App gallery

The app gallery is where org admins find reviewed apps from other makers (Org Settings → Integrations → Browse apps) and add them with "Add to Missived". Listing is by invitation for now: a person reviews every app and every change to what it asks for.

Get listed

1. Build and test in your own org. Make the app in Org Settings → Integrations → Apps & bots and set up OAuth. Until it's listed, only your org's members can connect it.
2. Join the developer program. An Owner or Admin opens the app's card → Gallery listing → Apply to the developer program: the maker name the gallery shows, a contact email for the reviewers (never shown), your website and what you build. The platform team verifies your org, or invites it.
3. Write the listing:
   • a one-line summary, the description and a category;
   • the "Add to Missived" link: an https page on your site that starts the OAuth install (scope=bot …, with PKCE);
   • your homepage, privacy policy and terms (all https; they also appear on the consent screen) and a support email or page;
   • up to four screenshots (https images);
   • every scope the install asks for, with the reason you need it;
   • notes for the reviewer on how to test it (never published).
4. Submit for review. A reviewer checks it against the list below, then approves it or sends it back with a reason. Approval lists it on the server and opens its OAuth to every org.

The review checklist

• The homepage, privacy policy and terms load and belong to you.
• The support contact is real and answers.
• Every scope is needed for what the listing says the app does, and each reason holds up.
• Sensitive scopes (reading every channel, admin, AI assistants) are absent or clearly essential.
• Installed in a test org, it works, does only what it says, and uninstalls cleanly.
• The name, description and screenshots match the app, and it doesn't pose as another brand.
• The install link and redirect URIs are on your own domains.

Changing a listed app

Edits are saved as a draft; the gallery keeps showing the approved version until the change is approved. Least privilege is enforced: an install in any org other than yours may ask for no more than the approved scopes, so adding a scope means another review before anyone else can grant it. Withdraw from gallery takes the listing down; installs keep working, and listing it again needs a review.

Suspension

If an app breaks the rules, the platform can suspend it: every connection is revoked, every install is paused in every org (its tokens, gateway, commands and buttons stop), new consent is refused, and it leaves the gallery. Lifting the suspension resumes the installs it paused; people sign in again. An install an org paused itself stays paused.

For org admins

Any member can browse; adding an app needs Manage integrations. Each app's page shows its maker, links, screenshots and what it will be able to do, with the maker's reason for each permission. A Business org's Owner or Admin can allow only chosen apps.