Skip to main content
POST
Create app

Authorizations

Authorization
string
header
required

Personal access token, sent as Authorization: Bearer <token>. Each operation lists the permission it needs: read_only or full_access. A full-access token can call every operation. A read-only token can call only the operations that list read_only; anything else returns 403 read_only_credential_route_not_allowed.

Body

application/json
initial_message
object

First prompt to build the app from. Omit to create an empty app.

name
string

Display name of the app. Omit it to have Base44 name the app once a build turn changes it. The app's URL slug is built from the name.

Example:

"My CRM"

user_description
string

Description of the app. When you omit name, Base44 replaces it with a generated description once a build turn changes the app.

Example:

"A CRM to track leads and deals"

public_settings
enum<string>

Who can open the published app. public_without_login lets anyone in, unless the workspace enforces SSO for apps, in which case visitors must log in. public_with_login lets anyone in who logs in, workspace_with_login admits only logged-in members of the workspace, and private_with_login admits only users who were granted access. Omit it to use the workspace default. workspace_with_login and private_with_login need a paid plan, and a workspace policy can restrict which values you can choose. Like other publish settings, it takes effect on the live app once you deploy the app.

Available options:
public_without_login,
public_with_login,
workspace_with_login,
private_with_login
Example:

"public_with_login"

custom_instructions
string

Instructions the builder follows on every turn, starting with the first build. Only the first 10,000 characters reach the builder.

Example:

"Use a dark theme and keep every page mobile friendly."

secrets
object

Secrets to set on the app before its first build turn, keyed by secret name. Each entry sets the secret to value. The name must not be empty or contain =.

Example:
prevent_iframe_embedding
boolean
default:true

Whether the published app refuses to load inside an iframe on another site. Defaults to true. Set it to false to embed the app, although a workspace embedding policy can still restrict where. Preview URLs are not affected. It takes effect on the live app once you deploy it.

Example:

false

organization_id
string

ID of the workspace to create the app in. Omit to use your default workspace. You must have an editor-capable role (Editor or above) in the workspace. Viewers and guests cannot create apps. This is the same workspace ID that List apps accepts as workspace_id.

Example:

"67e0b12c4d8a3f005b21c9e4"

Response

Successful Response

id
string

ID of the app.

Example:

"6820f3a4e7b91d003c45a1f2"

created_date
string<date-time>

Time the app was created, as a UTC timestamp in ISO 8601 format.

Example:

"2026-08-01T09:15:00"

updated_date
string<date-time>

Time the app document was last written, as a UTC timestamp in ISO 8601 format.

Example:

"2026-08-02T14:30:00"

created_by
string | null

Email of the user who created the app.

Example:

"developer@example.com"

organization_id
string | null

ID of the workspace the app belongs to.

Example:

"67e0b12c4d8a3f005b21c9e4"

app_type
string
default:user_app

Kind of app, set when it's created. One of user_app (a web app), user_agent (an AI agent), mobile_app (a native mobile app), user_game (a game), slide (a presentation), or imported_app (an app imported from an existing code repository). List apps returns it as stored, so an older agent app can report agent instead of user_agent, and some older apps don't include it. Get app always returns one of the values above.

Example:

"user_app"

name
string
default:untitled

Display name of the app.

Example:

"My CRM"

user_description
string | null

Description of the app, or null if none was set. An app created without a name gets a generated description once a build turn changes it.

Example:

"A CRM to track leads and deals"

logo_url
string | null

URL of the app's logo, or null if it has none. Set it with Set app logo or Generate app logo.

Example:

"https://storage.base44.com/6820f3a4e7b91d003c45a1f2/3f2504e0_logo.png"

social_image_url
string | null

URL of the image shown when the app is shared on social platforms, or null if none was set, in which case the logo is shown instead. Set it with Set social image.

Example:

"https://storage.base44.com/6820f3a4e7b91d003c45a1f2/7c9e6679_social.png"

public_settings
enum<string>
default:public_with_login

Who can open the published app. Each value is described under Update app, which also changes it.

Available options:
private_with_login,
public_with_login,
public_without_login,
workspace_with_login
Example:

"public_with_login"

auth_config
AuthConfiguration · object

Which login methods the app's login page offers. If the workspace enforces SSO for apps, the login page offers only SSO, whatever these are set to. Change them with Update app.

hide_entity_created_by
boolean
default:false

Whether the app's entity records leave out the email of the user who created each one (created_by). Newer apps always leave the email out, whatever this is set to.

Example:

true

is_remixable
boolean
default:false

Whether others can remix the app. While it's true, the published app also shows the Base44 badge if public_settings is public_with_login or public_without_login.

Example:

false

main_branch_protected
boolean
default:false

Whether the app's main branch is protected, so changes to main must go through a branch that's merged back. Always true for imported apps. Change it with Set main branch protection.

Example:

false

slug
string | null

URL slug for the app, auto generated from the name and app ID or set to a custom value, or null if the app has no slug yet. The published URL is built from it.

Example:

"my-crm-3c45a1f2"

is_unpublished
boolean
default:false

Whether the app was taken offline with Unpublish app and hasn't been published again since. While it's true, the published URL is offline and last_deployed_at still shows the last publish.

Example:

false

last_deployed_at
string<date-time> | null

Time the app was last published, as a UTC timestamp in ISO 8601 format, or null if it has never been published.

Example:

"2026-08-02T14:30:00"

screenshot_url
string | null

URL of a screenshot of the published app. Captured shortly after each publish, so it can briefly lag or be null right after publishing.

Example:

"https://storage.base44.com/screenshots/6820f3a4e7b91d003c45a1f2.png"

preview_screenshot_url
string | null

URL of a preview screenshot taken before publishing, distinct from screenshot_url, or null if none has been captured.

Example:

"https://storage.base44.com/previews/6820f3a4e7b91d003c45a1f2.png"

owner_id
string | null

ID of the user who owns the app. It starts as the creator and changes when ownership is transferred.

Example:

"6706af53b9c1e2004a37d85f"

status
StatusObject · object

The app's current build status. Poll while a build is in progress to watch it finish. This tracks building, not publishing.

dev_environment_enabled
boolean
default:false

Whether test data is on, which gives the app a test database next to its live one.

Example:

false