---
title: "Publish an extension version"
method: POST
path: "/v1/extensions"
tags: ["Extensions"]
---

# Publish an extension version

`POST /v1/extensions`

## Request

- Base URL: `https://api.samva.dev`
- URL: `https://api.samva.dev/v1/extensions`
- Auth: API key in header `x-api-key`

Publishes one version from its manifest and returns it with status 201, creating the extension named by the manifest on its first version. A hosted manifest carries its bundle. Publishing a version again with the same manifest and bundle returns it; a different one conflicts, so bump the manifest's version. Only a person can publish, not an API key.

## Request body

- PublishExtensionVersionPayload
  - `manifest` object, required
    - `name` string, required
    - `displayName` string, required
    - `description` string, nullable
    - `version` string, required
    - `runtime` 'hosted' | 'webhook', required
    - `events` string[], required
    - `permissions` string[], required
  - `bundle` string, nullable

## Response `201`

PublishExtensionVersionResponse

- PublishExtensionVersionResponse
  - `extension` Extension, required
    - `id` string, required
    - `name` string, required
    - `displayName` string, required
    - `description` string, nullable, required
    - `runtime` 'hosted' | 'webhook', required
    - `latestVersion` ExtensionVersionRef, required
      - `id` string, required
      - `version` string, required
    - `createdAt` string, required
    - `updatedAt` string, required
  - `version` ExtensionVersion, required
    - `id` string, required
    - `version` string, required
    - `runtime` 'hosted' | 'webhook', required
    - `bundle` ExtensionBundle, required
      - `sha256` string, required
      - `sizeBytes` integer, required
    - `publishedAt` string, required
    - `manifest` object, required
      - `name` string, required
      - `displayName` string, required
      - `description` string, nullable
      - `version` string, required
      - `runtime` 'hosted' | 'webhook', required
      - `events` string[], required
      - `permissions` string[], required

## Other responses

- `401`: UnauthorizedError
- `403`: ForbiddenError
- `404`: ResourceNotFoundError
- `409`: ConflictError
- `422`: ValidationError
- `500`: InternalError
- `504`: GatewayTimeoutError

---

[API](https://skmtc.dev/samva/apis/samva-api.md) · [All operations](https://skmtc.dev/samva/apis/samva-api/llms.txt) · [OpenAPI document](https://skmtc.dev/samva/apis/samva-api/revisions/a99408542cc3?raw)