Runtime projection — what should this browser execute

GET

/ui-extensions

Last modified:2026-08-19 13:47:16

OperationId:listUiExtensions

Executable extensions for the calling session, for ANY authenticated bearer token. Execution scope is identical for every scope — platform-global apps plus the caller's own reseller's; there is deliberately NO super-user bypass (managing an app and running its JavaScript are different acts). Only effectively-enabled rows whose promotion snapshot is approved/flagged and which carry an SRI pin are returned; the field set is the loader's (see HorizonExtensionRuntime). A missing row therefore does NOT mean a missing registration — the management list is at /ui-extensions/registry.

Request

Authorization

Bearer Token

Provide your bearer token in the

Authorization

header when making requests to protected resources.

Example:

Authorization: Bearer ********************

Query Params

Responses

🟢200

application/json

Array of executable extensions (possibly empty).

Bodyapplication/json

🟠401Authentication Required

Request Example

Shell

JavaScript

Java

Swift

curl --location 'https://awqacore01.crexendocloud.com/ns-api/v2/ui-extensions?enabled=undefined' \
--header 'Authorization: Bearer <token>'

Response Example

200 - Example 1

[
    {
        "id": "my-extension",
        "name": "string",
        "webpack_module": "string",
        "remote_entry_url": "http://example.com",
        "version": "string",
        "integrity_hash": "string",
        "verification_status": "none",
        "enabled": "yes",
        "allowed_hostnames": "string",
        "remote_auth_enabled": "yes",
        "remote_timeout_seconds": 0
    }
]

Modified at 2026-08-19 13:47:16

Get details of Specific Model

List manageable extensions