The three shapes an App Builder application takes. One project can combine them, for example a UI extension whose front end calls its own Runtime actions.
Last checked 2026-09-30
CX Enterprise atlas / Developer & Extensibility | Developer & extensibility
ProductGenerally available
Developer & ExtensibilityDeveloper & extensibility
Also known as App Builder, Adobe App Builder, Project Firefly
Adobe's framework for building custom cloud-native applications that extend CX Enterprise products and run on Adobe infrastructure. Apps are headless serverless actions on Adobe I/O Runtime, single-page apps served from a bundled CDN into the Experience Cloud shell, or UI extensions that plug into extension points in AEM, Commerce, Workfront and GenStudio. Storage, custom events, IMS authentication, a CLI, SDKs and CI/CD tooling are included. It is licensed in packs and was called Project Firefly until its rename in 2021.
The three shapes an App Builder application takes. One project can combine them, for example a UI extension whose front end calls its own Runtime actions.
Last checked 2026-09-30
Also known as App Builder microservices, Headless App Builder applications
Sets of serverless actions or sequences on I/O Runtime with no user interface, called by other systems: AEM Assets processing profiles, Campaign or Journey Optimizer activities, Commerce webhooks and events, third-party CRM workflows or scheduled triggers.
Last checked 2026-09-30
Also known as Headful App Builder applications, App Builder SPAs
Browser applications built on the JAMstack pattern: static front end on the App Builder CDN, back-end logic in Runtime web actions, and Adobe APIs called with the signed-in user's IMS token. They open inside experience.adobe.com next to Adobe's own applications and use the shell's client-side API (@adobe/exc-app) for the top bar, page and user information.
Integrates with: Unified Shell integration API
Last checked 2026-09-30
Also known as UI Extensibility, App Builder UI extensions
JavaScript apps that render inside an Adobe product's own interface at a defined extension point (menus, panels, grid columns, modal dialogs, custom fields) and talk to the host application through the UIX host-guest bridge. Administrators enable or disable them per environment; in AEM this is done in Extension Manager.
Integrates with: UI extensibility and Extension Manager
Last checked 2026-09-30
Also known as I/O Runtime, Adobe IO Runtime
Adobe's serverless function platform, included with App Builder and built on Apache OpenWhisk. It runs Node.js actions on demand in response to HTTP requests, Adobe I/O Events or triggers, deploys code to every region and executes it in the one nearest the caller. Resources are metered in gigabyte-seconds.
Last checked 2026-09-30
Also known as OpenWhisk entities
The building blocks of the Runtime programming model, organized in namespaces.
Last checked 2026-09-30
Stateless functions that receive JSON parameters and return a result. Each invocation creates an activation record with its result, timing and logs.
Last checked 2026-09-30
Actions exposed at a public HTTPS URL on adobeioruntime.net. They run as blocking calls with a 60-second limit and can be protected with a basic-auth secret or with App Builder's IMS validation.
Last checked 2026-09-30
Chains of up to 50 actions in which each action's output is the next one's input. App Builder uses a sequence to put its authentication validator in front of secured actions.
Last checked 2026-09-30
Also known as OpenWhisk Composer
Flows built with Apache OpenWhisk Composer that combine actions with if, while and repeat control structures and behave as a single action.
Last checked 2026-09-30
Bundles of related actions and feeds that can be shared and bound with default parameters. The pre-installed /whisk.system/alarms package fires triggers once or on a schedule, which is how cron-style jobs run on Runtime.
Last checked 2026-09-30
Triggers name a class of events; rules connect a trigger to an action so the action runs each time the trigger fires, with the event as input.
Last checked 2026-09-30
Event streams delivered to one trigger, managed by a feed action that creates, pauses, resumes or deletes the stream using webhook, polling or connection patterns.
Last checked 2026-09-30
The container for an organization's Runtime entities. Each App Builder project workspace gets its own namespace, which also names its CDN subdomain.
