Add a new private access application. An application is defined by a domain (FQDN) and port combination.
https://{server-hostname}:8383/sse/api/applications
SSE.CREATECopied!
Authorization: d92d4xxxxxxxxxxxxx15f52
Display name for the application. Must match regex [a-zA-Z0-9 .-\t]+. Required
Application type identifier. Required
Nested object containing the FQDN, port, and protocol of the protected application. Required
Fully qualified domain name of the protected application. Required
Port number the application is accessible on (0-65535). Required
Transport protocol: TCP or UDP. Defaults to TCP if not specified
curl --request POST \
--url https://appdomain/sse/api/applications \
--header 'Accept: application/json' \
--header 'Authorization: d92d4xxxxxxxxxxxxx15f52' \
--header 'Content-Type: application/json' \
--data '{"FQDN":{"protocol":"TCP","fqdn":"portal.internal.company.com","port":443},"name":"Internal Portal","type":1}'Create a new TCP application with FQDN, port, and protocol
{
"FQDN": {
"protocol": "TCP",
"fqdn": "portal.internal.company.com",
"port": 443
},
"name": "Internal Portal",
"type": 1
}
Create a new UDP application
{
"FQDN": {
"protocol": "UDP",
"fqdn": "dns.internal.company.com",
"port": 53
},
"name": "DNS Server",
"type": 1
}
The unique identifier (auto-generated primary key) of the newly created application
Application-specific error code. Possible codes: API_APPLICATION_004 (maximum 1000 application limit reached), API_APPLICATION_005 (application with same name already exists), API_APPLICATION_006 (application with same FQDN, port and protocol already exists), API_APPLICATION_001 (service-layer duplicate detection), API_APPLICATION_002 (unknown error while adding application)
Detailed error message describing the specific application creation failure
Unauthorized error code returned when authentication credentials are missing, expired, or invalid (authentication=required)
Authentication failure reason
Forbidden error code returned when the authenticated user does not have the required uem-roles (e.g., DataEncryption_Admin or DataEncryptionRecoveryKey_Admin)
Message indicating insufficient privileges to access this resource
Application created successfully — returns the auto-generated application ID
{
"applicationID": 2001
}
The tenant has reached the maximum limit of 1000 applications
{
"errorCode": "API_APPLICATION_004",
"errorMsg": "You are allowed to add only up to 1000 Applications"
}
An application with the same name already exists in this tenant
{
"errorCode": "API_APPLICATION_005",
"errorMsg": "An Application with the same name already exists."
}
An application with the same FQDN, port, and protocol combination already exists
{
"errorCode": "API_APPLICATION_006",
"errorMsg": "An Application with the same FQDN, port and protocol already exists."
}
An unexpected error occurred during application creation
{
"errorCode": "API_APPLICATION_002",
"errorMsg": "Unknown error while adding application."
}
Authentication credentials are missing or invalid
{
"errorMessage": "You are not authorized to perform this action",
"errorCode": "UNAUTHORIZED"
}
User does not have the required SSE_Write role
{
"errorMessage": "User does not have permission to perform this operation",
"errorCode": "FORBIDDEN"
}
© 2026, Zoho Corporation Pvt. Ltd. All Rights Reserved.
© 2026, Zoho Corporation Pvt. Ltd. All Rights Reserved.