Skip to main content
Developer Portal

API Changelog

A complete history of changes to the ActRight API. Subscribe to get notified of new releases.

v1.5.0

  • AddedPetition embeds API: generate iframe embed codes via `POST /v1/petitions/:id/embed`.
  • AddedDecision-maker endpoints: link petitions to decision makers and track delivery status.
  • ChangedWebhook payloads now include `triggered_by` field with the actor who caused the event.
  • FixedResolved intermittent 504 timeouts on `/v1/petitions` when filtering by multiple categories.

v1.4.2

  • FixedSignature count on petition detail was stale for up to 60s after new signatures. Reduced cache TTL to 5s.
  • FixedOAuth token refresh endpoint returned 500 when the original token had already expired. Now returns proper 401 with `token_expired` error code.

v1.4.0

  • AddedOrganization API keys: create keys scoped to an organization instead of a single user.
  • AddedBulk signature export via `GET /v1/petitions/:id/signatures/export` with CSV and JSON formats.
  • ChangedRate limits increased from 50 to 100 requests/second for authenticated requests.
  • Deprecated`GET /v1/users/:id/petitions` is deprecated. Use `GET /v1/petitions?creator=:id` instead. Will be removed in v2.0.

v1.3.0

  • AddedWebSocket real-time updates: subscribe to signature events on any petition via `wss://ws.actright.com`.
  • AddedComment threading: `parent_id` field on `POST /v1/comments` to create nested replies.
  • ChangedSearch API now uses full-text search with relevance scoring. The `sort` parameter accepts `relevance` as a value.

v1.2.1

  • FixedPagination cursor was not URL-safe in some edge cases. Cursors are now base64url-encoded.
  • FixedCreating a petition with more than 10 tags returned a generic 400 error. Now returns a specific `tag_limit_exceeded` error.
  • ChangedError response `detail` field renamed to `message` for consistency. The `detail` field is still returned but deprecated.

v1.2.0

  • AddedMedia upload API: attach images and documents to petitions via `POST /v1/media/upload`.
  • AddedWebhook signature verification: all webhook payloads are now signed with HMAC-SHA256. See the webhooks guide for verification examples.
  • ChangedPetition `status` field now includes `under_review` as a possible value for petitions pending moderation.
  • DeprecatedThe `X-Api-Key` header for authentication is deprecated. Use `Authorization: Bearer <key>` instead. Support ends in v2.0.