Adds a browser-specific add-on payload to an add-on management profile. Payloads cannot be added to a published profile.
https://{serverurl}/bsp/api/v1/bmp/manage_addons/{addon_id}/addon_payloads
Authorization: Zoho-oauthtoken d92d4xxxxxxxxxxxxx15f52
Add-On Management Profile ID from List Add-On Management Profiles response (manage_addon_id field)
JSON body with payload configuration. Uses flat format: addon_payloads contains payload_type and browser_type directly. Each browser type has different supported keys refer to the examples below
curl --request POST \
--url https://appdomains/bsp/api/v1/bmp/manage_addons/{addon_id}/addon_payloads \
--header 'Accept: application/json' \
--header 'Authorization: Zoho-oauthtoken d92d4xxxxxxxxxxxxx15f52' \
--header 'Content-Type: application/json' \
--data '{}'Chrome payload (browser_type=1)
{
"addon_payloads": {
"restrict_permissions": 1,
"payload_type": 64125,
"runtime_addons": [],
"restrict_domains": -1,
"pinned_addons": [
"30"
],
"permissions": [
"10"
],
"browser_type": 1,
"policies": {
"disable_user_extensions": "1"
},
"add_ons": [
{
"binary_id": "30"
}
],
"restrict_addons": "1",
"native_hosts": {
"native_permission": "-1",
"native_ids": []
},
"install_addons": [
"30"
]
}
}
curl --request POST \
--url https://appdomains/bsp/api/v1/bmp/manage_addons/{addon_id}/addon_payloads \
--header 'Accept: application/json' \
--header 'Authorization: Zoho-oauthtoken d92d4xxxxxxxxxxxxx15f52' \
--header 'Content-Type: application/json' \
--data '{}'Firefox payload (browser_type=2). No permissions, native_hosts, or pinned_addons.
{
"addon_payloads": {
"payload_type": 64127,
"restrict_domains": -1,
"browser_type": 2,
"policies": {
"disable_user_extensions": "1"
},
"add_ons": [
{
"binary_id": "13"
}
],
"restrict_addons": "1",
"install_addons": [
"13"
]
}
}
curl --request POST \
--url https://appdomains/bsp/api/v1/bmp/manage_addons/{addon_id}/addon_payloads \
--header 'Accept: application/json' \
--header 'Authorization: Zoho-oauthtoken d92d4xxxxxxxxxxxxx15f52' \
--header 'Content-Type: application/json' \
--data '{}'Edge payload (browser_type=5). Same shape as Chrome; uses Edge-specific binary_ids.
{
"addon_payloads": {
"restrict_permissions": 1,
"payload_type": 64907,
"runtime_addons": [],
"restrict_domains": -1,
"pinned_addons": [
"30"
],
"permissions": [
"10"
],
"browser_type": 5,
"policies": {
"disable_user_extensions": "1"
},
"add_ons": [
{
"binary_id": "30"
}
],
"restrict_addons": "1",
"native_hosts": {
"native_permission": "-1",
"native_ids": []
},
"install_addons": [
"30"
]
}
}
curl --request POST \
--url https://appdomains/bsp/api/v1/bmp/manage_addons/{addon_id}/addon_payloads \
--header 'Accept: application/json' \
--header 'Authorization: Zoho-oauthtoken d92d4xxxxxxxxxxxxx15f52' \
--header 'Content-Type: application/json' \
--data '{}'Ulaa payload (browser_type=31). Same shape as Chrome; shares Chrome's extension store.
