Submissions
Developer app submission and review pipeline, including security scanning and approval.
List app submissions
Returns all developer app submissions for the tenant's marketplace, ordered by most recently updated. Use in the developer portal or marketplace admin panel to track the review pipeline status of each submission.
Create app submission
Creates a new developer app submission for review, including the app manifest and version metadata. After submission, use the /validate and /scan endpoints to run automated checks before a human reviewer approves or rejects the submission.
Validate app submission manifest
Runs automated validation against the submission's manifest to check for required fields, permission scope consistency, and schema compliance. Returns a validation report with pass/fail per rule. This must pass before a security scan can be initiated.
Run submission security scan
Initiates an automated security scan of the submission, analysing the manifest for permission over-reach, dangerous API usage patterns, and known vulnerability signatures. The scan result is stored on the submission and surfaced to the reviewer. Submissions with a 'critical' risk level are automatically rejected.
Approve app submission
Approves a submission after review, making the app version eligible for publication to the marketplace. An approval comment is required for audit purposes. Once approved, the associated app listing can be published.
Reject app submission
Rejects a developer submission, preventing publication. A rejection reason is required and is communicated to the developer. The developer can address the issues and create a new submission.