Integrates with: Runtime namespaces in projects
Last checked 2026-09-30
Also known as Runtime REST APIs
Maps web actions to REST endpoints with a base path, path and HTTP method, created with aio rt api or in the app manifest. Custom APIs not called for 90 days are removed. Responses can be cached at the gateway with Cache-Control headers.
Last checked 2026-09-30
Actions run on the three most recent Node.js versions, with express, openwhisk, redis and other modules pre-installed. Node.js 24 was added in November 2025 and Node.js 26 in May 2026; actions on the default version can use pre-warmed containers.
Last checked 2026-09-30
Action code is deployed to four AWS regions (US East, EU in Ireland, Tokyo and Sydney) and each call is routed to the fastest available one, with failover. Customers cannot pin execution to a region.
Last checked 2026-09-30
Per-action and per-namespace limits: 60 seconds for blocking calls and up to 3 hours for non-blocking ones, 256 MB default memory, 1 MB payloads and results, 22 MB code size, 6,000 actions per minute and 100 concurrent activations per namespace by default.
Last checked 2026-09-30
Non-blocking action calls for long-running work, started from a web action and polled for results, so a job can run up to 180 minutes instead of the 60-second synchronous limit.
Last checked 2026-09-30
Controls against cold starts: per-action container concurrency from 1 to 500 invocations (default 200), containers kept warm for two minutes, and a pool of pre-warmed containers for common memory sizes.
Last checked 2026-09-30
The aio runtime ip-list get command (June 2026) returns the current outbound IP ranges of I/O Runtime, by region, for corporate allowlists; the org accepts allowlist terms and a contact for change notices on first use.
Last checked 2026-09-30
REST API on api.adobe.io for managing the Runtime namespace of an organization and integration programmatically.
Last checked 2026-09-30
Runtime namespaces can also be managed with the Apache OpenWhisk wsk command-line tool, alongside the aio runtime commands.
Last checked 2026-09-30
Three managed stores that Runtime actions use without bringing their own infrastructure. Quotas are shared across the organization and grow with the number of packs; workspace limits apply on top.
Last checked 2026-09-30
Also known as Adobe I/O State, aio-lib-state
Low-latency key-value store for small values (up to 1 MB per value) with time-to-live up to 365 days and glob listing. Data resides in the amer, emea, apac or aus region; Australia was added in November 2025. Each pack adds 10 GB of storage and 1 TB of monthly transfer.
Last checked 2026-09-30
Also known as Adobe I/O Files, aio-lib-files
Blob storage for files up to 200 GB with streaming, copy and pre-signed URLs for sharing, used for large payloads that exceed Runtime's 1 MB response limit. Each pack includes up to 1 TB.
Last checked 2026-09-30
Also known as aio-lib-db, App Builder Database
Document database with one isolated database per workspace in a chosen region, accessed through aio-lib-db, a near drop-in for the MongoDB Node.js driver, and the aio app db CLI commands. It supports collections, indexes and aggregations; each pack includes 40 GB. Databases are provisioned from the app manifest at deploy time or manually.
Last checked 2026-09-30
The Developer Console API service a workspace adds so its actions can authenticate to Database Storage with an IMS token. It needs no licence beyond App Builder.
Last checked 2026-09-30
Also known as App Builder Content Delivery Network
Edge network that serves an app's static front end from a per-namespace subdomain of adobeio-static.net, with compression, edge caching, ETags, configurable response headers (CORS, CSP) and cache invalidation. A new CDN generation went live in September 2025; since February 2026 caching and invalidation can also be managed on an App Builder CDN page in Developer Console. Each pack includes 10 TB of egress per year.
Integrates with: Developer Console
Last checked 2026-09-30
Apps can publish their own event types through Adobe I/O Events and register Runtime actions or webhooks as consumers of Adobe product events. A pack includes 24 million produced or consumed events per year, each payload up to 64 KB.
Built on: I/O Events
Integrates with: Custom I/O Events
Last checked 2026-09-30
The open-source CLI, SDKs, templates and project tooling for building, testing and deploying apps.
