> This page is for API, version 2026-01-01 (Stable) (default). > For other versions, use one of these documentation indexes: > - 2026-01-01 (Stable) (default): https://docs.deel.wtf/api/stable/llms.txt > For clean Markdown of any page, append .md to the page URL. > For a complete documentation index, see https://docs.deel.wtf/llms.txt. > For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://docs.deel.wtf/_mcp/server. # List apps GET https://api.letsdeel.com/rest/apps Lists the integration apps that belong to your organization, newest first. Use this to find the id of an app before retrieving it. **Token scopes**: `apps:read` **Beta**: this version requires the `X-Beta: true` request header and its contract may change before it is promoted to stable. It is scheduled to become stable on 2027-02-02. Reference: https://docs.deel.wtf/api/reference/endpoints/apps/list-apps-v-2026-11-02 ## Authentication - `Authorization` header (bearer token, required) — ## Authentication The Deel API uses bearer tokens to authenticate requests. All API calls must be made over HTTPS — calls over plain HTTP or without authentication will fail. ```curl curl -X GET 'https://api.deel.training/rest/v2/contracts' \ -H 'Authorization: Bearer YOUR-TOKEN-HERE' ``` [Learn more about authentication](/api/authentication) - `Authorization` header (bearer token, required) — Standard OAuth2 security scheme based on https://swagger.io/docs/specification/authentication/ ## Servers - `https://api.letsdeel.com/rest` (Production, default) - `https://api-staging.letsdeel.com/rest` (Demo) ## Request ### Query parameters - `limit` (integer, optional) — Maximum number of apps to return in one page, from 1 to 100 (100 when omitted), newest first. - `cursor` (string, optional) — Opaque cursor returned as `cursor` by the previous page. Send it to fetch the next page. - `api_access` (enum, optional) — Only return apps with this API access. - Allowed values: `enabled`, `disabled` ### Headers - `X-Beta` (enum, required, default: true) — Opts in to the beta version of this endpoint. Must be `true`. - Allowed values: `true` ## Response ### 200 The apps of your organization. - `data` (list of AppsGetResponsesContentApplicationJsonSchemaDataItems, required) — The list of apps. - `cursor` (string, required, nullable) — Cursor for the next page; pass it as the `cursor` query parameter. Null when there are no more results. ## Errors ### 400 Bad Request Error Bad Request. A query parameter or the cursor is invalid. - `errors` (list of AppsGetResponsesContentApplicationJsonSchemaErrorsItems, required) — The list of errors that caused the request to fail. ### 401 Unauthorized Error Unauthorized. Authentication credentials were missing or invalid. - `errors` (list of AppsGetResponsesContentApplicationJsonSchemaErrorsItems, required) — The list of errors that caused the request to fail. ### 403 Forbidden Error Forbidden. You do not have permission to access this resource. - `errors` (list of AppsGetResponsesContentApplicationJsonSchemaErrorsItems, required) — The list of errors that caused the request to fail. ### 404 Not Found Error Operation failed. - `request` (ApiErrorRequest, optional) - `errors` (list of ApiError, optional) ### 429 Too Many Requests Error Too Many Requests. The rate limit has been exceeded. - `errors` (list of AppsGetResponsesContentApplicationJsonSchemaErrorsItems, required) — The list of errors that caused the request to fail. ### 500 Internal Server Error Internal Server Error. An unexpected error occurred. - `errors` (list of AppsGetResponsesContentApplicationJsonSchemaErrorsItems, required) — The list of errors that caused the request to fail. ## Types ### AppsGetResponsesContentApplicationJsonSchemaDataItems An app that belongs to your organization. - `id` (string, required) — Unique identifier of the app. - `name` (string, required) — Name of the app. - `type` (enum, required) — Kind of app. Integration apps connect your organization to Deel. - Allowed values: `integration` - `audience` (enum, required) — Whom the app acts for: `personal` for the user who authorizes it, `organization` for the organization. - Allowed values: `personal`, `organization` - `logo_url` (string, required) — URL of the app logo. Empty when the app has no logo. - `api_access` (enum, required) — Whether API access is switched on for the app: `disabled` after the app is disabled, by you or by Deel, until it is enabled again. - Allowed values: `enabled`, `disabled` - `created_at` (string, required) — Time at which the app was created. - `created_by` (AppsGetResponsesContentApplicationJsonSchemaDataItemsCreatedBy, required, nullable) — Who created the app, or null when unknown. - `updated_at` (string, required) — Time at which the app was last updated. - `client_type` (enum, required) — Whether the app can keep a secret. `confidential` apps authenticate with a client secret. - Allowed values: `public`, `confidential` - `description` (string, required) — What the app does. Empty when none was set. - `website_url` (string, required) — Website of the app. Empty when none was set. - `redirect_uris` (list of string, required) — URLs Deel may send the user back to after they authorize the