Developer Portal
The Developer Portal lets approved customers self-manage programmatic API access: creating OAuth2 applications, subscribing to APIs with scoped permissions, managing credentials, and monitoring usage.
Entries on this page are generated by AI from vendor sources. How AI is used
APIs & extensibility
Public APIs, developer tooling and extension points.
| Month | Changes |
|---|---|
| 2026-01 | 9 |
| 2026-02 | 7 |
| 2026-03 | 2 |
| 2026-04 | 3 |
| 2026-05 | 7 |
| 2026-06 | 4 |
| 2026-07 | 10 |
| 2026-08 | 11 |
| 2026-09 | 24 |
| 2026-10 | 10 |
| 2026-11 | 2 |
Select a month to view the whole-record timeline. This clears timeline filters.
Platforms with recorded changes
Platforms with at least one feature state classified in this capability (primary or secondary, minor updates included), in the site's fixed order. Select one to filter the timeline. Counts are not shown side by side: they reflect how finely each vendor documents, not how much it offers.
Adobe AJO Bloomreach Braze Iterable Klaviyo MoEngage SFMC Engagement SFMC Next Adobe AEP Hightouch Tealium Treasure AI HubSpot Marketo
Timeline
← Back to the Release MatrixTimeline filters
Filters apply to the timeline. The chart and platform totals describe the whole record. Selecting a chart month clears timeline filters to show that same whole-record scope.
Matches the Release Matrix evidence: latest state reached in the selected period, entries under review excluded, primary and secondary capabilities included.
No recorded changes match these filters.
Within each period: major updates as cards, then notable ones as rows; newest first in each group. Minor updates below.
November 20262 changes
HubSpot 2 minor updates APIs & extensibility
- Deprecation announced Design manager serverless functions sunset source HubSpot is sunsetting serverless functions built in the design manager, which run on unsupported Node.js runtimes; developers must migrate them to developer projects.
- Deprecation announced Node.js runtime sunset for workflow custom code actions source HubSpot is sunsetting Node.js 20 and earlier for workflow custom code actions, whose runtimes no longer receive security updates; actions must be updated to Node.js 24, aided by Breeze Assistant.
October 202610 changes
In-App Forms API
Will let developers and AI agents create in-app sign-up forms and retrieve them by ID with channel details through the Klaviyo API, like existing web form support.
Experiments API endpoints
Iterable adds 12 Experiments API endpoints to create variants, update settings, start or cancel experiments, declare a winner and retrieve totals and trends.
Granular OAuth scopes
Broad OAuth scopes are replaced by precise, granular scopes, with a migration tool for existing apps.
AWS STS authentication for API keys
Lets an API key sign requests with temporary AWS IAM role credentials through STS, up to 10 assumed-role ARNs.
OAuth 2.0 authentication for API keys
Lets an API key exchange credentials for a short-lived OAuth 2.0 access token and refresh token.
Scoped Basic Auth API keys
Lets admins create multiple API keys scoped to chosen API groups, each named, regenerated or archived independently.
Adobe AJO 1 minor update APIs & extensibility
- Preview JWT client-assertion authentication for custom actions source Custom action authentication now also accepts JWT client assertions signed with an OAuth client secret (HS256/384/512), as an alternative to Adobe's RSA certificate, for a set of customers by request.
HubSpot 2 minor updates APIs & extensibility
- Deprecation announced Node.js 20 deprecation in developer CLI source HubSpot is deprecating Node.js 20 support in its developer CLI, following Node 20's end-of-life, with removal starting January 8, 2027.
- GA Verified email in Customer Agent API requests source Customer Agent actions with email protection enabled now include the visitor's verified email in API requests.
September 202624 changes
iQ Publish API
API to publish a saved Tag Management profile version to one or more environments, poll publish status, or combine save and publish in one call.
Expanded MCP server tools for marketing operations
Adds 40 tools to the MCP server so AI assistants can manage Automation Studio, campaigns, content and data extensions.
Direct Email Send API
New API sends marketing emails to one or more recipients directly and programmatically.
Orchestrated campaigns API
APIs for orchestrated campaigns let external systems retrieve campaigns and monitor their executions programmatically.
