Private npm registries for apps
Retool now supports the use of private npm registries for apps. Enterprise organization admins can add registries in Settings > App Security, and builders can then ask the agent to install packages from them. Use private registries to:
- Download a specific package from a private registry. For example, pull a design system that you host on your own servers into your apps.
- Download all packages from a specific registry. Add a registry as the default, or route entire npm scopes (such as
@acme) to it. Registries can require authentication with a bearer token or basic auth, or allow anonymous access. - Control which packages are allowed. Build your own registry with rules about what it permits users to download. For example, enforce a minimum package age that you configure yourself.
Private registries must be npm-compatible and use HTTPS.