API Evangelist enhancements — Qlik apps

overlay: 1.0.0
info:
  title: API Evangelist enhancements — Qlik apps
  version: 1.0.0
extends: ./qliksense-apps.json
x-generated: '2026-08-29'
x-method: generated
x-source: Generated by the API Evangelist enrichment pipeline. Captures OUR additions to Qlik's published spec (https://qlik.dev/specs/rest/apps.json).
  The original document is never mutated.
actions:
- target: $.info
  update:
    description: Qlik Cloud apps API. Part of a 78-document OpenAPI surface published by Qlik at https://qlik.dev/specs/rest/.
      Cross-cutting behaviour (auth, pagination, filtering, error envelope, rate limits, reversibility) is documented
      once in conventions/qliksense-conventions.yml.
    contact:
      name: Qlik Developer Portal
      url: https://qlik.dev/
    termsOfService: https://qlik.dev/apis/api-policy/
    x-api-evangelist:
      provider: qliksense
      docs: https://qlik.dev/apis/rest/apps/
      markdown_twin: https://qlik.dev/apis/rest/apps.md
      conventions: conventions/qliksense-conventions.yml
      errors: errors/qliksense-problem-types.yml
      authentication: authentication/qliksense-authentication.yml
      scopes: scopes/qliksense-scopes.yml
      rate_limits: rate-limits/qliksense-rate-limits.yml
      lifecycle: lifecycle/qliksense-lifecycle.yml
- target: $
  update:
    x-api-evangelist-gaps:
      security_schemes_declared: false
      security_schemes_note: 'This document declares no components.securitySchemes and no security requirement,
        yet every operation requires an Authorization: Bearer credential (API key, OAuth 2.0 token, or JWT). A client
        generated from this document alone will send unauthenticated requests.'
      operations_total: 48
      operations_without_operation_id: 33
      operations_deprecated: 6
      rate_limit_tiers:
        '2': 24
        '1': 21
        special: 3
      error_format: json-api-style errors[] envelope; not RFC 9457 problem+json
      idempotency: not supported
- target: $
  update:
    x-api-evangelist-unnamed-operations:
    - method: POST
      path: /api/v1/apps
    - method: GET
      path: /api/v1/apps/{appId}
    - method: PUT
      path: /api/v1/apps/{appId}
    - method: DELETE
      path: /api/v1/apps/{appId}
    - method: POST
      path: /api/v1/apps/{appId}/copy
    - method: GET
      path: /api/v1/apps/{appId}/data/lineage
    - method: GET
      path: /api/v1/apps/{appId}/data/metadata
    - method: POST
      path: /api/v1/apps/{appId}/export
    - method: GET
      path: /api/v1/apps/{appId}/media/files/{path}
    - method: PUT
      path: /api/v1/apps/{appId}/media/files/{path}
    - method: DELETE
      path: /api/v1/apps/{appId}/media/files/{path}
    - method: GET
      path: /api/v1/apps/{appId}/media/list/{path}
    - method: GET
      path: /api/v1/apps/{appId}/media/thumbnail
    - method: POST
      path: /api/v1/apps/{appId}/objects/{objectId}/actions/change-owner
    - method: PUT
      path: /api/v1/apps/{appId}/owner
    - method: GET
      path: /api/v1/apps/{appId}/placement
    - method: PUT
      path: /api/v1/apps/{appId}/placement
    - method: DELETE
      path: /api/v1/apps/{appId}/placement
    - method: POST
      path: /api/v1/apps/{appId}/publish
    - method: PUT
      path: /api/v1/apps/{appId}/publish
    - method: GET
      path: /api/v1/apps/{appId}/reloads/logs
    - method: GET
      path: /api/v1/apps/{appId}/reloads/logs/{reloadId}
    - method: GET
      path: /api/v1/apps/{appId}/reloads/metadata/{reloadId}
    - method: GET
      path: /api/v1/apps/{appId}/scripts
    - method: POST
      path: /api/v1/apps/{appId}/scripts
    - method: GET
      path: /api/v1/apps/{appId}/scripts/{id}
    - method: PATCH
      path: /api/v1/apps/{appId}/scripts/{id}
    - method: DELETE
      path: /api/v1/apps/{appId}/scripts/{id}
    - method: PUT
      path: /api/v1/apps/{appId}/space
    - method: DELETE
      path: /api/v1/apps/{appId}/space
    - method: POST
      path: /api/v1/apps/import
    - method: GET
      path: /api/v1/apps/privileges
    - method: POST
      path: /api/v1/apps/validatescript
- target: $
  update:
    x-api-evangelist-deprecated-operations:
    - method: GET
      path: /api/v1/apps/{guid}/evaluations
    - method: POST
      path: /api/v1/apps/{guid}/evaluations
    - method: GET
      path: /api/v1/apps/evaluations/{baseid}/actions/compare/{comparisonid}
    - method: GET
      path: /api/v1/apps/evaluations/{baseid}/actions/compare/{comparisonid}/actions/download
    - method: GET
      path: /api/v1/apps/evaluations/{id}
    - method: GET
      path: /api/v1/apps/evaluations/{id}/actions/download