What shipped
Capability-level releases, newest first. Wire-level changes an integrator would edit code over — parameter renames, new sort spellings, error-shape changes — are listed separately in the API changelog.
- Aug 2026api
Webhooks
Register an endpoint and get a signed POST when a matching record lands, instead of polling for it. Three endpoints on the free tier; the signing secret is derived rather than stored, so you can look it up again instead of losing it.
Read more → - Aug 2026api
Incremental sync for incidents
/v1/incidents now takes updated_after with a cursor, matching what /v1/disclosures already offered. Mirror the corpus by storing the updated_at of the last row you wrote and passing it back — filing dates lag ingestion by months for archive-backfilled sources, so they never worked as a sync cursor.
Read more → - Aug 2026api
Bulk export, free
Streaming NDJSON of the full corpus, open to every signed-up account at four runs a UTC day. It was briefly paid-tier only; that gate is gone.
Read more → - Aug 2026api
Public OpenAPI spec
A curated machine-readable spec at /openapi.json, no key required, plus an llms.txt for coding agents. The endpoint tables in the docs are generated from that spec, so they cannot disagree with it.
Read more → - Jul 2026data
Supply-chain cascades
When one vendor breach surfaces as many customer filings, those filings are grouped so you can see the fan-out. Member counts are a floor, not a census — they show the victims who have filed and been linked so far.
Read more →