Inventories

The App Store is the showcase for third-party extensions: apps that other developers publish to extend the platform. Each extension declares in a SIGNED manifest exactly what it needs to access — what it reads, what it writes and under which approval limit — and you see that list BEFORE installing. Nothing gets in without a valid manifest signature, and nothing operates before a super admin approves the publication: installing is an act of informed consent, not a click in the dark.

The store for third-party extensions: apps that other developers publish to extend the platform. Each extension declares, in its SIGNED manifest, exactly what it needs to access — which resources it READS, which it WRITES and under which approval limit. When you open an extension, you see that list of permissions BEFORE installing (informed consent) and only install if you agree. Nothing installs without a valid manifest signature, and nothing operates before a super admin approves (EM_REVISÃO → PUBLICADA). An extension never sees a byte beyond what it declared. Super admins also approve or suspend the review queue from here.

Each extension declares the resources it wants to read and write, and that list appears on screen before the click. There is no implicit "accept everything": whatever isn't declared there, the extension can't reach later — the system denies it, regardless of what its code tries.

A read-only extension still sees the data it asked for. Before installing, ask yourself whether you would hand that list, printed, to that vendor — it's the same access, and it applies continuously.

Um painel de BI ou o desenho de um agente que a sua conta montou vira pacote: escolha, dê nome e a sua participação e envie para revisão. A plataforma confere e publica; qualquer conta instala em um clique. O pacote é assinado: alterado depois da revisão, não instala. O instalado nasce em rascunho e sem as referências da conta de origem — revise antes de ligar.

Besides BI dashboards and agent designs, the management-system connector your account fine-tuned (what it syncs, how often, the mapping and the deletion policy) can become a package. Password, token, keys, service user and your system's address never go into the package. Whoever installs it gets the connector switched off and without write access: they fill in their own credentials and turn it on when ready.

Which third-party extensions exist — and what does each one ask to access? Open an extension to see the permissions declared in its manifest: which resources it READS, which it WRITES and under which value authority it operates. An extension never sees a single byte beyond what it declared, so the list you read in the store is the real limit of what it will be able to do after it is installed. Super admins also use this screen to approve or suspend the review queue (EM_REVISÃO to PUBLICADA).