{"registry_version":"2026.1025.387","generated_at":"2026-10-25T06:27:00Z","content_sha256":"089d16f627d9365e3d0663cc8069203706d7cb23a76c332226e29686968811a5","signed":true,"signature":{"key_id":"ed25519:74ca19268e364242","algorithm":"ed25519","expires_at":"2026-11-24T06:27:09Z","expired":false,"manifest":"/registry/manifest.json"},"entry_sha256":"d494aa59780af1259ccf460edb76808ea7e62dab8394995b8f220b25070b4d4b","entry":{"id":"google/workspace-marketplace","name":"Google Workspace Marketplace listing (public or private app)","vendor":"Google","summary":"Publish a Workspace add-on, Chat app or web app to the Google Workspace Marketplace. Configure the Marketplace SDK and a store listing in your Cloud project; public apps must pass OAuth verification and a Marketplace app review, private apps are available to your own organisation straight away.","aliases":["google-workspace-marketplace","gsuite-marketplace","marketplace-sdk"],"category":"productivity","group":"B","homepage":"https://workspace.google.com/marketplace","docs":["https://developers.google.com/workspace/marketplace/how-to-publish","https://developers.google.com/workspace/marketplace/about-app-review","https://developers.google.com/workspace/marketplace/create-listing"],"status":"researched","last_verified":null,"last_researched":"2026-10-25","sources":[{"id":"how-to-publish","url":"https://developers.google.com/workspace/marketplace/how-to-publish","title":"Google Workspace Marketplace – Publish an app (overview)","accessed":"2026-10-25","supports":"Steps: Cloud project, OAuth (public apps may need OAuth review), test, enable Marketplace SDK, store listing (also for private apps), submit; public apps reviewed, private apps available immediately; private apps need a Workspace account; visibility cannot be changed after publishing; installation settings","kind":"official"},{"id":"app-review","url":"https://developers.google.com/workspace/marketplace/about-app-review","title":"Google Workspace Marketplace – About app review","accessed":"2026-10-25","supports":"Review covers name, developer info, description, functionality, UX, graphics and OAuth; app must have passed OAuth verification with narrowest scopes; review typically takes several days; common rejection reasons; review document then resubmit; approved apps publish automatically","kind":"official"},{"id":"create-listing","url":"https://developers.google.com/workspace/marketplace/create-listing","title":"Google Workspace Marketplace – Create a store listing","accessed":"2026-10-25","supports":"Name 50 chars and must match OAuth consent screen; short description 200 chars; icons 32x32 and 128x128 (plus 48x48 and 96x96 for web apps); banner 220x140; 1-10 screenshots, 1280x800 recommended, full bleed; terms of service, privacy policy and support URLs required","kind":"official"},{"id":"program-policies","url":"https://developers.google.com/workspace/marketplace/terms/policies","title":"Google Workspace Marketplace – Program policies","accessed":"2026-10-25","supports":"Bans duplicate apps, keyword spam, fake ratings/installs, impersonation, hidden code, drip pricing; minimal OAuth scopes; privacy policy and limited use; serious or repeated violations suspend the developer account and possibly related accounts; circumvention means immediate termination","kind":"official"},{"id":"restricted-scope-assessment","url":"https://support.google.com/cloud/answer/13465431?hl=en","title":"Google Cloud Help – Restricted scope verification and security assessment","accessed":"2026-10-25","supports":"Apps with restricted scopes need an annual CASA-based security assessment and are revalidated every year","kind":"official"}],"allowed_domains":["console.cloud.google.com","workspace.google.com"],"account_model":{"summary":"The Marketplace listing is configured inside a Google Cloud project (Marketplace SDK). The same project holds the OAuth consent screen and client. Public listings can be published from any Google account's project; private (internal) listings must be built with a Google Workspace account and are visible only to that Workspace organisation.","accounts":[{"name":"Google Account or Google Workspace account","kind":"organisation","owned_by":"the company","required":true,"note":"A Workspace account is required for private apps."},{"name":"Google Cloud project with the Marketplace SDK enabled","kind":"project","owned_by":"the company","parent":"Google Account or Google Workspace account","required":true}],"notes":["Public versus private visibility cannot be changed after the app is published, so choose carefully.","The listing name must match the OAuth consent screen app name."]},"prerequisites":[{"entry":"google/cloud-project-run","note":"Any Google Cloud project works; Cloud Run, Firestore and the domain parts are not needed."},{"entry":"google/oauth-verification","note":"Public apps must have passed OAuth verification before the Marketplace review; restricted scopes also need the annual CASA assessment."