Platforms where publishing or API access uses a personal access token — common in developer tools and package registries.
4 marketplaces in this directory match this tag.
Personal access tokens (PATs) are the default auth model for developer-tool marketplaces in this directory — Visual Studio Marketplace, JetBrains Marketplace, Docker Hub, npm Registry — where the “user” installing your integration is a developer authenticating their own CLI, not a business granting workspace-wide OAuth access.
A PAT is simpler to implement than OAuth (no consent-screen flow, no redirect URIs) but is tied to one account rather than scoped per-installation, so it fits publishing and single-developer workflows better than multi-tenant SaaS integrations. Treat PATs as secrets exactly like API keys: scope them narrowly and never commit them to source.
Docker, Inc.
Docker's container image registry and distribution hub, with curated Official Images and a Verified Publisher program over free public pulls.
JetBrains s.r.o.
JetBrains' official plugin marketplace for its IDE family, with built-in paid sales and a 15% commission as merchant of record.
Microsoft Corporation
Microsoft's official marketplace for VS Code extensions, published via the vsce CLI with no built-in paid model.
GitHub, Inc.
The default package registry for the JavaScript/Node.js ecosystem, with token/OIDC-based publishing, free public packages, and no commission.