app building and Buzzy Functions for app-side automation.
Example Paths
For complete apps and templates, see Examples by Use Case.
For custom UI, start with Code Widget Examples.
For choosing between APIs and extension points, start with API and Extension Surfaces.
For server-side integrations, start with Buzzy Functions & Constants examples.
For external systems, start with Common API Examples.
For release confidence, start with Tests.
For sensitive apps, start with Security Review.
Last updated