Developer Portal

Turn your expertise
into a Wukong AICRM plugin.

Select the form, declare permissions, and submit for review to put it on the shelves. Signature packaging and instance-sustained tokens ensure security for every installer, so you only need to focus on the capabilities themselves—and revenue sharing.

85%
Developer revenue share
320+
Added plugin
3
Trust form optional
Apply to become a developer Understand the publishing process

Choose trust form firstChoose a type

The form determines the plug-in's running environment, available permissions, and audit path. The closer you are to the core data, the stricter the audit - which is why the installer is willing to trust you.

declarative

Declarative · Code-free installation

Use manifests to describe fields, automation rules, or theme styles without running your code. Install immediately after confirmation, with the lowest trust risk.

  • Custom fields, templates, themes
  • Declarative automation workflow
  • Fastest review, no runtime
connected

Connected · Requires item-by-item authorization

Your service runs out-of-process and communicates with the instance through a signed API. The access token is self-held by the installer instance, and permissions are granted item by item and can be revoked at any time.

  • External AI, integration, automation
  • Fine-grained scope permissions
  • The token instance is self-sustained and does not leave the domain.
sandboxed

Sandbox style · iframe strict review

Inject custom UI and widgets into the workbench in an isolated iframe sandbox. The most stringent review, but the richest interface experience.

  • Kanban pendants, injection instruments
  • Sandbox isolation, controlled communication
  • The richest UI capabilities

Release processPublish in 4 steps

1

Select form

Select declarative / connected / sandboxed according to capabilities to determine the running environment and audit path.

2

Write manifest

Declare meta-information, required permission scopes and capability entries, and the editor will verify them in real time.

3

Submit for review

Submit after signing and packaging, and the operation will conduct security and compliance review according to the form.

4

Listing and sharing

After being put on the shelves immediately, the installation and subscription revenue will be divided on a monthly basis.

manifest.json

Permissions are declared, and the installer can see them clearly at a glance

The manifest is a contract between you and the installer: each scope declared will be presented one by one in the installation pop-up window. It will only take effect after the installer confirms it, and can be revoked at any time. No claims, no access.

least privilege: Only declare the scope you really need.
Optional permissions: Marked as optional and can be turned off separately by the installer.
Signature verification: Signed after packaging, and verified for integrity during installation.
manifest.json
// Intelligent lead scoring · connected form { "id": "lead-scoring", "type": "connected", "category": "sales", "scopes": [ "leads:read", "deals:read", "leads:write", { "scope": "tasks:write", "optional": true } ], "entry": "https://api.you.dev/wukong", "signed": true }

Benefits and supportRevenue & support

85%
Developers shareDevelopers get 85% of the revenue from subscription and installation of paid plug-ins, which is settled monthly.
0 yuan
Settlement and listingRegistration as a developer, submission and listing are all free, and there is no annual platform fee.
14 days
Trial mechanismPaid plug-ins can be configured with free trials, lowering the decision-making threshold for installers.

FAQFAQ

Which format should I choose?
Start with capabilities: if you want to only change fields, templates or styles, choose declarative; if you need to call external services or AI, choose connected; if you want to inject a custom interface into the workbench, choose sandboxed. The closer the form is to the core data, the more stringent the review will be.
Will the installer's data pass through my server?
Depends on the shape and the scope you declare. In the connected mode, the access token is self-held by the installer instance and communicates through signed APIs only within the authorization scope; many AI plug-ins support reasoning within the instance, and the data does not leave the domain. The scope declared in the manifest is the boundary of data reachability.
How long does the review take?
declarative is usually the fastest, connected and sandboxed are more detailed due to runtime and permissions involved. Using the editor's real-time verification to eliminate obvious problems before submission can significantly shorten the back and forth.
Can you test it on your own instance first?
Can. The open source self-hosting version supports local loading of unlisted plug-in packages for development and joint debugging. After confirmation, sign and submit for review.

Ready to release your first plugin?

Apply to become a developer and get manifest specifications, signing tools and joint debugging guidelines. Deliver your capabilities to thousands of Wukong instances.

Apply to become a developer View open source repository — —