PPlatformAppStores

Mattermost Marketplace

Workspace

Mattermost, Inc. · Productivity & collaboration suites

Best for: Developers and teams extending Mattermost with installable collaboration, ChatOps, DevSecOps, incident-response, productivity, or service integrations.

Overview

Mattermost Marketplace is Mattermost’s official web directory for discovering, installing, and updating extensions to the Mattermost platform. It covers AI and LLM, CI/CD, cloud compute and storage, source-code control, incident response, productivity, service desk, security, and video calling. Developers can publish plugins, webhook configurations, playbook templates, importers, command-line interfaces, scripts, and other utility tools. Mattermost supports webhooks, slash commands, plugins, the REST API, WebSocket events, embedding, and interactive messages. Submissions are reviewed by the Mattermost team and must include a testable contribution, installation and usage documentation, a public issue tracker, and an image asset.

How to build & ship

  1. 1Select a supported form factor such as a plugin, webhook configuration, playbook template, utility tool, REST API integration, bot, or other extension.
  2. 2Build and test against a Mattermost server using the official integration documentation, REST API, WebSockets, webhooks, slash commands, or plugin SDKs.
  3. 3Prepare installation, configuration, and usage documentation together with screenshots or a suitable marketplace image.
  4. 4Publish a public issue or bug tracker and provide a link where the Mattermost team can test the contribution.
  5. 5Submit through the official Marketplace submission form, then address review or security issues before publication.

Key APIs & SDKs

Mattermost REST API v4
Mattermost JavaScript/TypeScript driver
Mattermost Golang driver
Server and web-app plugin SDKs
Webhooks, slash commands, and WebSocket events

Integration types

Embedded app
Connector
Workflow action
Bot
Extension

Authentication & security

  • Primary auth: Mattermost session token or personal access token sent as Authorization: Bearer <token>
  • Also supports: MMAUTHTOKEN cookie
  • Security review: Required
  • Mattermost reviews every contribution against a checklist requiring a testable link, installation, configuration and usage documentation, a public issue or bug tracker, and a linked image. Unresolved medium-or-greater security issues or usage-blocking bugs can lead to removal after acknowledgment and a 14-day remediation period, while critical issues may be taken down immediately.
  • Contributors submit through the official form. Mattermost reviews each contribution before listing it, checking for a testable link, user documentation, a public issue or bug tracker, and a linked image. Security issues are handled through Mattermost’s responsible-disclosure or Security team channels, and unresolved qualifying issues can result in takedown.
  • The official API reference documents X-Ratelimit-Limit, X-Ratelimit-Remaining, and X-Ratelimit-Reset headers and shows a 10 requests-per-second example; actual limits are deployment or configuration dependent unless confirmed for the target server.
Auth docs Store policies

Monetization

Onboarding
Not publicly specified
Commission
Not publicly specified
Merchant of Record
Not publicly specified

Pros & cons for builders

Pros

  • Official Mattermost distribution channel covering plugins, integrations, playbooks, webhooks, and utility tools.
  • Multiple integration paths with official REST API, JavaScript/TypeScript, and Go tooling.
  • Review checklist and takedown policy provide explicit baseline quality and security governance.

Cons

  • Marketplace-wide pricing, fees, commissions, and merchant-of-record terms are not publicly specified.
  • Plugin development requires Go and has additional development overhead compared with lighter integration paths.
  • Publication requires documentation, public issue tracking, test access, and image assets.

Frequently asked questions

How do I get my app approved on Mattermost Marketplace?

Contributors submit through the official form. Mattermost reviews each contribution before listing it, checking for a testable link, user documentation, a public issue or bug tracker, and a linked image. Security issues are handled through Mattermost’s responsible-disclosure or Security team channels, and unresolved qualifying issues can result in takedown.

What authentication does Mattermost Marketplace use?

Mattermost Marketplace apps primarily authenticate with Mattermost session token or personal access token sent as Authorization: Bearer <token>, also supporting MMAUTHTOKEN cookie.

How is Mattermost Marketplace monetized?

Mattermost Marketplace supports not publicly specified monetization. Typical commission: Not publicly specified. Onboarding fee: Not publicly specified.

Is a security review required to list on Mattermost Marketplace?

Yes, Mattermost Marketplace requires a formal security or listing review before apps go live. Mattermost reviews every contribution against a checklist requiring a testable link, installation, configuration and usage documentation, a public issue or bug tracker, and a linked image. Unresolved medium-or-greater security issues or usage-blocking bugs can lead to removal after acknowledgment and a 14-day remediation period, while critical issues may be taken down immediately.