Get an App
Get an App by its app_id.
Authorizations
Mixpeek API key, sent as Authorization: Bearer mxp_sk_.... Create one in Studio under Settings → API Keys, or with an admin key via POST /v1/organizations/users/{user_email}/api-keys. A missing header returns 403; an invalid or revoked key returns 401.
Path Parameters
App ID (e.g. app_abc123def456)
Response
Full App configuration
Response model for an App.
Deploy-based apps use versions, environments, build_config,
and auth_config. Legacy page-builder fields (template,
sections, custom_html, hero, theme, seo, stats,
featured_gallery, tabs, password_protected) are included
for backward compatibility but deprecated.
Canonical published URL (https://{slug}.mxp.co)
Page-level metadata (REQUIRED when creating a page).
This object is separate from the optional seo field.
meta controls the visible page chrome (browser tab title, logo, favicon),
while seo controls search-engine tags (og:title, og:description, etc.).
End-user authentication configuration for an App.
Supported modes:
public: No authentication required (default)clerk: Managed auth via Clerk Organizations — handles Google, GitHub, email/password signup/login. Each canvas app maps to a Clerk Organization. Users are synced to canvas_users via Clerk webhooks.password: Simple password gate — visitors must enter a password to access the app. The password is hashed (bcrypt) before storage.api_key,jwt,sso_oidc,sso_saml: Advanced modes retained for future use.
JSX build configuration for an App.
Phase 1: schema only. Phase 3: used by the build pipeline Celery task.
Hero section configuration for a page.
Theme configuration for public retriever UI.
Defines colors, fonts, and visual styling for the public search interface.
SEO configuration for public retriever discoverability.
Auto-generated during publishing with sensible defaults inferred from the retriever's display_config. All fields can be overridden manually.
This configuration controls how the public retriever appears in:
- Search engine results (Google, Bing, etc.)
- Social media shares (Twitter, Facebook, LinkedIn)
- Link previews in messaging apps
Configuration for the featured gallery section.
Non-fatal advisories about the request that was just applied. Currently used to spell out the effect of a takedown write, e.g. 'is_active: false' makes the canvas runtime refuse the app's URL with a 404 within its serving-cache window, and the note says how to verify that. Additive and safe to ignore.
Opt-in monitoring configuration for a Canvas app.
All monitoring is off by default except error_boundary_enabled, which
is a client-side UX safety net (shows fallback UI instead of blank page)
and sends no data externally.
When sentry_enabled or posthog_enabled are turned on, monitoring
data is sent to Mixpeek-internal Sentry/PostHog — never to the
customer's own observability stack. PII is stripped via beforeSend /
mask_all_text, and session replay is always off.
Deploy version history with timestamps and environment info

