Hi everyone,
Until now, API (v2) allowed for the retrieval of quite useful information about any app on the marketplace without requiring authentication, example:
https://marketplace.atlassian.com/rest/2/addons/com.itlab.jira.plugins.extender/versions/latest?application=jira&hosting=datacenter
Unfortunately, the new version (v3) does not offer this capability.
Interestingly, when analyzing network traffic from Jira DC, it turns out that Jira DC still uses this API (v2) and relies on it to check for new versions within the UPM.
Is there an equivalent endpoint that doesn’t require authentication, or are there additional parameters that can be used to get the API to return results (similar to how Jira DC does it)?
Cheers
Adam
Hi @adam.labus,
There isn’t one. Every app-software and app-listing endpoint in the v3 spec is marked mpac_authed, and an unauthenticated GET comes back 401.
Don’t lean on v2 either. The changelog (CHANGE-3257) says v2 was switched off on June 30, 2026, yet your exact latest-version URL still returns 200 to a plain curl today while the same request with a Chrome user agent gets 410 API_DEPRECATED. Not something to build on.
If the check runs inside customer DC instances, don’t ship a token with the app. I’d put a small service of yours in front that calls v3 with a service-account API token, caches the latest version, and let the app hit that. Is that the setup, or is it a one-off script?