version, integrity_hash, active_version, verification_status and active_verification_status are API-owned — echoing any of them back is silently ignored, never an error, so a client may round-trip a GET response. An enabled that is not yes/no (e.g. the computed restricted) is dropped and the stored value kept. A platform-global app is editable by a super user only.Authorization: Bearer ********************{code, message}, plus warnings when the write raised any. No identifier is returned: writes are keyed on what the caller named.curl --location --request PUT 'https://awqacore01.crexendocloud.com/ns-api/v2/ui-extensions/registry/' \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '{
"name": "My Extension",
"reseller": "*",
"remote_entry_url": "https://cdn.example.com/my-extension/remoteEntry.js",
"webpack_module": "myExtensionScope",
"enabled": "yes",
"description": "string",
"author": "string",
"allowed_hostnames": "string",
"remote_auth_enabled": "yes",
"remote_callback_secret": "string",
"remote_timeout_seconds": 30
}'{
"code": 0,
"message": "string"
}