Last checked 2026-09-30
Also known as aio CLI, aio-cli, Adobe Developer CLI
The oclif-based aio command-line tool, released under Apache 2.0, for signing in to IMS, managing Developer Console projects and running the App Builder application lifecycle. Its functions come from plugins; version 11 requires IMS authentication for every deploy.
Last checked 2026-09-30
Lifecycle commands for an App Builder project: init, add or delete actions, extensions, web assets and CI, dev and run for local work, build, deploy and undeploy, logs, pack and install, plus state and db sub-commands for storage.
Last checked 2026-09-30
Commands for Developer Console organizations, projects and workspaces. Since April 2026 they create projects and workspaces and subscribe workspaces to API services non-interactively, so scripts and AI agents can bootstrap an App Builder project end to end.
Integrates with: Developer Console
Last checked 2026-09-30
Also known as aio rt
Direct management of Runtime entities (actions, packages, triggers, rules, APIs, activations and logs) and namespace utilities such as the egress IP list.
Last checked 2026-09-30
Optional, anonymized usage data about commands, flags, run time and environment, including whether a person or an AI agent ran the command. It can be turned off with aio telemetry off.
Last checked 2026-09-30
Also known as aio-sdk, App Builder SDK
JavaScript libraries bundled as @adobe/aio-sdk for use in actions and apps: clients for Adobe product APIs, IMS token handling, the storage services and a core technical framework.
Last checked 2026-09-30
npm wrappers for the Adobe Analytics 2.0, Target, Campaign Standard, Audience Manager Customer Data and Experience Platform Real-Time Customer Profile APIs.
Integrates with: Analytics, Target, Real-Time Customer Data Platform
Last checked 2026-09-30
Also known as aio-sdk-core
Lower-level libraries for configuration, Winston-based logging, error handling and networking with retry and back-off, plus the AuthClient that generates and caches IMS access tokens inside actions.
Last checked 2026-09-30
Shared Runtime API that exchanges an app's credentials for temporary tokens to deploy web assets to the CDN and to use the Files and State storage.
Last checked 2026-09-30
Also known as App Builder template registry, App Builder generators
Code generators, listed in a public template registry and installed with aio app init or aio templates, that scaffold a project for a given extension point or use case and set up the matching Developer Console services.
Last checked 2026-09-30
Also known as @adobe/generator-app-excshell
Scaffolds a single-page app for the Experience Cloud shell with a React Spectrum or plain HTML front end and a sample action.
Last checked 2026-09-30
Templates for the AEM Content Fragments console and editor, Universal Editor, Assets view (details, browse or both), Experience Hub and Workfront extension points.
Last checked 2026-09-30
Also known as @adobe/generator-app-asset-compute
Scaffolds a custom AEM Assets processing worker for the Asset Compute extension point.
Last checked 2026-09-30
Add event registrations with a consuming action, or an action that publishes custom events.
Last checked 2026-09-30
Also known as @adobe/generator-app-api-mesh
Scaffolds an App Builder project with an API Mesh configuration.
Integrates with: API Mesh for Adobe Developer App Builder
Last checked 2026-09-30
Also known as @adobe/generator-app-remote-mcp-server-generic
Scaffolds a Model Context Protocol server whose tools, resources and prompts are App Builder actions.
Last checked 2026-09-30
Helper templates that add a generic action or one pre-wired to the Analytics, Target or Campaign Standard API.
Last checked 2026-09-30
Also known as React Spectrum
Adobe's React implementation of the Spectrum design system, the default UI toolkit in App Builder templates so apps and extensions look like Adobe's own products. Other front-end frameworks can be used.
Integrates with: React Spectrum (S2) MCP
Last checked 2026-09-30
Also known as app.config.yaml, ext.config.yaml
The app.config.yaml and ext.config.yaml manifests declare actions, sequences, APIs, triggers, extension points, database provisioning, CDN headers and distribution settings; .env holds secrets and .aio the workspace binding. The CLI validates the config by default since January 2026.