Journey Live Data response caching
Optional caching of Journey Live Data webhook responses for up to 10 minutes when requests are identical, cutting repeated endpoint calls.
Marketing Object Bulk API
New Bulk API endpoints load and query Marketing Object data at scale.
Connected Content debugger
Shows the live request and response for each Connected Content call in Preview & Test — URL, method, status, headers, payload, duration, and cache status — across messaging channels and Banners.
Campaigns and Segments API access via MCP server
The Braze MCP server adds beta support for AI agents to use the Campaigns and Segments API.
WhatsApp carousel messages via API
Sends WhatsApp carousel messages through the Braze API using a carousel card object.
Orchestrated campaigns API
Now GA (28 Sep 2026). Current summary: APIs for orchestrated campaigns let external systems retrieve campaigns and monitor their executions programmatically.
Bi-annual developer platform releases
Platform updates now ship on a predictable bi-annual schedule each March and September, with date-versioned APIs supported for 18 months.
Legacy API version and app sunset
Legacy API versions and apps begin sunsetting in March and September 2027 as HubSpot moves to a bi-annual, date-versioned release schedule.
User-Level Apps
User-Level Apps act on behalf of an individual user and respect that user's own HubSpot permissions.
Business Events API v5
Business Events API v5 adds endpoints to trigger a business event and to list or search a workspace's business events with cursor-based pagination, via MoEngage's unified gateway.
API support for AMPscript and Handlebars personalization
Developer APIs gain newly supported AMPscript and Handlebars personalization functions.
Connect API for programmatic content management
REST Connect API creates, manages and searches CMS content across channels programmatically.
Adobe AJO 1 minor update SMS, MMS & RCS
- Announced Custom auth headers for SMS BYOP source SMS BYOP OAuth connections will support custom authentication headers, including token placement and request formatting.
SFMC Next 1 minor update APIs & extensibility
- GA Content workspace folders support in Connect API source The Connect API for content management now supports content workspace folders as a managed content type.
HubSpot 4 minor updates APIs & extensibility
- GA Account Service Keys source Scoped Account Service Keys can be created to connect external tools like Tableau and Power BI, requiring Developer tools access or a Developer Seat.
- GA Campaigns API clone and goals endpoints source New Campaigns API endpoints list asset types, clone a campaign and its assets, and check cloning status; the Goals API can create goals tied to a campaign.
- GA Read-only Customer Agent lead status property source The hs_customer_agent_lead_status contact property is now read-only for everything except Customer Agent, which alone can write to it.
- GA Developer Platform connector builder source HubSpot connectors can be built and managed from the Developer Platform, with new Build with AI documentation.
Marketo 2 minor updates APIs & extensibility
- Retired Static list size limit for Get Lead Activities/Changes APIs source Calls to the Get Lead Activities or Get Lead Changes APIs with a listId parameter now fail with error 1003 once the targeted static list reaches 10,000 or more leads.
- GA API name validation for custom activity attributes source Custom Activity Attribute API names created via API or UI must now use only alphanumeric characters and underscores and start with a letter or digit.
August 202611 changes
Klaviyo MCP server: 260+ new tools
Adds 260+ tools to the existing Klaviyo MCP server, so AI agents and developers can read data, build segments, run campaigns, author flows and manage catalogs from Claude, OpenAI or custom agents.
Personalization Studio commands in Treasure Code CLI
Treasure Code CLI gains commands to view and manage Personalization Studio campaigns, plus a saved session context for repeated commands.
Connected Content debugger
Now GA (17 Sep 2026). Current summary: Shows the live request and response for each Connected Content call in Preview & Test — URL, method, status, headers, payload, duration, and cache status — across messaging channels and Banners.
API Explorer
Renamed and redesigned interactive API reference adding onboarding guidance, key-type visibility, live-call testing and US/EU switching.
Always-on campaign management via Treasure Code CLI
Always-on campaigns can now be pulled, edited locally as YAML, and pushed back via Treasure Code, matching CLI workflows for templates.
Admin-configured validation enforcement on CRM API writes
Starting with API version /2026-09/, HubSpot will enforce admin-configured validation rules on all CRM API write paths for creating or updating records.
Data APIs backend revamp
Revamped Data API backend adding rate-limit headers, request IDs on responses, IP whitelisting, and gated Get User API access.
