Publish a bundle
const url = 'https://qinto-api.blotout.io/developer/organizations/9c1d2b34-5e67-4f89-a0b1-2c3d4e5f6a7b/bundles/2b7e4d10-8a3c-4f56-9e21-7c0d5b8f3a64/publish';const options = {method: 'POST', headers: {Authorization: 'Bearer <token>'}};
try { const response = await fetch(url, options); const data = await response.json(); console.log(data);} catch (error) { console.error(error);}curl --request POST \ --url https://qinto-api.blotout.io/developer/organizations/9c1d2b34-5e67-4f89-a0b1-2c3d4e5f6a7b/bundles/2b7e4d10-8a3c-4f56-9e21-7c0d5b8f3a64/publish \ --header 'Authorization: Bearer <token>'Moves a Draft or Retired bundle to Live. The first publish locks the audience. To change a Live bundle, update it.
Required permissions
- None beyond a valid token; requires an OAuth token with the
developerorbundlesscope, for an owner of the addressed organization or a member with thebundlesfinance area and all apps
Authorizations
Section titled “Authorizations”Parameters
Section titled “Parameters”Path Parameters
Section titled “Path Parameters”Unique id (UUID) of the organization that owns the bundles, as listed by GET /me under organizations.
Example
9c1d2b34-5e67-4f89-a0b1-2c3d4e5f6a7bUnique id (UUID) of the organization that owns the bundles, as listed by GET /me under organizations.
Unique id (UUID) of the bundle, as returned by the create and list operations.
Example
2b7e4d10-8a3c-4f56-9e21-7c0d5b8f3a64Unique id (UUID) of the bundle, as returned by the create and list operations.
Responses
Section titled “Responses”The bundle is Live; warnings lists what the publish checks found that doesn’t block.
object
An offer that sells several of an organization’s apps to a team on one subscription line.
object
Server-assigned unique id of the bundle. Address the bundle with it in the get, update and delete operations.
Id of the organization that owns the bundle.
Display name of the bundle.
One-line description of what a team gets. Null when not set.
Longer description with its line breaks kept. Null when not set.
Where the bundle is in its life: draft is not published yet, live is on sale, paused is stopped by Blotout, and retired is no longer sold.
Who can reach the bundle: public is offered in the app store, and private only through bundle links. It locks when the bundle first leaves Draft.
How the bundle picks its apps: selected takes the listed apps, all takes every eligible app of the organization, and exclude takes every eligible app except the listed ones. all and exclude add future apps.
How the bundle charges: fixed is a base price, fixed_usage a base price and usage, usage only usage, and free nothing. A new bundle without it is fixed.
Base price per team, in US cents. Null when not set.
How often the base price is billed. Null when not set.
Length of the free trial in days. Null when not set.
Price of each site past the limit in US cents, billed like the base price. Null when extra sites aren’t sold.
The services the bundle price covers.
A service the developer delivers, which the bundle price covers.
object
Name of the service. Empty only on a bundle that isn’t published yet.
What the team gets. Empty when not set.
What the service costs on its own, in US cents. Null only on a bundle that isn’t published yet.
How the price on its own is billed.
The most usage can add to a team’s bill each month, in US cents. Null when not set.
The priced meters. Any other meter the apps report is free.
What one meter of one app costs on a bundle. A meter with no term is free.
object
Id of the app that reports the meter.
Key of the meter in that app. The same key in two apps is two terms.
Name of the meter on the bundle.
Plural unit, as the bill shows it. Empty only on a bundle that isn’t published yet.
Units included each month for the whole team, across its sites.
Price past the included amount, in US micro-dollars.
How many units that price covers. Null only on a bundle that isn’t published yet.
The stored app list of a selected or exclude bundle. Empty for all.
An app of the organization, by id and name.
object
Unique id of the app.
Display name of the app.
The apps the bundle holds right now, computed on read: a public bundle takes only apps in the app store, and a private bundle takes every app with a published version that isn’t suspended.
An app of the organization, by id and name.
object
Unique id of the app.
Display name of the app.
Whether the bundle can be sold right now, computed on read: it is live, holds at least one app, and none of the apps a selected bundle lists is unavailable.
Whether the bundle’s apps stop it from selling, computed on read: on a live or paused bundle, an app a selected bundle lists is unavailable, or no app remains. Always false on draft and retired. It clears by itself when Blotout lifts a suspension or approves a new store submission.
Why the bundle needs attention, written for the developer. Null when needsAttention is false.
The unavailable apps behind needsAttention, empty when it is false: the apps a selected bundle lists that were removed from the app store, suspended or taken down, or the apps of an all or exclude bundle that Blotout removed or suspended. May be empty when needsAttention is true, if no Blotout action explains the missing apps; attentionReason still says why.
An app of the organization, by id and name.
object
Unique id of the app.
Display name of the app.
Why Blotout paused the bundle. Null unless the status is paused, and a lift clears it.
When the bundle was created, as an ISO 8601 UTC timestamp.
When the bundle was last updated, as an ISO 8601 UTC timestamp.
What the publish checks found that doesn’t block. Empty when they did not run.
One thing the publish checks found in a bundle.
object
Machine-readable code of this issue.
