Custom JavaScript and CSS in Sparkforge Marketplace Apps

By Sparkforge Support Team ·Last reviewed May 3, 2026

Sparkforge Marketplace apps with agency distribution can include custom JavaScript and CSS, subject to a 10-day review. Scripts must be readable, self-contained, and avoid sensitive data, database access, or remote loads.

Custom JavaScript and CSS can be added to Marketplace apps to extend Sparkforge functionality and styling inside agency-distributed apps. All custom scripts pass through review before deployment to keep the platform secure and stable.

Distribution requirement

The app must be distributed as Agency or Agency & Sub-account. Sub-account-only apps cannot ship custom JavaScript.

Review process

Submission review SLA is up to 10 days. Once approved, scripts are embedded into the agency app.

Script guidelines

No sensitive data access. Scripts must not read or modify sensitive contact, billing, or auth data.
No obfuscation. Submit clear, readable code so reviewers can verify intent.
No direct database access. Use documented APIs, not raw queries.
Self-contained logic. Remote file references and on-the-fly script loads are not allowed.
Proper script tags. Wrap JavaScript in <script> tags so it integrates with the DOM correctly.
No console logs. Strip console.log statements before submission.

Test before submission

Drop your script into the Custom JavaScript & Custom CSS section under Settings > Company in agency view. If you don't have agency access, spin up a sandbox account to simulate the environment and validate behavior.

JS Wrapper Function

Use the platform-provided wrapper to scope custom JS execution and avoid colliding with platform code. Wrapping keeps your variables and event listeners isolated from other Marketplace apps loaded in the same context.

Frequently Asked Questions

How long does the review take?

The SLA is up to 10 business days. Submitting clean, readable code with clear intent helps move review along faster.

Can I load scripts from a CDN or external URL?

No. All logic must be self-contained. Remote file references and dynamic script loads aren't permitted for security reasons.

What happens if my script gets rejected?

Reviewers send notes about the issues. Fix them and resubmit. Common rejections involve obfuscated code, console logs, or attempts to access restricted data.

Can I add CSS without JavaScript?

Yes. Custom CSS can be submitted alone. The same review process and guidelines apply.