Changelog

2026-09-04

• Five write endpoints. POST /campaigns/{id}/prospects (enrol existing prospects, per-person results), POST /campaigns/{id}/pause, POST /campaigns/{id}/resume, PATCH /replies/{id} (correct a classification), DELETE /suppressions/{id}. Same functions as the buttons in the app. See Campaigns, Replies, Suppressions.

• X-RateLimit-Limit, X-RateLimit-Remaining, X-RateLimit-Reset on every authenticated response, REST and MCP.

• Idempotency-Key on POST /prospects, /suppressions and /hooks: stored for 24 hours, replayed with Idempotent-Replayed: true, 422 on reuse with a different request. See Rate limits and errors.

• MCP server: 23 tools, including enrol_prospects, pause_campaign, resume_campaign, classify_reply, delete_suppression.

• 13 read endpoints. GET /prospects, /prospects/{id}, /campaigns, /campaigns/{id}, /campaigns/{id}/prospects, /companies, /companies/{id}, /replies, /offers, /offers/{id}, /suppressions, /hooks, /mailboxes. Cursor pagination with limit and next_cursor; see Pagination.

• MCP server at https://app.seegnals.com/api/mcp (Streamable HTTP, bearer token) mirroring the REST API.

• OpenAPI 3.1 specification at /docs/openapi.yaml, and every example in curl, Node and Python.

• Two new smoke checks after every deploy: GET /campaigns and POST /api/mcp without a token must answer 401.

• Documentation site published: quickstart, authentication, limits and errors, every endpoint, webhooks, signatures, Zapier, scope.

• Corrected the public examples: the prospect field is company_name (not company); clicked is a delivered webhook event; PATCH sends the full desired state.

2026-09-03

• Email validation tightened: the last domain label must start with a letter, so IP literals are rejected on POST /prospects and POST /suppressions.
• The webhook URL guard now also protects other user-supplied URLs inside the product.

2026-08-29

• company_name field on POST and PATCH /prospects.
• ?campaign=<uuid> on POST /prospects: add and enrol in one call, with a line in Settings → Integrations → History.
• POST /api/v1/suppressions.
• POST /api/v1/hooks and DELETE /api/v1/hooks/{id} (REST Hooks subscriptions for new_reply, positive_reply, bounce, unsubscribe).

2026-08-23

• clicked added to the workspace webhook events.
• Zapier guide in the app.

2026-08-22

• First release: API tokens, POST /prospects, PATCH /prospects/{id}, workspace webhook with sent, replied, bounced, unsubscribed, HMAC-SHA256 signatures, 60 requests per minute per token.