Hightouch 1 minor update APIs & extensibility
- GA Events CLI typed SDK wrappers source An Events CLI generates typed SDK wrappers from event contracts to catch schema mismatches during development.
HubSpot 3 minor updates APIs & extensibility
- Deprecation announced Legacy private app creation sunset source HubSpot is permanently removing the ability to create new legacy, non-Project-based private apps through the account UI; existing legacy apps are unaffected for now.
- Deprecation announced Pipelines API V1 sunset source Pipelines API V1 will be sunset on December 4, 2026; integrations must migrate to the 2026-03 or newer version before then.
- Deprecation announced Node 18.x/20.x runtime deprecation for Chatflow custom code source Node 18.x and 20.x support for Chatflows custom code snippets ends August 31, 2026; unmigrated snippets become uneditable until upgraded to Node 24.x.
July 202610 changes
Journey Live Data
Journeys can call an external webhook at a tile to pull real-time data for branching and message personalization, optionally saved to the profile.
API Firewall
IP allowlisting for server-to-server Data API requests, rejecting unlisted IPs even with a valid key, with per-rule audit and call-count tracking.
Push credentials update API
A new API endpoint lets teams programmatically update push credentials per app and platform (Apple, Firebase, Huawei, Kindle) using Base64-encoded payloads.
Offering APIs
APIs to programmatically create, update, and list Offerings, also exposed as tools within the MoEngage MCP server.
Klaviyo 1 minor update APIs & extensibility
- GA API endpoints for custom objects, conversations and Customer Agent source New API endpoints support custom objects, multi-channel conversations and programmatic Customer Agent control.
Hightouch 1 minor update APIs & extensibility
- GA Code field beautify button source Code fields across the app gain a Beautify button that formats JSON, XML, LiquidJS, SQL and other languages.
Treasure AI 1 minor update APIs & extensibility
- GA Move and find segments by name in Treasure Code source Treasure Code CLI can now move segments to a folder by name and recursively search for segments by name, without needing internal IDs.
HubSpot 2 minor updates APIs & extensibility
- Announced Reference validation before pipeline or stage deletion via API source Starting in Pipelines API version /2026-09/, deleting a pipeline or stage still in use will be blocked with a validation error, matching existing UI behavior.
- GA Larger Webhooks Journal batch sizes source The Webhooks Journal API now supports larger batch sizes when retrieving webhook event history.
Marketo 1 minor update APIs & extensibility
- Retired Merge Leads API ID limit source From July 31, 2026, Merge Leads API calls with more than 25 IDs in the leadIds parameter fail with a 1080 error; large merges must be split into multiple calls.
June 20264 changes
HubSpot Agent CLI
The HubSpot Agent CLI brings HubSpot data and intelligence into OpenAI Codex, Claude Cowork, and Claude Code so agents can automate repetitive, bulk, and scheduled CRM work, such as prioritized contact cleanup lists.
Public API for Customer Agent
A public REST API lets teams configure, monitor and run Customer Agent programmatically, including pulling conversation data.
System jobs API response format update
Changes field names, date formats and structure of the profile system jobs API response, a breaking change for integrations.
Certificate-based authentication for custom actions
Custom actions can now authenticate via certificate-based JWT assertion instead of a client secret, for certificate-based enterprise APIs.
May 20267 changes
Tealium V3 iQ Profiles API
API with read access to profile details and create, update and delete operations for iQ variables, load rules, events, tags and tag templates.
Adobe AJO 1 minor update APIs & extensibility
- GA Decisioning migration workflow API contract update source Decisioning migration workflow APIs now require request-level as a query parameter instead of in the JSON body.
Bloomreach 2 minor updates APIs & extensibility
- GA Imports API support for all import types source The Imports API now supports all import types except Copy & paste and File upload, closing a prior API coverage gap.
- GA Workspace-scoped imports via Imports API source A new endpoint starts workspace-scoped Snowflake, Databricks and Item Collections imports programmatically via a workspace API key.
Klaviyo 1 minor update Mobile push
- GA iOS background processing for push notifications source Standard push notifications can now enable iOS background processing so apps refresh data or run tasks on delivery.
