Plugins API
Installed plugin catalog, portable contributions, settings, and asynchronous commands
Resolve portable plugin cards for one authorized document
Requires documents.read and the normal document ACL. A malformed or disabled plugin cannot make core document detail unavailable.
List the household plugin catalog
Requires plugins.manage. Compatibility and malformed-descriptor health are reported without executing plugin code.
Read one installed plugin descriptor and current settings
Requires plugins.manage. Returns the portable descriptor, compatibility and health state, declared settings, and current values without executing plugin code, together with a strong installation and settings ETag.
Read a durable plugin command run
Requires plugins.use. Only the principal that queued the run may read it, and document-targeted runs additionally require current read access to that document; cross-principal, inaccessible, and unknown identifiers return 404.
Queue one declared plugin command
Requires plugins.use, same-origin proof for cookie requests, a bounded Idempotency-Key, and edit access for a document target. Plugin execution is asynchronous.
Update declared plugin settings optimistically
Requires plugins.manage, same-origin proof for cookie requests, and the exact installation/settings ETag returned by the plugin descriptor.