Last checked 2026-09-30
Also known as aio app dev
aio app dev runs actions and the front end on localhost with hot reload and VS Code debugging; aio app run deploys actions to Runtime and serves only the UI locally.
Last checked 2026-09-30
GitHub Actions that install the CLI (aio-cli-setup-action) and test, build and deploy apps (aio-apps-action) with OAuth Server-to-Server credentials, plus guidance for custom pipelines. Since April 2026 the deploy action exposes the S2S credentials to actions as environment variables.
Last checked 2026-09-30
Step-by-step tutorials and sample apps (event-driven apps, cron jobs, custom Asset Compute workers, customer dashboards, CI/CD) and code snippets for State, Files, Events and Analytics.
Last checked 2026-09-30
Contracts in which an Adobe product defines where and how App Builder apps extend it. An app declares the extension points it implements, and deployment registers it in Adobe's extension registry.
Last checked 2026-09-30
Also known as dx/excshell/1
Registers a single-page app to open in experience.adobe.com and appear in the App Builder Catalog.
Integrates with: Unified Shell integration API
Last checked 2026-09-30
Also known as dx/asset-compute/worker/1
Implements a custom AEM Assets processing worker that processing profiles call to create renditions or metadata.
Integrates with: Asset Compute Service
Last checked 2026-09-30
Also known as aem/cf-console-admin/1
Adds action bar buttons, header menu items, grid columns, navigation and modal dialogs to the AEM Content Fragments console.
Integrates with: AEM Content Fragments
Last checked 2026-09-30
Also known as aem/cf-editor/1
Adds header menu items, modals, custom form field rendering, properties-rail panels, default field properties and access to the fragment data in the Content Fragment Editor.
Integrates with: Content Fragment Editor
Last checked 2026-09-30
Also known as universal-editor/ui/1
Adds header menu items, modals, properties-rail panels and custom data types to the Universal Editor, and lets extensions read editor data, react to editor events and trigger editor actions.
Integrates with: Universal Editor
Last checked 2026-09-30
Also known as aem/assets/details/1, aem/assets/browse/1
Adds header menu items, browse-view actions and details-view panels to the AEM Assets view.
Integrates with: Assets view UI extensibility
Last checked 2026-09-30
Also known as aem/launchpad/1
Adds custom dashboard widgets to AEM Experience Hub.
Integrates with: Experience Hub
Last checked 2026-09-30
Also known as commerce/backend-ui/1
Used with the Commerce Admin UI SDK to add menus, pages, grid columns, mass actions and other elements to the Commerce Admin.
Integrates with: Admin UI SDK
Last checked 2026-09-30
Also known as workfront/ui/1
Adds custom applications to the Workfront main menu and left navigation panels through layout templates.
Integrates with: Workfront App Builder extensions
Last checked 2026-09-30
Custom interface extensions for Workfront Fusion built on App Builder and shown in isolated frames.
Integrates with: Fusion UI Extensibility
Last checked 2026-09-30
Right-panel validation, prompt dialogs, content selection, template import, fragment swap and translation extensions, built with the GenStudio UI Extensibility SDK.
Integrates with: GenStudio UI Extensibility SDK, App Builder add-ons
Last checked 2026-09-30
Adobe products and features that run on App Builder or call App Builder apps, beyond the UI extension points.
Last checked 2026-09-30
Commerce apps that react to Commerce events and webhooks, add payment, shipping and tax methods and are installed through Commerce App Management, all running on App Builder. It is the only customization model in Commerce as a Cloud Service.
Integrates with: Out-of-process extensibility, Commerce App Management, I/O Events for Commerce
Last checked 2026-09-30
Reference App Builder projects for back-office integrations (customers, orders, products, stock) and for checkout payment, shipping and tax, plus the Commerce Optimizer Salesforce Commerce connector.
