---
title: App review and publishing
description: Submit an OAuth app for review and understand each lifecycle state.
---

Draft and other non-public testable apps are limited to configured test users and members who can manage the owning developer organization. Submit the app when its identity, redirect URIs, model policy, scopes, cap policy, and user-facing details are ready.

<ApiEndpoint method="POST" path="/apps/{app_id}/submit-review" auth="dashboard_session" />

The lifecycle states are:

- `draft`: editable and available for permitted testing.
- `submitted_for_review`: waiting for review.
- `active`: available to users outside the test allowlist.
- `rejected`: returned with review feedback.
- `suspended`: blocked from authorization.
- `deleted`: no longer active.

You can cancel a pending submission through the app review cancellation endpoint, make changes, and submit again. Do not describe an app as verified or public until its returned status is `active`.