POST

Apps.Update

Update an existing app. Send app_slug and optionally a new app_name and/or a replacement ZIP. When a ZIP is sent, it is scanned and extracted to a temporary folder before replacing the live version.

Permissions

User must be logged in with a valid bearer token.
The user must be from the same company domain as the request Host (call the API on that account subdomain or allowed custom domain). A token from another company returns success=0, error user_not_in_company.
Returned or changed records are limited by the user permissions, team access, folder access, and account settings.

Action

Updates the requested Apps record after validating permissions and input fields.

Push Service

No push is sent because this function only reads data or returns helper information.

Automation

No automation is run for this function.

Special Instructions

Send the bearer token on protected calls with Authorization: Bearer YOUR TOKEN.
On a company subdomain (e.g. https://{user_domain}.bull36.com) the user must match that Host — Login and protected APIs reject another company with success=0, error user_not_in_company. On a main brand host (bull36.com, biz1.co.il, mastrocrm.com, …) the company domain gate is skipped.
Send parameters as POST body fields exactly as documented.
Send date/time values in UTC Y-m-d H:i:s format when a date or datetime field is used.

Required Parameters

Name	Type	Sample	Explanation
`app_slug` post	string	`sampleapp`	Existing app slug. Alias: slug.

Optional Parameters

Name	Type	Sample	What it gives
`app_name` post	string	`Sample App v2`	New display name. Alias: name.
`zip` file	zip file	`sampleapp-v2.zip`	Optional replacement ZIP. It must pass the same scan rules as Apps.Add.

Authentication

Send the bearer token returned by Login in the request header. The user must be from the same company domain as this Host — a token from another company is rejected (user_not_in_company).

Authorization: Bearer YOUR TOKEN

Sample Request

{
    "url": "\/app\/Apps.Update",
    "method": "POST",
    "headers": {
        "Authorization": "Bearer YOUR TOKEN"
    },
    "body": {
        "app_slug": "sampleapp",
        "app_name": "Sample App v2"
    },
    "url_user": "https:\/\/{user}.bull36.com\/app\/Apps.Update",
    "url_domain": "https:\/\/{domain}\/app\/Apps.Update"
}

Endpoint

POST /app/Apps.Update
POST https://{user}.bull36.com/app/Apps.Update
POST https://{domain}/app/Apps.Update

Sample Output

{
    "success": 1,
    "app_id": 12,
    "app_slug": "sampleapp",
    "status": "active",
    "version": 2,
    "public_url": "https:\/\/apps.biz1.co.il\/eli\/sampleapp\/"
}

JavaScript Example

const token = 'YOUR TOKEN';
const form = new FormData();
form.set('app_slug', 'sampleapp');
form.set('app_name', 'Sample App v2');
if (fileInput.files[0]) form.set('zip', fileInput.files[0]);
const res = await fetch('/app/Apps.Update', { method: 'POST', headers: { Authorization: 'Bearer ' + token }, body: form });
const data = await res.json();
console.log(data);

Error Example

{
    "success": 0,
    "error": "zip_rejected",
    "message": "ZIP must include index.html in the root folder."
}