Initial public release.
- Five resource families: users, bundles, domains, orders, domain swaps, plus the
GET /meaccount check. - One signed webhook channel covering every async event - orders, domains, imports, and swaps - with
*.action_requiredevents for every public resource that can need partner attention. - Webhook catalog: 18 public event types, signed via
Peeker-Signature: v1=<hex hmac-sha256>, up to 5 retries over 24 hours. - Single error envelope with twelve stable codes. See reading errors.
- Cursor-paginated lists with signed page tokens and a
links.next/links.firstpattern. - Server-side request-fingerprint idempotency for
POST /ordersover a 24-hour window - re-sending the same body returns the same order. - Flat 600 requests / minute per API key rate limit with separate buckets for live and sandbox keys.
- Public provider list at v1:
smartlead; Google Workspace and Microsoft 365 are backend-managed during fulfillment.