---
title: "Read which apps' customers can pull this app's Replicated registry images."
method: GET
path: "/app/{appId}/registry_access"
tags: ["apps"]
---

# Read which apps' customers can pull this app's Replicated registry images.

`GET /app/{appId}/registry_access`

## Request

- Base URL: `https://api.replicated.com/vendor/v3`
- URL: `https://api.replicated.com/vendor/v3/app/{appId}/registry_access`
- Auth: API key in header `Authorization`

Required RBAC Policy: kots/app/[:appid]/read

## Path parameters

- `appId` string, required

## Response `200`

- RegistryAccess: An empty list allows customers of all apps on the team.
  - `appIds` string[]

## Other responses

- `401`: Return if the caller is not authorized
- `403`: Returned if the caller does not have the needed permission
- `404`: Returned on resource not found

## Changes

- **2026-11-03** `a36c6aead22f`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/replicated/apis/vendor-api-v3-2/changes/app/:appId/registry_access/get.md)

---

[API](https://skmtc.dev/replicated/apis/vendor-api-v3-2.md) - [All operations](https://skmtc.dev/replicated/apis/vendor-api-v3-2/llms.txt) - [OpenAPI document](https://skmtc.dev/replicated/apis/vendor-api-v3-2/revisions/a36c6aead22f?raw)