> This is the Markdown of https://backed.giving/developers/changelog, a page of the Backed developer documentation. Every page is listed at https://backed.giving/developers/llms.txt.

# Changelog

Every change to the Backed API, newest first, with its date and version; a breaking change is published only under a new version path.

Every change to the Backed API, newest first, each dated by the day it reached production. The current version is `/api/v2/`.

> A breaking change is published only under a new version path: the version you use keeps working as it is. How long a superseded version stays, and how you are told, is in [Versions and deprecation](https://backed.giving/developers/guides/versioning.md).

<a id="2026-11-09-openapi-document-and-developer-site"></a>
## 2026-11-09 · OpenAPI document and developer site

- Date: `2026-11-09`
- Version: `/api/v2/`
- Breaking: no.

Every Organisation host serves this OpenAPI 3.1 document at /api/v2/openapi.json, and the developer site at https://backed.giving/developers publishes the reference, the guides, the event catalogue and this changelog.

<a id="2026-11-09-plain-http-refused"></a>
## 2026-11-09 · Plain HTTP refused

- Date: `2026-11-09`
- Version: `/api/v2/`
- Breaking: no.

A request that reaches the API over plain HTTP is answered 403 https\_required and is not processed, on every route, the token endpoint included.

<a id="2026-11-09-webhooks-and-the-odata-reporting-feed"></a>
## 2026-11-09 · Webhooks and the OData reporting feed

- Date: `2026-11-09`
- Version: `/api/v2/`
- Breaking: no.

Signed webhook deliveries of the event catalogue to the Organisation's endpoints, and the OData v4 feed at /odata/v4 for Power BI, Tableau and warehouse loaders (scope read:reporting\_feed).

<a id="2026-11-07-write-api"></a>
## 2026-11-07 · Write API

- Date: `2026-11-07`
- Version: `/api/v2/`
- Breaking: no.

Registration entities, application transitions, notes and tags, assessor assignments, milestones, payment batches, contract statuses and file uploads, each under a write scope and an Idempotency-Key, run as the credential’s Administrator.

<a id="2026-10-29-milestones"></a>
## 2026-10-29 · Milestones

- Date: `2026-10-29`
- Version: `/api/v2/`
- Breaking: no.

GET /api/v2/milestones and /api/v2/milestones/{id}, with each Milestone’s deliverables entry and the filters\[…\] parameters.

<a id="2026-10-22-registration-entities"></a>
## 2026-10-22 · Registration entities

- Date: `2026-10-22`
- Version: `/api/v2/`
- Breaking: no.

GET /api/v2/registration\_entities and /api/v2/registration\_entities/{id}; the single record carries its users.

<a id="2026-10-12-contracts"></a>
## 2026-10-12 · Contracts

- Date: `2026-10-12`
- Version: `/api/v2/`
- Breaking: no.

GET /api/v2/contracts and /api/v2/contracts/{id}.

<a id="2026-10-01-funding-rounds-funding-applications-and-file-inputs"></a>
## 2026-10-01 · Funding rounds, funding applications and file inputs

- Date: `2026-10-01`
- Version: `/api/v2/`
- Breaking: no.

The read-only v2 resources: GET /api/v2/funding\_rounds, /api/v2/funding\_applications (with extra\_methods\[\]) and their single records, and the file download GET /api/v2/file\_inputs/{id}.

<a id="2026-09-30-token-endpoint"></a>
## 2026-09-30 · Token endpoint

- Date: `2026-09-30`
- Version: `/api/v2/`
- Breaking: no.

POST /oauth/token issues 5-day Bearer tokens by the OAuth 2.0 client-credentials grant.