API access

A Marketplace app's API access defines which SitecoreAI API or group of APIs the app can interact with. The developer chooses API access when configuring a custom or public app, and can update API access any time as requirements change. Although extension points extension points and API access are not dependent on each other, you usually need to choose certain APIs for certain extension points. Your app can interact with the enabled APIs in all the enabled extension points.

Note

When using the Marketplace SDK built-in authorization built-in authorization, the SDK automatically authorizes your requests to all the Sitecore APIs your Marketplace app has access to, with no manual authorization required.

Certain Marketplace SDK functionalities require API access, while others don't. For more information, see the SDK Developer guides.

Here's an overview of the APIs you can give your app access to:

API access	Included APIs
SitecoreAI APIs - access to SitecoreAI data.	Authoring and Management GraphQL API - manage SitecoreAI content using GraphQL. Sites REST API - manage SitecoreAI sites, site collections, jobs, languages, and more. Pages REST API - manage SitecoreAI pages and page data. Agent API - connect AI clients or enterprise systems to perform business-level actions in Sitecore, such as building pages, adding components, or uploading assets. The Agent API powers the Marketer MCP. Search Configuration REST API - retrieve the configuration for your SitecoreAI search sources. The search configuration defines how content items are indexed and made searchable. For example, which fields you can search against, which fields you can use for filtering, and what data will be returned in search results. Important Feature availability for the Search Configuration REST API is part of a phased rollout. Your organization may not have access to this functionality yet. It will become available when your environment is included in the rollout.
AI skills APIs - LLM-powered capabilities grounded in SitecoreAI data.	Brand Review API - using AI-powered analysis, evaluate whether input content and assets comply with the guidelines defined in a brand kit. The API analyzes input content provided in the request, such as text, images, and metadata, by comparing it against brand kit sections to ensure alignment with tone of voice, visual identity, legal requirements, and accessibility standards.

API access

Included APIs

SitecoreAI APIs - access to SitecoreAI data.

Authoring and Management GraphQL API - manage SitecoreAI content using GraphQL.
Sites REST API - manage SitecoreAI sites, site collections, jobs, languages, and more.
Pages REST API - manage SitecoreAI pages and page data.
Agent API - connect AI clients or enterprise systems to perform business-level actions in Sitecore, such as building pages, adding components, or uploading assets. The Agent API powers the Marketer MCP.
Search Configuration REST API - retrieve the configuration for your SitecoreAI search sources. The search configuration defines how content items are indexed and made searchable. For example, which fields you can search against, which fields you can use for filtering, and what data will be returned in search results.

Important

Feature availability for the Search Configuration REST API is part of a phased rollout. Your organization may not have access to this functionality yet. It will become available when your environment is included in the rollout.

AI skills APIs - LLM-powered capabilities grounded in SitecoreAI data.

Brand Review API - using AI-powered analysis, evaluate whether input content and assets comply with the guidelines defined in a brand kit. The API analyzes input content provided in the request, such as text, images, and metadata, by comparing it against brand kit sections to ensure alignment with tone of voice, visual identity, legal requirements, and accessibility standards.

Do you have some feedback for us?

If you have suggestions for improving this article,