Unpublish app

curl --request POST \
  --url https://app.base44.com/api/apps/{app_id}/undeploy \
  --header 'Authorization: Bearer <token>'

const options = {method: 'POST', headers: {Authorization: 'Bearer <token>'}};

fetch('https://app.base44.com/api/apps/{app_id}/undeploy', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://app.base44.com/api/apps/{app_id}/undeploy",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://app.base44.com/api/apps/{app_id}/undeploy"

	req, _ := http.NewRequest("POST", url, nil)

	req.Header.Add("Authorization", "Bearer <token>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

require 'uri'
require 'net/http'

url = URI("https://app.base44.com/api/apps/{app_id}/undeploy")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'

response = http.request(request)
puts response.read_body

{
  "id": "6820f3a4e7b91d003c45a1f2",
  "name": "My CRM",
  "is_unpublished": true,
  "last_deployed_at": "2026-08-02T14:30:00"
}

Deployment

Unpublish app

This API is in beta. Endpoints, fields, and behavior may still change, so avoid depending on it in production.

Takes a published app offline.

Visitors get an offline notice instead of the app. You can keep working on it in the editor, and its data, settings, and custom domains stay as they are. To put it back online, publish it again with Deploy an app.

Unpublishing works on main only, so naming a branch in branch_id returns a 409.

This endpoint accepts a personal API key belonging to a user with editor access to the app. A read-only key is refused, and workspace API keys are not accepted.

The response includes fields beyond the ones documented here. Don’t rely on undocumented response fields, as they can change at any time.

POST

api

apps

{app_id}

undeploy

Unpublish app

curl --request POST \
  --url https://app.base44.com/api/apps/{app_id}/undeploy \
  --header 'Authorization: Bearer <token>'

const options = {method: 'POST', headers: {Authorization: 'Bearer <token>'}};

fetch('https://app.base44.com/api/apps/{app_id}/undeploy', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://app.base44.com/api/apps/{app_id}/undeploy",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://app.base44.com/api/apps/{app_id}/undeploy"

	req, _ := http.NewRequest("POST", url, nil)

	req.Header.Add("Authorization", "Bearer <token>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

require 'uri'
require 'net/http'

url = URI("https://app.base44.com/api/apps/{app_id}/undeploy")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'

response = http.request(request)
puts response.read_body

{
  "id": "6820f3a4e7b91d003c45a1f2",
  "name": "My CRM",
  "is_unpublished": true,
  "last_deployed_at": "2026-08-02T14:30:00"
}

Authorizations

Authorization

string

header

required

Personal access token, sent as Authorization: Bearer <token>. Each operation lists the permission it needs: read_only or full_access. A full-access token can call every operation. A read-only token can call only the operations that list read_only; anything else returns 403 read_only_credential_route_not_allowed.

Path Parameters

app_id

string

required

ID of the app to unpublish.

Query Parameters

branch_id

string

ID of the branch to work on, as returned by List branches. Omit it to work on the app's main branch.

Response

The app, now offline.

string

required

ID of the app.

Example:

"6820f3a4e7b91d003c45a1f2"

name

string

required

Display name of the app.

Example:

"My CRM"

is_unpublished

boolean

required

Whether the app is offline. Always true here, because the unpublish succeeded.

Example:

true

last_deployed_at

string<date-time>

required

Time the app was last published, as a UTC timestamp in ISO 8601 format. Unpublishing doesn't change it.

Example:

"2026-08-02T14:30:00"

Base44 APIs

Apps API (Beta)

Workspace API (Beta)

Superagents API (Beta)

Monitoring API

Audit Logs API

Outbound webhooks

Unpublish app

Authorizations

Path Parameters

Query Parameters

Response