Install a community plugin from an approved download URL
POST/plugins/api/plugins/install
Downloads the zip, verifies its SHA-256 against approved-plugins.json, validates the archive, and extracts it into src/plugins/community/{id}. A new install is NOT enabled automatically — admins must review and click Enable. If the plugin is already installed and the approved version is newer, it is upgraded in place and keeps its settings and enabled state.
Request
Responses
- 200
- 400
- 401
- 403
- 409
- 500
Plugin installed (not yet enabled) or upgraded in place
Validation failure (unknown URL, checksum mismatch, unsafe zip)
Unauthorized
Forbidden — Admin role required
Plugin already installed at this version or newer
Install failed
Can't find what you need? Ask in Discord, or open an issue on the ChurchCRM repository.