}],"identity_requires":["app_name","app_description","privacy_policy_url","terms_url","support_email","website","app_icon_url"],"have_ready":[{"kind":"app_icon","description":"App icons 32x32 and 128x128 px (and 48x48 and 96x96 if the project includes a web app), plus a 220x140 card banner","needed_for":["store-listing"],"auto_check":"none","source":"create-listing"},{"kind":"other","description":"1 to 10 screenshots, 1280x800 recommended (640x400 or 2560x1600 accepted), square corners and full bleed","needed_for":["store-listing"],"auto_check":"none","source":"create-listing"},{"kind":"app_privacy_policy_url","description":"Privacy policy URL, terms of service URL and support URL, each a real web page","needed_for":["store-listing"],"auto_check":"website_live","source":"create-listing"},{"kind":"live_website","description":"Website for the app or developer","needed_for":["store-listing"],"auto_check":"website_live","source":"how-to-publish"},{"kind":"other","description":"A fully working, tested app (not still in testing) and a justification for each OAuth scope","needed_for":["submit"],"auto_check":"none","source":"app-review"}],"steps":[{"id":"project","title":"Use the app's Google Cloud project","summary":"Create or reuse the Cloud project that holds the app's OAuth client and configuration.","route":"guided","depends_on":[],"gate":"human_submit","url":"https://console.cloud.google.com/projectcreate","sources":["how-to-publish"]},{"id":"oauth","title":"Configure OAuth and get it verified (public apps)","summary":"Set up the OAuth consent screen with user type External and publishing status In production, request the narrowest scopes, and complete Google OAuth verification. Internal user type or Testing status is a common rejection cause.","route":"guided","depends_on":["project"],"gate":"third_party_review","url":"https://console.cloud.google.com/apis/credentials/consent","recovery":[{"hiccup":"Rejected for incorrect OAuth consent screen set-up or incomplete OAuth verification","fix":"Set user type to External, publish to production, finish OAuth verification, then resubmit.","source":"app-review"}],"sources":["app-review"]},{"id":"enable-sdk","title":"Enable and configure the Marketplace SDK","summary":"Enable the Google Workspace Marketplace SDK, then set visibility (public or private), installation settings (individual or admin install) and which Workspace apps the app extends.","route":"guided","depends_on":["project"],"gate":"human_submit","url":"https://console.cloud.google.com/apis/library","sources":["how-to-publish"]},{"id":"store-listing","title":"Create the store listing","summary":"Fill in name, descriptions, category, icons, banner, screenshots and the terms, privacy and support links.","route":"guided","depends_on":["enable-sdk"],"gate":"human_submit","preflight":["privacy_policy_reachable","app_icon_present","display_name_matches_business"],"recovery":[{"hiccup":"Rejected for Google trademarks in name, logo or description","fix":"Follow the Marketplace branding guidelines and remove Google marks from your own branding.","source":"app-review"},{"hiccup":"Rejected for broken or misleading links or poor screenshots","fix":"Check every link loads and replace screenshots with full-bleed images that show the real app.","source":"app-review"}],"sources":["create-listing"]},{"id":"submit","title":"Submit for publication","summary":"Press Submit for review yourself. Private apps become available to your organisation immediately; public apps go to Google review and publish automatically when approved.","route":"guided","depends_on":["oauth","store-listing"],"gate":"third_party_review","lead_time":{"official":{"text":"App review typically takes several days, depending on queue and how much work the app needs.","source":"app-review"}},"recovery":[{"hiccup":"Review document says the app needs more work","fix":"Address each issue listed, then resubmit.","source":"app-review"},{"hiccup":"App has bugs or is still in testing","fix":"Finish and test the app end to end before submitting.","source":"app-review"}]}],"outputs":[],"terms_notes":[{"kind":"rules_say","severity":"red","title":"Suspension can reach related accounts","text":"Serious or repeated policy violations can suspend your developer account and possibly related accounts; trying to get around enforcement leads to immediate termination.","source":"program-policies"},{"kind":"rules_say","severity":"red","title":"No duplicate or spammy listings","text":"Multiple apps with duplicate functionality (including from related accounts), keyword stuffing, or fake ratings and installs are prohibited.","source":"program-policies"},{"kind":"rules_say","severity":"amber","title":"Ask only for scopes you use now","text":"Do not request scopes for future features; admin-installed apps must not prompt end users for consent afterwards.","source":"program-policies"},{"kind":"rules_say","severity":"amber","title":"Visibility is permanent","text":"Once published you cannot switch an app between public and private.","source":"how-to-publish"}],"renewals":[{"what":"Annual security reassessment (CASA) if the app uses restricted scopes","every":"1 year","every_days":365,"source":"restricted-scope-assessment"}],"pricing_notes":{"notes":"The official publishing pages mention no Marketplace listing fee [to verify]; restricted-scope security assessments may cost assessor fees (see google/oauth-verification).","source":"how-to-publish"},"stripe_projects":false,"api_provisioning":{"available":"no","notes":"Marketplace SDK configuration and store listing are done in the Cloud console; no official API for submitting listings was found [to verify].","source":"how-to-publish"}}}