SFMC Next 1 minor update APIs & extensibility
- GA Launch Distributed Marketing and Alerts from custom Lightning web components source Admins can launch Distributed Marketing and Alerts actions from custom Lightning web components embedded in Salesforce pages.
Marketo 1 minor update APIs & extensibility
- Deprecation announced Static list size limit for Get Lead Activities/Changes APIs source Now Retired (30 Sep 2026). Current summary: Calls to the Get Lead Activities or Get Lead Changes APIs with a listId parameter now fail with error 1003 once the targeted static list reaches 10,000 or more leads.
April 20263 changes
HubSpot MCP server for external AI tools
A remote MCP server gives any MCP-compatible AI client permission-aware read and write access to HubSpot CRM objects, engagements, segments, campaigns and content via natural language.
Device opt-out API
API to block or unblock a specific device from receiving push notifications, for fraud or device-loss scenarios.
Klaviyo 1 minor update APIs & extensibility
- GA API revision for geofencing, templates and conversations source A new API revision adds programmatic access to geofencing, drag-and-drop templates, two-way conversations, omnichannel campaigns, translations and custom objects.
March 20262 changes
AI Decisioning REST API
AI Decisioning resources are now accessible via a REST API for agent retrieval, message management and programmatic run triggers.
Adobe AJO 1 minor update APIs & extensibility
- GA Offer and context attribute mapping in Decisioning migration API source The Decisioning migration API's entity mapping now lists offer attributes and context attributes.
February 20267 changes
CRM create/update access from Claude and ChatGPT connectors
The Claude and ChatGPT connectors can create and update CRM records, log activities, and read engagement history from within the AI chat window.
Treasure Code AI-native CLI
Treasure Code (formerly tdx) is an AI-native CLI that turns natural-language instructions into SQL, workflows, segments and journeys, with version control and rollback.
Email Designer API
Email Designer assets can now be created and managed through the Marketo Asset API.
Media Library upload API
New API endpoints let customers, partners and agencies upload files or copy them from a URL into the Media Library.
Bulk export API for Google Ads Data Manager
A new Bulk Export API sends Klaviyo events, profiles and groups directly into Google Ads for cleaner attribution.
Self-service Decisioning migration tooling APIs
New APIs let organizations programmatically migrate Decision Management entities to Decisioning, with rollback and reports.
Marketo 1 minor update APIs & extensibility
- Deprecation announced Merge Leads API ID limit source Now Retired (31 Jul 2026). Current summary: From July 31, 2026, Merge Leads API calls with more than 25 IDs in the leadIds parameter fail with a 1080 error; large merges must be split into multiple calls.
January 20269 changes
Klaviyo connector for Claude
A Klaviyo connector in Anthropic's MCP Directory lets Claude securely access account data, generate content and analyze campaign performance.
Marketo Deprecation announced 30 Jan 2026 Ends 31 Jul 2026 · End date passed · removal not confirmed in the record
Marketo SOAP API
Support for the Marketo SOAP API will end July 31, 2026; integrations using SOAP API capabilities should migrate to the REST API.
Custom action error response payload
Custom actions can now define an error response payload, exposed in the journey's timeout/error branch for fallback logic.
7-day retry window for Event Notification Service
Event Notification Service now retries failed webhook deliveries at decreasing intervals for up to 7 days instead of suspending callbacks immediately.
Send Marketing Cloud Engagement emails via Salesforce Flow
Marketers can send Marketing Cloud Engagement emails directly from Salesforce Flow.
Klaviyo 1 minor update APIs & extensibility
- GA API revision for geofencing and custom objects source The 2026-01-15 API revision adds mobile SDK geofence retrieval, one-record-at-a-time ingestion, and custom object type management.
SFMC Engagement 1 minor update Sandboxes & environments
- GA Retain original external key values when deploying with Package Manager source Package Manager deployments now keep original external key values, including Journey Builder entry-source event keys, easing deployment of objects called by external APIs.
SFMC Next 1 minor update APIs & extensibility
Marketo 1 minor update APIs & extensibility
- Deprecation announced REST API access_token query parameter source The access_token query parameter for authenticating Marketo REST API calls was deprecated August 31, 2026; integrations must use the Authorization header instead.