{
"addon_payloads": {
"restrict_permissions": 1,
"payload_type": 64459,
"runtime_addons": [],
"restrict_domains": -1,
"pinned_addons": [
"30"
],
"permissions": [
"10"
],
"browser_type": 31,
"policies": {
"disable_user_extensions": "1"
},
"add_ons": [
{
"binary_id": "30"
}
],
"restrict_addons": "1",
"native_hosts": {
"native_permission": "-1",
"native_ids": []
}
}
}
curl --request POST \
--url https://appdomains/bsp/api/v1/bmp/manage_addons/{addon_id}/addon_payloads \
--header 'Accept: application/json' \
--header 'Authorization: Zoho-oauthtoken d92d4xxxxxxxxxxxxx15f52' \
--header 'Content-Type: application/json' \
--data '{}'Other Chromium payload (browser_type=1024). Same shape as Chrome plus applicable_browsers array.
{
"addon_payloads": {
"restrict_permissions": 1,
"payload_type": 64409,
"runtime_addons": [],
"restrict_domains": -1,
"pinned_addons": [
"30"
],
"permissions": [
"10"
],
"browser_type": 1024,
"policies": {
"disable_user_extensions": "1"
},
"add_ons": [
{
"binary_id": "30"
}
],
"restrict_addons": "1",
"native_hosts": {
"native_permission": "-1",
"native_ids": []
}
}
}
curl --request POST \
--url https://appdomains/bsp/api/v1/bmp/manage_addons/{addon_id}/addon_payloads \
--header 'Accept: application/json' \
--header 'Authorization: Zoho-oauthtoken d92d4xxxxxxxxxxxxx15f52' \
--header 'Content-Type: application/json' \
--data '{}'IE payload (browser_type=3). Uses IE-specific policies; no permissions, native_hosts, or pinned_addons.
{
"addon_payloads": {
"restrict_permissions": -1,
"payload_type": 64126,
"restrict_domains": -1,
"permissions": [],
"browser_type": 3,
"policies": {
"turn_off_blocking_outdated_addon": "1",
"restrict_activex": "0",
"remove_run_this_time": "0",
"enable_extensions": "1"
},
"add_ons": [],
"restrict_addons": "0"
}
}
Newly added payload configurations. Schema branches by target browser
Unauthorized error code: credentials missing, expired, or invalid
Authentication failure reason
Error code indicating insufficient permissions
Message indicating insufficient privileges to access this resource
Message indicating the requested resource was not found
Message indicating a published profile cannot be modified
Rate limit error code returned when the API call reached threshold
Rate limit exceeded message with retry guidance
Message describing the internal server error
Chrome payload added
{
"addon_payloads": [
{
"restrict_permissions": "1",
"payload_type": "64125",
"restrict_domains": "-1",
"binaries_details": [
{
"browser_type": "1",
"name": "Google Translate",
"binary_id": "30",
"id": "aapbdbdomjkkjkaonfhkkikfgjllcleb"
}
],
"payload_id": "1170",
"permissions": [
{
"name": "Context menu",
"id": "10"
}
],
"pinned_binaries_details": [
{
"browser_type": "1",
"name": "Google Translate",
"binary_id": "30",
"id": "aapbdbdomjkkjkaonfhkkikfgjllcleb"
}
],
"browser_type": "1",
"policies": {
"disable_user_extensions": "1",
"allow_flash": "-1"
},
"restrict_addons": "1",
"native_hosts": {
"native_permission": "-1",
"native_details": []
},
"config_label": "MANAGE_CHROME_ADDONS"
}
]
}
Firefox payload added
{
"addon_payloads": [
{
"payload_type": "64127",
"restrict_domains": "-1",
"binaries_details": [
{
"browser_type": "2",
"name": "System theme — auto",
"binary_id": "13",
"id": "default-theme@mozilla.org"
}
],
"payload_id": "1171",
"pinned_binaries_details": [],
"browser_type": "2",
