Re-authenticates the user and uploads an extension, overriding any existing conflict. Requires user password for verification.
post /bsp/api/v1/bmp/extensions/override
https://{serverurl}/bsp/api/v1/bmp/extensions/override
DesktopCentralCloud.BrowserManager.CREATECopied!
Authorization: Zoho-oauthtoken d92d4xxxxxxxxxxxxx15f52
Request body for re-authenticating and uploading an extension with conflict override
User password for re-authentication verification
Webstore application identifier
Extension source type
Values 1=Chrome, 2=Firefox, 3=IE, 5=Edge, 31=Ulaa, 1024=Chromium
URL to Firefox XPI package
File identifier for inhouse extension packages
Platform type filter
List of permission names to allow
curl --request POST \
--url https://appdomain/bsp/api/v1/bmp/extensions/override \
--header 'Accept: application/json' \
--header 'Authorization: Zoho-oauthtoken d92d4xxxxxxxxxxxxx15f52' \
--header 'Content-Type: application/json' \
--data '{}'Override Chrome extension
{
"userPassword": "********",
"platform_type": -1,
"browser_type": 1,
"file_id": 0,
"type": "web_store",
"app_id": "abcdefghijklmnop",
"allowed_permissions": [
"tabs",
"storage"
],
"xpi_url": ""
}
Extension profile response after override
Unique identifier of the extension profile
Display name of the extension
Description of the extension
Platform type
Latest version number
Latest published version number
Extension payload configurations
Individual extension payload configuration
Payload type identifier. 64120 for extensions
Unique identifier of the extension payload
Extension metadata
Numeric install source code. 1=webstore, 2=sideloaded, 3=inhouse
Browser type. 1=Chrome, 2=Firefox, 5=Edge
Extension icon/logo filename
Extension description
Extension source type: web_store or inhouse
Short identifier name
Extension version string
Extension name from the manifest
Extension homepage URL
Path to the CRX/XPI extension package
Permission names
Extension update check URL
Webstore or internal extension ID
Logo asset identifier
Allowed permission names
Binary record identifier
True when the extension was updated by overriding
Bad request error when re-authentication fails
Error message indicating invalid username or password
Unauthorized error code: credentials missing, expired, or invalid
Authentication failure reason
Error code indicating insufficient permissions
Message indicating insufficient privileges to access this resource
Rate limit error code returned when the API call reached threshold
Rate limit exceeded message with retry guidance
Internal server error during extension operations
Error message describing the server failure
Error code for internal server errors
Extension overridden
{
"extension_id": 100,
"platform_type": 1,
"latest_version": 2,
"extension_name": "My Extension",
"latest_published_version": 1,
"update": true,
"extension_description": "Extension description",
"extension_payloads": [
{
"payload_type": "64120",
"extension_payload_id": 101,
"extension_details": {
"installsource": "1",
"browser_type": "1",
"img_file": "icon16.png",
"description": "Extension description",
"extn_type": "web_store",
"shortname": "My Extension",
"version": "2.0.0",
"extensionname": "My Extension",
"homepageurl": "https://example.com",
"crx_path": "..\\webapps\\DesktopCentral\\bsp\\client-data\\1\\ManagedExtensions\\3",
"permissions": [
"Tabs",
"Storage"
],
"updateurl": "https://clients2.google.com/service/update2/crx",
"id": "abcdefghijklmnop",
"extension_logo_id": "601",
"allowed_permissions": [
"tabs",
"storage"
]
},
"binary_id": "601"
}
]
}
Invalid credentials
{
"error_description": "desktopcentral.common.login.invalid_username_password"
}
Unauthorized
{
"errorCode": "UNAUTHORIZED",
"errorMsg": "You are not authorized to perform this action"
}
Forbidden
{
"errorCode": "FORBIDDEN",
"errorMsg": "You do not have permission to access this resource"
}
Rate limit exceeded
{
"errorCode": "RATE_LIMIT_EXCEEDED",
"errorMsg": "You have exceeded the maximum number of API calls. Please try again later."
}
Server error
{
"error_description": "Internal Server error, Please try again in a moment.",
"error_code": "COM0004"
}
![]()
Duration: 1 minute | Threshold: 60 | Lock period: 5 minutes
Duration - Time window for the threshold.
Threshold - Number of API calls allowed within the specified duration.
Lock Period - Wait time before consecutive API requests.
© 2026, Zoho Corporation Pvt. Ltd. All Rights Reserved.