Changelog & versioning
The promise
Additive changes (new endpoints, new optional fields) land in place and are announced here. Breaking changes never land in place — they get a new version path (/api/v2) and the old one keeps working through a sunset window announced months ahead, with Sunset headers on deprecated routes.
2026-07-11
Scoped keys, pins and rate-limit headers
- Key scopes are now read / score / manage (existing write keys migrated to manage — nothing breaks).
- New optional competition pin on keys: a pinned key 403s outside its competition.
- Every response carries X-RateLimit-Limit / -Remaining / -Reset; the per-key budget is 60 rpm (300 rpm on Pro).
- Published spec now documents x-required-scope per operation; session-only endpoints left the public spec.
2026-07-10
Registration v2 references
- Public self-withdraw by reference number: POST /public/registrations/by-ref/{ref}/withdraw.