"policies": {
"disable_user_extensions": "1"
},
"restrict_addons": "1",
"config_label": "MANAGE_FIREFOX_ADDONS"
}
]
}
Edge payload added
{
"addon_payloads": [
{
"restrict_permissions": "1",
"payload_type": "64907",
"restrict_domains": "-1",
"binaries_details": [],
"payload_id": "1172",
"permissions": [
{
"name": "Context menu",
"id": "10"
}
],
"pinned_binaries_details": [],
"browser_type": "5",
"policies": {
"disable_user_extensions": "1",
"allow_flash": "-1"
},
"restrict_addons": "1",
"native_hosts": {
"native_permission": "-1",
"native_details": []
},
"config_label": "CHROMIUM_EDGE_ADDONS_PAYLOAD"
}
]
}
Ulaa payload added
{
"addon_payloads": [
{
"restrict_permissions": "1",
"payload_type": "64459",
"restrict_domains": "-1",
"binaries_details": [
{
"browser_type": "1",
"name": "Google Translate",
"binary_id": "30",
"id": "aapbdbdomjkkjkaonfhkkikfgjllcleb"
}
],
"payload_id": "1173",
"permissions": [
{
"name": "Context menu",
"id": "10"
}
],
"pinned_binaries_details": [
{
"browser_type": "1",
"name": "Google Translate",
"binary_id": "30",
"id": "aapbdbdomjkkjkaonfhkkikfgjllcleb"
}
],
"browser_type": "31",
"policies": {
"disable_user_extensions": "1",
"allow_flash": "-1"
},
"restrict_addons": "1",
"native_hosts": {
"native_permission": "-1",
"native_details": []
},
"config_label": "MANAGE_ULAA_ADDONS"
}
]
}
Chromium payload added
{
"addon_payloads": [
{
"restrict_permissions": "1",
"payload_type": "64409",
"restrict_domains": "-1",
"payload_id": "1174",
"browser_type": "1024",
"policies": {
"disable_user_extensions": "1",
"allow_flash": "-1"
},
"applicable_browsers": [],
"binaries_details": [
{
"browser_type": "1",
"name": "Google Translate",
"binary_id": "30",
"id": "aapbdbdomjkkjkaonfhkkikfgjllcleb"
}
],
"permissions": [
{
"name": "Context menu",
"id": "10"
}
],
"pinned_binaries_details": [
{
"browser_type": "1",
"name": "Google Translate",
"binary_id": "30",
"id": "aapbdbdomjkkjkaonfhkkikfgjllcleb"
}
],
"restrict_addons": "1",
"native_hosts": {
"native_permission": "-1",
"native_details": []
},
"config_label": "CHROMIUM_ADDONS_PAYLOAD"
}
]
}
IE payload added
{
"addon_payloads": [
{
"payload_type": "64126",
"restrict_domains": "-1",
"binaries_details": [],
"payload_id": "1175",
"pinned_binaries_details": [],
"browser_type": "3",
"policies": {
"turn_off_blocking_outdated_addon": "1",
"enable_extension": "1",
"restrict_activex": "0",
"remove_run_this_time": "0"
},
"restrict_addons": "0",
"config_label": "MANAGE_IE_ADDONS"
}
]
}
Unauthorized
{
"errorCode": "UNAUTHORIZED",
"errorMsg": "You are not authorized to perform this action"
}
Insufficient permissions
{
"errorCode": "FORBIDDEN",
"errorMsg": "User does not have permission to perform this operation"
}
Profile not found
{
"errormsg": "Profile not found"
}
Cannot modify published profile
{
"errormsg": "Cannot modify published policy. Clone the policy and retry"
}
Rate limit exceeded
{
"errorCode": "RATE_LIMIT_EXCEEDED",
"errorMsg": "Too many requests. Please try again after 5 minutes"
}
Server error
{
"errormsg": "Internal Server error, Please try again in a moment."
}
![]()
Duration: 1 minute | Threshold: 60 | Lock period: 5 minutes
Duration - Time window for the threshold.
Threshold - Number of API calls allowed within the specified duration.
Lock Period - Wait time before consecutive API requests.
© 2026, Zoho Corporation Pvt. Ltd. All Rights Reserved.