Skip to content
TYPO3API Hub

Managing apps

You configure external applications as apps in the backend module Administration > Integrations > API Hub. Only administrators can open it.

  • One list: all apps, with a filter by name and app type
  • Access: select the scopes and the backend user of each app
  • Control: disable an app, or generate a new secret
  • Documentation: the API of your installation in Swagger UI
Create an appSecurity and governance
Illustration of blocks passing through a gate with switches.
Example of four apps with their app type and scopes. In the module API Hub, administrators can edit, disable or delete each app.

TYPO3 stores apps as records of the table sys_app on the root page.

App types#

An app authenticates in one of two ways. The type decides who the app acts for and how long its credentials are valid.

Static token OAuth
Acts on behalf of A fixed backend user The backend user who approves the access
Access The scopes selected in the app record that are available to the backend user Approved on a consent screen, for the scopes selected in the app record that are available to the backend user
Authentication Static bearer token OAuth 2.0 authorization code flow
Validity Does not expire Access tokens are valid for one hour. Then the app gets a new access token with its refresh token
Meant for Scripts and integrations between servers Applications with several backend users, or applications that must not keep a credential that does not expire

Creating apps

Create an app with a static token or an OAuth app, step by step.