---
title: What is Databricks Apps?
sidebar_label: Overview
description: Databricks Apps hosts web applications inside your workspace with built-in auth, managed compute, and direct access to your data.
---

# What is Databricks Apps?

Databricks Apps hosts your web app inside your workspace. It gets a fixed URL, built-in OAuth, and direct access to your workspace data and services. No separate hosting service, no auth layer to build, no credential rotation to manage.

**[AppKit](https://databricks.com/devhub/docs/appkit/v0)** is the TypeScript SDK for building those apps. It provides pre-built React UI components, type-safe data access, and a plugin system for connecting to Databricks services.

## How it works

AppKit uses a three-layer architecture with plugins that register capabilities at each layer:

- **Client**: React frontend served by Vite. The `@databricks/appkit-ui` package provides data tables, charts, dialogs, and layout components.
- **Server**: Express HTTP server with Databricks OAuth built in. Plugins attach routes and middleware at this layer.
- **Data**: Plugin-based access to Databricks resources. Each plugin wraps a resource type and exposes a typed API on the `AppKit` object.

| Plugin                                             | What it adds                                                                                                                                                                            |
| -------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| [**server**](https://databricks.com/devhub/docs/appkit/v0/plugins/server)       | Express HTTP server, static file serving, Vite dev mode (always included)                                                                                                               |
| [**lakebase**](https://databricks.com/devhub/docs/appkit/v0/plugins/lakebase)   | Postgres connection pool for [Lakebase Postgres](https://databricks.com/devhub/docs/lakebase/quickstart) with automatic OAuth token refresh                                                                          |
| [**analytics**](https://databricks.com/devhub/docs/appkit/v0/plugins/analytics) | SQL query execution against [Databricks SQL Warehouses](https://docs.databricks.com/aws/en/compute/sql-warehouse/index.html). See [Analytical reads](https://databricks.com/devhub/docs/lakehouse/analytical-reads). |
| [**genie**](https://databricks.com/devhub/docs/appkit/v0/plugins/genie)         | [Genie space](https://databricks.com/devhub/docs/agents/genie) integration for natural-language data queries                                                                                                         |
| [**serving**](https://databricks.com/devhub/docs/appkit/v0/plugins/serving)     | Authenticated proxy to [Model Serving](https://databricks.com/devhub/docs/agents/ai-gateway) endpoints with streaming support                                                                                        |
| [**files**](https://databricks.com/devhub/docs/appkit/v0/plugins/files)         | File operations against [Unity Catalog Volumes](https://docs.databricks.com/aws/en/files/index.html)                                                                                    |

## How auth works

Every app gets a dedicated service principal. Databricks injects its credentials at runtime, so your app can call workspace APIs without managing tokens.

By default, all requests run as this service principal and all users share its permissions. When you need per-user data access, Databricks can forward the signed-in user's token via `x-forwarded-access-token`. AppKit's built-in [Genie](https://databricks.com/devhub/docs/agents/genie) and [Model Serving](https://databricks.com/devhub/docs/agents/ai-gateway) plugins handle this automatically.

## When to use it

Apps are about **interactivity**, not only analytics. A dashboard is great for read-only views with pre-canned filters; an app does that plus accepts input, runs logic, and persists results. Build an app when your workflow needs any of those, for example a scenario builder that saves user-created cases, or an internal tool replacing a manual spreadsheet process.

## When not to use it

- **Static sites with no Databricks data access.** Host these anywhere.
- **Public-facing or customer-facing apps.** By default, users must be authenticated identities in your Databricks workspace. For external or customer-facing access, see [App Users](https://docs.databricks.com/aws/en/dev-tools/databricks-apps/key-concepts/#app-users).
- **Pure read-only dashboards** that AI/BI [Dashboards](https://docs.databricks.com/aws/en/dashboards/) already cover. Use a dashboard until you need to persist user input or run custom logic on top of it.

## Where to next

[Templates](https://databricks.com/devhub/templates) are agent-ready prompts organized by use case. Find one that fits, or see the [Apps Quickstart](https://databricks.com/devhub/docs/apps/quickstart) for a step-by-step walkthrough.