Remotehost Docs
API ReferenceAdd-ons

Browse an organization's add-on catalog

GET
/orgs/{orgId}/addons

The catalog as the org sees it: each entry says whether the org holds it and why, and the org's policy for it. Needs org.read (every member). Each kind is shown to whoever could add it somewhere: MCP servers to mcp.read, skills to skills.read and plugins to plugins.read on the org or any project in it, apps to every member, resources to resources.read on the org or any project, and resources and every paid listing to billing.read. A member who holds none of those sees apps only. Browsing shows listed entries; slug finds one entry whatever its status but draft, and a retired slug kept as an alias finds the entry that replaced it.

Authorization

bearerAuth
AuthorizationBearer <token>

A RemoteHost API key (rh_sk_...) or a user session token.

In: header

Path Parameters

orgId*string

Query Parameters

kind?string

Value in

  • "app"
  • "plugin"
  • "skill"
  • "mcp_server"
  • "resource"
provenance?string

Who vouches for it: RemoteHost's own (first_party), reviewed by RemoteHost (verified), or unreviewed (community). Always shown.

Value in

  • "first_party"
  • "verified"
  • "community"
query?string

Matches the name, summary or slug.

sort?string

Value in

  • "rank"
  • "name"
  • "updated"
slug?string
cursor?string

The nextCursor of the previous page.

limit?string

Entries per page, 1 to 100; 50 by default.

Response Body

application/json

application/json

application/json

application/json

curl -X GET "https://example.com/orgs/string/addons"
{  "addons": [    {      "id": "string",      "slug": "skill/code-review",      "kind": "app",      "name": "string",      "summary": "string",      "publisher": "string",      "provenance": "first_party",      "status": "listed",      "attachLevels": [        "org"      ],      "pricing": "free",      "iconUrl": "string",      "held": true,      "holding": "held_free",      "policy": {        "setting": "allow",        "allowed": true      }    }  ],  "metadata": {    "count": 0,    "nextCursor": "string",    "communityAddonsAllowed": true  }}

Browse RemoteHost's add-ons GET

RemoteHost's own and reviewed add-ons (provenance `first_party` or `verified`) that are listed: what a signed-out marketplace shows. Needs no credential and reads none, so the answer is the same for everyone and carries nothing about any org. Cacheable (`Cache-Control: public`, an ETag); rate limited per address.

List the add-ons installed in an organization GET

Every install on the API side, newest first: a project's skills and MCP servers, from the catalog or custom, and the active resource allocations on a project or one of its sandboxes, with whether the org holds each one's listing and its policy. Needs `org.read`; each install is shown on the projects where the caller may read its kind (`skills.read`, `mcp.read`, `resources.read`). With `projectId`, it also says what that project's sandboxes are given (`effective`): the project's resource allocations, the default for every sandbox, and each sandbox that overrides one, with everything it gets (its own quantity, never above the project's). Resources the org does not hold give nothing. Apps installed in Atlas workspaces are listed by Atlas.