Changelog

Contract changes are listed by date. Subscribe to the RSS feed to follow them.

2026-09-05 — Method handling, sitemap, and examples

• Requests with a known path but an unsupported method now answer 405 with an Allow header and the standard error envelope (method_not_allowed); OPTIONS on a known path answers 204. Unknown paths still answer 404.
• docs_url on errors links to the errorClass section of the errors page, which now lists every code the class can carry.
• Every response carries X-Request-Id; API responses default to Cache-Control: no-store.
• GET /v1/usage?resource=ledger and the dashboard aliases PUT/DELETE /v1/account?resource=webhook are documented in OpenAPI. Unknown resource or action values answer 400.
• A Bearer-authenticated client is never refused as a crawler, whatever its User-Agent.
• GET /v1/jobs/{id}/archive answers 409 (archive_failed) instead of a 200 body when a build has exhausted its attempts.
• Runnable curl, Node, Python, Go, and n8n examples are published at /docs/examples.
• /.well-known/api-catalog is an RFC 9727 Linkset served as application/linkset+json.

2026-09-04 — v1 surface

• Passwordless accounts, hashed Bearer keys with rotation and grace-period revocation, and dashboard sessions.
• GET /v1/transcript in seven formats with explicit requested, delivered, fallback, and translation fields; raw=1 attachments; 202 polling for long cold fetches.
• GET /v1/video facts, GET /v1/videos channel and playlist listing with cached flags and cold counts, and POST /v1/videos/resolve for pasted lists.
• Bulk jobs for up to 500 videos with exact reservation, settlement, pause, resume, retry, and cancel; manifests, per-file downloads, SSE progress, and queued ZIP archives with 80 MiB parts and seven-day expiry.
• Signed webhooks with bounded retries, per-job endpoint overrides, and delivery state on the job.
• Credits, free and paid limits, one-time Stripe credit blocks, self-service refunds, and automatic outage credits.
• Public GET /v1/status with rolling p50/p95 latency; keyed MCP server; Agent Skill discovery and an experimental server card.

Smoke-test the current surface

The public status response is the safest post-upgrade smoke test. Maintained runnable variants are in the examples directory.

curl https://api.scripthaul.com/v1/status

import json, urllib.request
with urllib.request.urlopen("https://api.scripthaul.com/v1/status") as response:
    status = json.load(response)
print(status["status"], status["canary"])

const response = await fetch("https://api.scripthaul.com/v1/status");
const status = await response.json();
console.log(status.status, status.canary);

response, err := http.Get("https://api.scripthaul.com/v1/status")
if err != nil { log.Fatal(err) }
defer response.Body.Close()
io.Copy(os.Stdout, response.Body)