Human-readable text for this issue, intended for display.
Example
{ "bundle": { "bundleId": "2b7e4d10-8a3c-4f56-9e21-7c0d5b8f3a64", "organizationId": "9c1d2b34-5e67-4f89-a0b1-2c3d4e5f6a7b", "name": "Growth Stack", "description": "Everything a store needs to measure its marketing.", "longDescription": "Who the bundle is for.\n\nHow support works.", "status": "draft", "audience": "public", "appMode": "selected", "pricingModel": "fixed", "basePriceCents": 7200000, "billingInterval": "monthly", "trialDays": 14, "siteLimit": 3, "extraSitePriceCents": 50000, "services": [ { "name": "Priority support", "detail": "4-hour response, shared Slack channel", "priceCents": 20000, "basis": "monthly" } ], "usageCapCents": 50000, "meterTerms": [ { "appId": "7f3a1c92-4b6d-4e8a-b1d3-5c9e2f7a6b10", "key": "events", "name": "Events", "unit": "events", "includedAmount": 100000, "priceMicros": 500000, "perUnits": 1000 } ], "listedApps": [ { "appId": "7f3a1c92-4b6d-4e8a-b1d3-5c9e2f7a6b10", "name": "Facebook CAPI" } ], "apps": [ { "appId": "7f3a1c92-4b6d-4e8a-b1d3-5c9e2f7a6b10", "name": "Facebook CAPI" } ], "canBeSold": true, "needsAttention": false, "attentionReason": "No apps remain, so this bundle can’t be sold. Unavailable: Facebook CAPI.", "affectedApps": [ { "appId": "7f3a1c92-4b6d-4e8a-b1d3-5c9e2f7a6b10", "name": "Facebook CAPI" } ], "pauseReason": "The listing promises a discount the price does not give.", "createdAt": "2026-11-05T00:00:00.000Z", "updatedAt": "2026-11-05T00:00:00.000Z" }, "warnings": [ { "code": "invalid_name", "message": "Name must be between 1 and 100 characters." } ]}invalid_params — A path parameter failed validation (for example a malformed UUID); details pinpoints the offending parameter.
object
Machine-readable error slug; switch on this value rather than on the HTTP status alone.
Field-level validation errors: a tree keyed by input property, each node carrying an errors array of human-readable messages. Render it to help the caller correct the request.
object
Example
{ "error": "invalid_params", "details": { "errors": [], "properties": { "teamId": { "errors": [ "Invalid UUID" ] } } }}unauthenticated — The Authorization: Bearer token is missing, malformed, or no longer valid. Generate a team API token or obtain a new OAuth access token.
object
Machine-readable error slug; switch on this value rather than on the HTTP status alone.
Example
{ "error": "unauthenticated"}forbidden — The bearer credential lacks the required permission or belongs to another team, or its user lacks the organization role a developer operation needs. Update its policies, use a credential bound to the addressed team, or ask an organization owner for the role; message states the reason when one is known. bundles_scope_required — The bearer credential has neither the developer nor the bundles scope, so it reaches no bundle operation whatever the role of its user. Authorize again to get a token with one of them.
object
Machine-readable error slug; switch on this value rather than on the HTTP status alone.
Human-readable reason for this specific failure, intended for display — do not parse it programmatically.
Example
{ "error": "forbidden", "message": "The Cloudflare API token is invalid or expired."}not_found — The addressed resource does not exist within this team; check the id and retry.
object
Machine-readable error slug; switch on this value rather than on the HTTP status alone.
Example
{ "error": "not_found"}bundle_status_conflict — The bundle’s status doesn’t allow this action. A Draft or Retired bundle can be published, a Live bundle can be retired, and a Paused bundle can only be edited. message states which.
object
Machine-readable error slug; switch on this value rather than on the HTTP status alone.
Human-readable reason for this specific failure, intended for display — do not parse it programmatically.
Example
{ "error": "bundle_status_conflict", "message": "The Cloudflare API token is invalid or expired."}bundle_not_publishable — The bundle fails the publish checks, and nothing changed. problems lists everything to fix, and warnings lists what wouldn’t block.
object
Machine-readable error slug; switch on this value rather than on the HTTP status alone.
Human-readable reason for this specific failure, intended for display — do not parse it programmatically.
Every problem that refuses the bundle; fix them all, then try again.
One thing the publish checks found in a bundle.
object
Machine-readable code of this issue.
Human-readable text for this issue, intended for display.
Everything the checks found that doesn’t block.
One thing the publish checks found in a bundle.
object
Machine-readable code of this issue.
Human-readable text for this issue, intended for display.
Example
{ "error": "bundle_not_publishable", "message": "The Cloudflare API token is invalid or expired.", "problems": [ { "code": "invalid_name", "message": "Name must be between 1 and 100 characters." } ], "warnings": [ { "code": "invalid_name", "message": "Name must be between 1 and 100 characters." } ]}internal — Unexpected server error. Nothing is guaranteed to have been persisted; idempotent operations are safe to retry.
object
Machine-readable error slug; switch on this value rather than on the HTTP status alone.
Example
{ "error": "internal"}