PPlatformAppStores

GitHub Marketplace

Developer Tools

GitHub, Inc. · Developer tools & code hosting

Best for: Developer tools and CI/CD integrations that plug into GitHub repos and workflows.

Overview

GitHub Marketplace distributes GitHub Apps (webhook + REST/GraphQL-driven integrations) and GitHub Actions (workflow steps published to public repos). GitHub Apps authenticate via installation tokens scoped per-repository, while Actions run inside GitHub's hosted or self-hosted runners.

How to build & ship

  1. 1Build a GitHub App (recommended) or OAuth App with the permissions and webhooks you need
  2. 2Integrate GitHub REST/GraphQL APIs and, if relevant, ship a GitHub Actions workflow/action
  3. 3Configure Marketplace billing webhooks and pricing plans (free and/or paid)
  4. 4For paid plans, get your organization approved as a verified publisher (2FA + domain verification)
  5. 5Create a draft listing with description, logo, support and privacy links
  6. 6Submit for GitHub review and meet install thresholds for paid listings

Key APIs & SDKs

GitHub Apps (installation tokens, permissions, webhooks)
GitHub REST API and GraphQL API
GitHub Marketplace API (purchases, plans, billing webhooks)
GitHub Actions (workflows, actions in the Marketplace)
OAuth apps / OAuth device flow
Checks and Webhooks APIs

Integration types

Connector
Workflow action
Bot

Authentication & security

  • Primary auth: OAuth 2.0
  • Also supports: PAT, JWT
  • Security review: Required
  • Marketplace listing review covers required permissions, security, and support policy.
  • Listings are manually reviewed by GitHub against listing requirements; paid apps additionally require a verified-publisher org plus minimum adoption (roughly 100 App installs or 200 OAuth users), and review can take weeks. Free unlisted Actions publish without that review.
  • REST and GraphQL rate limits scale with installation and app authentication type.
Auth docs Store policies

Monetization

Free
Paid app
Usage-based
Onboarding
$0
Commission
25% on paid Marketplace apps (waived first $1M in some programs)
Merchant of Record
GitHub acts as MoR for Marketplace billing

Pros & cons for builders

Pros

  • Direct exposure to millions of developers where they already work
  • GitHub Apps model gives granular, scoped, revocable permissions
  • Marketplace handles billing and license management for paid plans
  • Actions can be published quickly with minimal friction

Cons

  • Paid listings gated behind publisher verification and install/user minimums
  • App review can be slow (often multiple weeks)
  • Revenue share and billing tied to GitHub's terms

Frequently asked questions

How do I get my app approved on GitHub Marketplace?

Listings are manually reviewed by GitHub against listing requirements; paid apps additionally require a verified-publisher org plus minimum adoption (roughly 100 App installs or 200 OAuth users), and review can take weeks. Free unlisted Actions publish without that review.

What authentication does GitHub Marketplace use?

GitHub Marketplace apps primarily authenticate with OAuth 2.0, also supporting PAT, JWT.

How is GitHub Marketplace monetized?

GitHub Marketplace supports Free, Paid app, Usage-based. Typical commission: 25% on paid Marketplace apps (waived first $1M in some programs). Onboarding fee: $0.

Is a security review required to list on GitHub Marketplace?

Yes, GitHub Marketplace requires a formal security or listing review before apps go live. Marketplace listing review covers required permissions, security, and support policy.