Remotehost Docs
API ReferenceAdd-ons

Browse RemoteHost's add-ons

GET
/addons

RemoteHost's own and reviewed add-ons (provenance first_party or verified) that are listed: what a signed-out marketplace shows. Needs no credential and reads none, so the answer is the same for everyone and carries nothing about any org. Cacheable (Cache-Control: public, an ETag); rate limited per address.

Query Parameters

kind?string

Value in

  • "app"
  • "plugin"
  • "skill"
  • "mcp_server"
  • "resource"
cursor?string

The nextCursor of the previous page.

limit?string

Entries per page, 1 to 100; 50 by default.

Response Body

application/json

application/json

application/json

curl -X GET "https://example.com/addons"
{  "addons": [    {      "id": "string",      "slug": "string",      "kind": "app",      "name": "string",      "summary": "string",      "iconUrl": "string",      "publisher": "string",      "provenance": "first_party",      "pricing": "free"    }  ],  "metadata": {    "count": 0,    "nextCursor": "string"  }}

Revoke an API key DELETE

Requires a user session with api_keys.manage. API keys cannot call this operation. A sandbox's own Claims key (`rh_sb_`) cannot be revoked by hand: it answers 409 with `code: "sandbox_key_managed"`. To stop a sandbox using Claims, delete the sandbox or revoke the key it was issued from.

Browse an organization's add-on catalog GET

The catalog as the org sees it: each entry says whether the org holds it and why, and the org's policy for it. Needs `org.read` (every member). Each kind is shown to whoever could add it somewhere: MCP servers to `mcp.read`, skills to `skills.read` and plugins to `plugins.read` on the org or any project in it, apps to every member, resources to `resources.read` on the org or any project, and resources and every paid listing to `billing.read`. A member who holds none of those sees apps only. Browsing shows listed entries; `slug` finds one entry whatever its status but draft, and a retired slug kept as an alias finds the entry that replaced it.