API referenceAdmin APISyntic CodePluginsVersionsAdd a version

Add a plugin version

⚠️
Preview — this feature is being built; the design below is the spec.
POST https://app.syntic.ai/v1/organizations/plugins/{plugin_id}/versions

Upload a new version of a plugin. It becomes latest_version once its scan passes, unless the plugin’s latest is pinned.

For how this fits into a full workflow, see Syntic Code plugins.

Headers

HeaderRequiredValue
AuthorizationYesBearer <admin key>: an Admin API key (sk_admin_...). Inference keys are refused with 403 admin_key_required. See Admin API keys.
syntic-betaYes, while in previewadmin-2026-11-01. Without it the call fails with 400 beta_required. See Versioning.
Content-TypeYesapplication/json
Idempotency-KeyNoUp to 255 characters. Retrying with the same key within 24 hours returns the first result instead of acting twice. See Idempotency.

Path parameters

ParameterTypeDescription
plugin_idstringThe plugin id, starting with plg_.

Body parameters

ParameterTypeRequiredNotes
file_idstringYesThe new bundle.

Response

201 Created, Content-Type: application/json

{
  "plugin_id": "plg_01JCN1P3R5T7V9X1Z3B5",
  "version": "1.4.0",
  "type": "plugin_version",
  "sha256": "a81c…44e0",
  "bytes": 48211,
  "scan": {
    "status": "pending",
    "findings": []
  },
  "manifest": {
    "commands": [
      "review"
    ],
    "hooks": [
      "pre_edit"
    ],
    "mcp_servers": []
  },
  "created_at": "2026-11-02T10:00:00Z"
}
FieldTypeDescription
versionstringFrom the manifest; must be higher than every earlier version.
scanobjectstatus is pending, passed or failed. Failed versions cannot be served.
manifestobjectThe commands, hooks and MCP servers the version declares.

Examples

curl -sS "https://app.syntic.ai/v1/organizations/plugins/plg_01JCN1P3R5T7V9X1Z3B5/versions" \
  -H "Authorization: Bearer $SYNTIC_ADMIN_KEY" \
  -H "syntic-beta: admin-2026-11-01" \
  -H "Idempotency-Key: 8d6f0c1e-4b2a-4a57-9f0e-2f1d3c4b5a69" \
  -H "Content-Type: application/json" \
  -d '{
      "file_id": "file_01JC3D5F7H9K1M3P5R7T"
    }'

Errors

Errors use the error envelope and carry a request_id. Codes specific to this operation:

StatustypecodeWhen
400invalid_request_errorbeta_requiredThe syntic-beta header is missing.
409conflict_errorversion_not_increasingThe manifest version is not higher than the current one.
400invalid_request_errorname_mismatchThe bundle’s manifest names a different plugin.
404not_found_errorplugin_not_foundNo plugin with this id.
401authentication_errorinvalid_api_keyThe admin key is missing, unknown, revoked or expired.
403permission_erroradmin_key_requiredAn inference key was used.
429rate_limit_errorrate_limitedToo many requests; wait for Retry-After. See Rate-limit headers.
Was this page helpful?