---
title: "create app"
method: POST
path: "/w/{workspace}/apps/create"
tags: ["app"]
---

# create app

`POST /w/{workspace}/apps/create`

## Path parameters

- `workspace` string, required

## Request body

- object
  - `path` string, required
  - `value` unknown, required
  - `summary` string, required
  - `policy` Policy, required
    - `triggerables` object
    - `triggerables_v2` object
    - `s3_inputs` object[]
    - `allowed_s3_keys` object[]
      - `s3_path` string
      - `resource` string
    - `execution_mode` 'viewer' | 'publisher' | 'anonymous'
    - `on_behalf_of` string
    - `on_behalf_of_email` string
    - `sandbox` boolean — Publisher opt-in to app sandbox isolation (alpha). When true the app is isolated from each viewer's Windmill session. When false/absent the app runs same-origin with the viewer's full session (the default, pre-isolation behavior).
    - `frontend_sdk_scopes` string[] — Raw apps: author-declared scopes for the frontend SDK token. Takes effect only when `sandbox` is also true — an unsandboxed bundle runs with the viewer's own session, so no token is advertised or minted for it and this list stays inert. On a sandboxed app a non-empty list lets viewers mint (after consenting) a short-lived token carrying their own identity restricted to these scopes, handed to the app bundle so `windmill-client` calls run as the viewer. Must be a subset of the server's curated allowlist (jobs:run, jobs:read, users:read, resources:read, variables:read).
  - `deployment_message` string
  - `custom_path` string
  - `preserve_on_behalf_of` boolean — When true and the caller is a member of the 'wm_deployers' group, preserves the original on_behalf_of value in the policy instead of overwriting it.
  - `labels` string[]
  - `skip_draft_deletion` boolean — When true (set by the CLI / git sync), deploying this app does not delete an existing user draft at the same path.

## Response `201`

app created

---

[API](https://skmtc.net/windmill/apis/windmill-api.md) · [All operations](https://skmtc.net/windmill/apis/windmill-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/windmill/windmill-api/versions/155a35b3caff/schema)