app. ### AppsGetResponsesContentApplicationJsonSchemaErrorsItems - `code` (string, required) — Machine-readable error code. - `message` (string, required) — Human-readable description of the error. - `details` (AppsGetResponsesContentApplicationJsonSchemaErrorsItemsDetails, optional) — Additional information about the error, when available. ### ApiErrorRequest - `method` (string, optional) — The HTTP method of the failed request - `url` (string, optional) — The relative URL of the failed request - `status` (double, optional) — The status code of the response - `api_req_id` (string, optional) — The request ID of the failed request - `docs` (string, optional) — A link to the official documentation for the requested endpoint resource - `source` (string, optional) — The source handler which produced the returned error - `code` (double, optional) — The code of the source handler which produced the returned error ### ApiError - `message` (string, optional) — A description of the returned error - `path` (string, optional) — The JSON path where input validation failed ### AppsGetResponsesContentApplicationJsonSchemaDataItemsCreatedBy Who created the app, or null when unknown. - `name` (string, required, nullable) — Name of the person who created the app. - `status` (enum, required) — Whether the creator still belongs to your organization (`active`) or no longer does (`left`). - Allowed values: `active`, `left` ### AppsGetResponsesContentApplicationJsonSchemaErrorsItemsDetails Additional information about the error, when available. ## Examples **Response** ```json { "data": [ { "id": "00000000-0000-0000-0000-000000000000", "name": "Payroll sync", "type": "integration", "audience": "organization", "logo_url": "https://cdn.example.com/logo.png", "api_access": "enabled", "created_at": "2024-01-01T12:00:00Z", "created_by": { "name": "Ada Lovelace", "status": "active" }, "updated_at": "2024-01-02T12:00:00Z", "client_type": "confidential", "description": "Syncs approved timesheets to our payroll system.", "website_url": "https://example.com", "redirect_uris": [ "https://example.com/oauth/callback" ] } ], "cursor": "string" } ``` **SDK Code** ```python import requests url = "https://api.letsdeel.com/rest/apps" querystring = {"api_access":"enabled","cursor":"eyJvZmZzZXQiOjUwLCJsaW1pdCI6NTB9","limit":"50"} headers = { "X-Beta": "true", "Authorization": "Bearer " } response = requests.get(url, headers=headers, params=querystring) print(response.json()) ``` ```javascript const url = 'https://api.letsdeel.com/rest/apps?api_access=enabled&cursor=eyJvZmZzZXQiOjUwLCJsaW1pdCI6NTB9&limit=50'; const options = {method: 'GET', headers: {'X-Beta': 'true', Authorization: 'Bearer '}}; try { const response = await fetch(url, options); const data = await response.json(); console.log(data); } catch (error) { console.error(error); } ``` ```go package main import ( "fmt" "net/http" "io" ) func main() { url := "https://api.letsdeel.com/rest/apps?api_access=enabled&cursor=eyJvZmZzZXQiOjUwLCJsaW1pdCI6NTB9&limit=50" req, _ := http.NewRequest("GET", url, nil) req.Header.Add("X-Beta", "true") req.Header.Add("Authorization", "Bearer ") res, _ := http.DefaultClient.Do(req) defer res.Body.Close() body, _ := io.ReadAll(res.Body) fmt.Println(res) fmt.Println(string(body)) } ``` ```ruby require 'uri' require 'net/http' url = URI("https://api.letsdeel.com/rest/apps?api_access=enabled&cursor=eyJvZmZzZXQiOjUwLCJsaW1pdCI6NTB9&limit=50") http = Net::HTTP.new(url.host, url.port) http.use_ssl = true request = Net::HTTP::Get.new(url) request["X-Beta"] = 'true' request["Authorization"] = 'Bearer ' response = http.request(request) puts response.read_body ``` ```java import com.mashape.unirest.http.HttpResponse; import com.mashape.unirest.http.Unirest; HttpResponse response = Unirest.get("https://api.letsdeel.com/rest/apps?api_access=enabled&cursor=eyJvZmZzZXQiOjUwLCJsaW1pdCI6NTB9&limit=50") .header("X-Beta", "true") .header("Authorization", "Bearer ") .asString(); ``` ```php request('GET', 'https://api.letsdeel.com/rest/apps?api_access=enabled&cursor=eyJvZmZzZXQiOjUwLCJsaW1pdCI6NTB9&limit=50', [ 'headers' => [ 'Authorization' => 'Bearer ', 'X-Beta' => 'true', ], ]); echo $response->getBody(); ``` ```csharp using RestSharp; var client = new RestClient("https://api.letsdeel.com/rest/apps?api_access=enabled&cursor=eyJvZmZzZXQiOjUwLCJsaW1pdCI6NTB9&limit=50"); var request = new RestRequest(Method.GET); request.AddHeader("X-Beta", "true"); request.AddHeader("Authorization", "Bearer "); IRestResponse response = client.Execute(request); ``` ```swift import Foundation let headers = [ "X-Beta": "true", "Authorization": "Bearer " ] let request = NSMutableURLRequest(url: NSURL(string: "https://api.letsdeel.com/rest/apps?api_access=enabled&cursor=eyJvZmZzZXQiOjUwLCJsaW1pdCI6NTB9&limit=50")! as URL, cachePolicy: .useProtocolCachePolicy, timeoutInterval: 10.0) request.httpMethod = "GET" request.allHTTPHeaderFields = headers let session = URLSession.shared let dataTask = session.dataTask(with: request as URLRequest, completionHandler: { (data, response, error) -> Void in if (error != nil) { print(error as Any) } else { let httpResponse = response as? HTTPURLResponse print(httpResponse) } }) dataTask.resume() ```