You are viewing the Apigee Management API reference documentation. For the main product docs, and to search all docs, go to

Create Company App

Resource Summary


Content Type

application/json, text/xml


Company App,



Create Company App

Creates an app for a company. Note that you must first create a profile for the company in your organization before you can register apps that are associated with the company. See Create Company.

Ensure optimal API product and app security

An organization-level property, features.keymanagement.disable.unbounded.permissions, strengthens the security of API products in verifying API calls. When the property is set to true, the following features are enforced.


App creation

When creating a developer or company app, the management API requires that the app be associated with an API product. (The management UI already enforces this.)


API product configuration

To create or update an API product, the API product must include at least one API proxy or a resource path in its definition.


Runtime security

API calls are rejected by an API product in the following situations:

  • An API product doesn't include at least one API proxy or resource path.
  • If the variable in the message doesn't include a resource path that the API product can evaluate.
  • If the app making the API call isn't associated with an API product.

Setting this organization property requires Sys Admin rights. Edge for Private Cloud sys admins can make add this property on their own with the Update organization properties API. If you are an Edge for Public Cloud user and the previously described restrictions are not in place, contact Apigee Support to set the organization property for you.

Resource URL /organizations/{org_name}/companies/{company_name}/apps

Header Parameters

Name Values Description

Specify the Content Type

Request Body

Name Description Default Required?
accessType Access type for the app (unused by Apigee)   No
attributes Name/value formatted attributes used to extend the default profile.

Note: With Apigee Edge for Public Cloud, the custom attribute limit is 18.

apiProducts Any API Products the app consumes   No
name Name of the app. See the naming restrictions. Characters you can use in the name are restricted to: A-Z0-9._-$ %   Yes
callbackUrl A URL used for OAuth-related redirects. The domain defined in the callbackURL must match the domain to which users are redirected after authentication..   No

org_name Mention the organization name true

company_name Mention the company name true

HTTP Basic

OAuth 2.0



Make a request and see the response.

Make a request and see the response.

Make a request and see the response.


Help or comments?

  • If something's not working: Ask the Apigee Community or see Apigee Support.
  • If something's wrong with the docs: Click the "Send Feedback" button.
    (Incorrect? Unclear? Broken link? Typo?)