This article presents a possible use case and corresponding sample flow that you can support. It provides a useful starting point as you plan your implementation.
Use this flow when a developer tool creates an app and prepares its identity before adding components, permissions, webhooks, or versions through the related App Management APIs.
To create and configure an app:
app.id and app.revision for subsequent calls. Use the app ID in the related App Management APIs.appName. The namespace can be assigned once. Review the method's normalization and reserved-name rules. A suggestion doesn't reserve the namespace; choose a different app name and retry when assignment conflicts.mask.paths with only the fields to change, excluding id and revision. Identity fields, creator information, and secrets aren't updated through this method. The published SDK doesn't expose the mask argument; use the SDK-authenticated REST workaround in the Update App example.After configuring the app, use the related Components, App Permissions, Webhooks, Dependencies, and App Versions APIs to manage its building blocks. Configuration doesn't publish a version or install the app on a site.
appUrls.appUri and appUrls.redirectUris configure Advanced OAuth, whose use is highly discouraged. See Advanced OAuth.
To configure allowed destinations after installation from an external install link, set appUrls.postInstallationUrls. Use the nested field mask appUrls.postInstallationUrls to replace this list while preserving the other URL settings. The destination must match an entry, unless it is a Wix-managed destination allowed separately. URLs are compared after normalizing whitespace and ignoring query strings and fragments.
Last updated: 8 November 2026