Skip to main content

The listed apps

GET 
/public/apps

Every listed app of a publisher in good standing, a page of up to 200, built from each app's live version through the same presenter as the in-app listing — so kudoscrm.com and the marketplace card cannot describe an app two ways. Every URL is absolute https or null; install_url is the in-app marketplace page, never the partner's own; logo_url is the stable logo route; docs_url is always null today (the manifest has no docs link). Throttle: public/apps/read/ip, 120 a minute.

Request​

Responses​

A page of listed apps.

Response Headers
    Cache-Control

    Cached five minutes by browsers and CDNs. Every public response also carries Vary: Origin — its CORS headers depend on the caller's origin — so a shared cache keys on it.

    Access-Control-Allow-Origin

    *, without credentials, for any origin but the ones the app itself is served from: a https://<subdomain>.kudoscrm.com origin is echoed, with Access-Control-Allow-Credentials: true. The apex https://kudoscrm.com gets *. No Origin header, no CORS headers.