Integrates with: Starter kits, Salesforce Commerce Connector
Last checked 2026-09-30
Also known as aio-lib-telemetry
OpenTelemetry metrics, logs and traces from App Builder apps via aio-lib-telemetry, with trace context passed from Commerce in webhook headers and event payloads.
Integrates with: Commerce as a Cloud Service observability
Last checked 2026-09-30
Onboarding path for Technology Partner Program members (Silver tier or higher) with App Builder and Commerce sandboxes for building and publishing Commerce apps.
Last checked 2026-09-30
Journey Optimizer custom actions call any REST endpoint with a JSON payload; Adobe lists Adobe Developer among the targets, so a journey step can invoke a Runtime web action.
Integrates with: Custom actions
Last checked 2026-09-30
How finished apps reach users, either only inside the developer's own organization or to any Adobe organization through Adobe Exchange.
Last checked 2026-09-30
A developer submits the production workspace for approval in Developer Console; an administrator of the same organization reviews it in Exchange, and approved apps become available to that organization only.
Integrates with: App review and approval, App Builder app approval
Last checked 2026-09-30
Also known as Custom apps catalog
The page in experience.adobe.com (@adobeio/custom-apps) where users open their organization's approved App Builder single-page apps. Only Experience Cloud Shell extensions appear there.
Integrates with: CX Enterprise interface
Last checked 2026-09-30
Apps submitted through Adobe Developer Distribution and reviewed by Adobe are listed on Adobe Exchange, where any organization can acquire, configure and install them.
Integrates with: Developer Distribution, App Builder app listings
Last checked 2026-09-30
Also known as configSchema
Settings a publicly distributed app asks for at install time (text, checkbox, dropdown, secret), declared in configSchema and passed to actions and the web app as environment variables.
Last checked 2026-09-30
Declares which Adobe products and versions an installing organization must have.
Last checked 2026-09-30
Also known as aio app pack
aio app pack builds a validated, versioned package for Developer Distribution, with a lockfile by default since October 2025; Adobe's provisioner service installs it into the acquiring organization's workspace with aio app install logic, and a delete service removes it.
Last checked 2026-09-30
Authentication, authorization and isolation built into the SDK, the CLI and the deployment pipeline.
Last checked 2026-09-30
SPAs pass the signed-in user's IMS token from the Experience Cloud shell to their actions; headless apps obtain technical-account tokens. Deploying and undeploying also require an IMS login or OAuth Server-to-Server credentials since CLI version 11.
Built on: Identity Management System
Last checked 2026-09-30
Also known as require-adobe-auth
Actions marked require-adobe-auth are deployed behind a shared validator action in a sequence. It checks that the caller's bearer token is valid in IMS and that Exchange authorizes it for the organization and the APIs the app uses.
Integrates with: Exchange
Last checked 2026-09-30
Also known as include-ims-credentials
The include-ims-credentials annotation passes a workspace's OAuth Server-to-Server credential to an action, where the SDK generates and caches access tokens for Adobe APIs and the storage services.
Integrates with: OAuth Server-to-Server authentication, OAuth Server-to-Server
Last checked 2026-09-30
Each workspace has its own Runtime namespace, CDN subdomain and storage containers, and actions run in isolated containers.
Last checked 2026-09-30
Guidance and CLI commands for replacing action and package parameters that hold secrets without downtime.
Last checked 2026-09-30
Ways to read, search and export the logs of Runtime activations.
Last checked 2026-09-30
By default I/O Runtime keeps logs of failed and asynchronous activations for seven days, up to 10 MB per activation, readable with aio app logs or aio rt activation commands.
Last checked 2026-09-30
Browser view (February 2026) of the last three days of logs for all activations in a workspace, with search by action or text, stream and time filters, and grouping by activation.
Integrates with: Developer Console
Last checked 2026-09-30
Sends all application logs of a workspace to a customer-owned log service, set with aio app config set log-forwarding and deployed with the app.
