Reference

Changelog

Every addition and every deprecation of the API, newest first. Deprecation headers link here.

September 2026 — public API v1

API keys with scopes, folder restrictions, IP allowlists, expiry and rolling, managed in Settings → API.
Webhooks: 11 event types, signed per Standard Webhooks, retried for 24 hours, with a delivery log, redelivery and recovery. Payload version 2026-09-01.
POST /v1/codes/bulk creates up to 500 codes in one request.
Burst limit next to the per-minute limit; X-RateLimit-Reset is the number of seconds until the window resets.
Idempotency-Key on every POST but the upload.
The public OpenAPI document lists only the routes a key can call, each with its scope.

None.