Last checked 2026-09-30
Forwards App Builder logs to a Splunk Cloud HTTP Event Collector.
Last checked 2026-09-30
Forwards App Builder logs to a self-managed Splunk Enterprise instance.
Last checked 2026-09-30
Forwards App Builder logs to a Microsoft Azure Log Analytics workspace.
Last checked 2026-09-30
Forwards App Builder logs to the New Relic log API.
Last checked 2026-09-30
App Builder is sold only to enterprise customers and partners, per pack per year, standalone, as an add-on or bundled with other products. Entitlements of all packs are pooled.
Last checked 2026-09-30
The licence unit (product description of 9 March 2026): per year 6 million Runtime gigabyte-seconds, 24 million custom events, 10 TB CDN egress and 1 TB file storage, plus 10 GB key-value storage with 1 TB monthly transfer and 40 GB database storage. Usage above the pooled total requires more packs.
Last checked 2026-09-30
One pack comes with AEM Sites as a Cloud Service, one or more with Adobe Commerce on cloud, and one with GenStudio for Performance Marketing licences starting or renewing from 7 April 2025. Packs can also be bought for Journey Optimizer, Customer Journey Analytics, Real-Time CDP or any other Experience Cloud product.
Integrates with: Experience Manager Sites, Commerce, Developer App Builder pack
Last checked 2026-09-30
A sign-up form on developer.adobe.com for trial access to App Builder and I/O Runtime. The FAQ still says trials are not available.
Last checked 2026-09-30
Use of App Builder as hosting for AI integrations, and the tooling that lets AI coding agents build App Builder apps.
Last checked 2026-09-30
Runs remote Model Context Protocol servers as Runtime web actions, built with the MCP TypeScript SDK or the remote MCP server template, so assistants such as Claude or Cursor reach Adobe APIs through OAuth Server-to-Server without keys on user machines.
Last checked 2026-09-30
Runs agents, documentation assistants, auto-tagging and prediction pipelines as serverless actions, triggered by I/O Events and holding LLM keys as encrypted action parameters.
Last checked 2026-09-30
Open-source skill files in the adobe/skills repository that teach coding agents (Cursor, Claude Code, GitHub Copilot, Windsurf) App Builder conventions: picking a template, writing actions and React Spectrum UIs, testing, CI/CD and Workfront extensions. With them a single prompt can scaffold, build and deploy an app. The individual skills are listed under the AI Registry.
Integrates with: App Builder skills plugin
Last checked 2026-09-30
Also known as AGENTS.md for App Builder
Guidance for AGENTS.md, Copilot instruction files and prompts that give AI assistants App Builder's extension-point folders, commands, authentication rules and current API versions.
Last checked 2026-09-30
The Commerce Developer Agent and the Commerce App Builder MCP server and skills generate App Builder Commerce apps from requirements or from existing PHP extensions.
Integrates with: Commerce development MCPs and skills, Commerce Developer Agent
Last checked 2026-09-30
Older ways of authenticating, running and configuring apps that Adobe has retired or keeps only for compatibility.
Last checked 2026-09-30
Also known as aio-lib-core-ims-jwt
JWT technical-account tokens for headless apps, generated with the IMS JWT library. Adobe deprecated JWT credentials in January 2025 in favour of OAuth Server-to-Server.
Replaced by OAuth Server-to-Server in actions
Last checked 2026-09-30
Deploying apps with only the Runtime namespace key, discontinued in aio CLI 11 in favour of IMS authentication.
Replaced by IMS authentication for App Builder
Last checked 2026-09-30
Also known as aio app run --local
Running actions on a locally downloaded OpenWhisk instance; deprecated and unreliable on Apple Silicon.
Replaced by Local development
Last checked 2026-09-30
Also known as manifest.yml
The pre-8.x CLI project layout with manifest.yml and no app.config.yaml. Still supported for deployment, but such apps cannot use extension points and run only as standalone apps.
Replaced by App configuration files
Last checked 2026-09-30