​
2026-03-27

​
Added

Buckets API (S3-Compatible Object Storage)

A complete set of endpoints for managing S3-compatible storage buckets:
  • List Buckets: GET /api/v1/buckets
  • Create Bucket: POST /api/v1/buckets
  • Get Bucket: GET /api/v1/buckets`/{uuid}`
  • Update Bucket: PUT /api/v1/buckets`/{uuid}`
  • Delete Bucket: DELETE /api/v1/buckets`/{uuid}`
  • Regenerate Credentials: POST /api/v1/buckets`/{uuid}`/regenerate_credentials
  • Update Policy: PUT /api/v1/buckets`/{uuid}`/update_policy
  • Update ACL: PUT /api/v1/buckets`/{uuid}`/update_acl

Bucket Objects API

File and folder management within buckets:
  • List Objects: GET /api/v1/buckets`/{uuid}`/objects/list
  • Get Upload URL: POST /api/v1/buckets`/{uuid}`/objects/upload_url
  • Get Download URL: POST /api/v1/buckets`/{uuid}`/objects/download_url
  • Create Folder: POST /api/v1/buckets`/{uuid}`/objects/create_folder
  • Rename Object: PUT /api/v1/buckets`/{uuid}`/objects/rename
  • Delete Object: DELETE /api/v1/buckets`/{uuid}`/objects/destroy

Database Replication API

New endpoints for managing PostgreSQL streaming replication on both app addons and standalone services:
  • Create Replica: POST /api/v1/apps`/{id}`/addons/create_replica and POST /api/v1/services`/{id}`/create_replica
  • Promote Replica: POST /api/v1/apps`/{id}`/addons/promote_replica and POST /api/v1/services`/{id}`/promote_replica
  • Promote External: POST /api/v1/apps`/{id}`/addons/promote_external and POST /api/v1/services`/{id}`/promote_external
  • Enable Streaming Replication: POST /api/v1/services`/{id}`/enable_streaming_replication
  • Disable Streaming Replication: POST /api/v1/services`/{id}`/disable_streaming_replication

​
Changed

  • Deploy Endpoint: The POST /api/v1/apps`/{uuid}`/deploy endpoint now supports deploying from GitHub repositories with github_url and github_branch parameters, in addition to the existing commit_sha support.
​
2026-02-05

​
Added

App Deployments API

A new set of endpoints for managing the application deployment lifecycle has been introduced:
  • List Deployments: GET /api/v1/apps`/{uuid}`/deployments
  • Get Deployment Details: “GET /api/v1/apps/{uuid}/deployments/{id}
  • Get Build Logs: GET /api/v1/apps`/{uuid}`/deployments`/{id}`/logs
  • Stream Build Logs: GET /api/v1/apps`/{uuid}`/deployments`/{id}`/stream_logs
  • Cancel Deployment: POST /api/v1/apps`/{uuid}`/deployments`/{id}`/cancel
  • Rollback Deployment: POST /api/v1/apps`/{uuid}`/deployments`/{id}`/rollback

App Ports API

Full management of application network ports is now available:
  • List Ports: GET /api/v1/workspaces`/{ws}`/apps`/{app}`/ports
  • Create Port: POST /api/v1/workspaces`/{ws}`/apps`/{app}`/ports
  • Delete Port: “DELETE /api/v1/workspaces/{ws}/apps/{app}/ports/{id}
  • Expose Port Publicly: PATCH /api/v1/workspaces`/{ws}`/apps`/{app}`/ports`/{id}`/expose_publicly
  • Make Port Private: PATCH /api/v1/workspaces`/{ws}`/apps`/{app}`/ports`/{id}`/make_private

Add-on Password Rotation

The new POST /api/v1/apps`/{uuid}`/addons`/{id}`/rotate_password endpoint allows for secure password rotation for supported add-ons, such as databases.

Basic Authentication

The PUT /api/v1/apps`/{uuid}`/security endpoint now supports basic_auth_enabled, basic_auth_username, and basic_auth_password parameters, allowing you to enable and configure Basic Authentication for your application.

​
Changed

  • Deployment Options: The POST /api/v1/apps`/{uuid}`/deploy endpoint now accepts commit_sha and branch parameters, enabling more precise deployments from Git repositories.
  • Builder Options: The builder parameter in POST /api/v1/apps has been expanded to support auto (automatic buildpack detection) and custom (language-specific builder) in addition to dockerfile.
  • Resource Validation: The “PUT /api/v1/resources/{uuid} endpoint now validates against plan downgrades to prevent assigning a plan with insufficient resources (CPU, RAM, storage).
  • Add-on Deletion Logic: The logic for deleting an add-on (“DELETE /api/v1/apps/{uuid}/addons/{id}) has been refactored into a dedicated service object for improved maintainability.

​
Removed

  • The POST /api/v1/apps`/{uuid}`/sync_parent_image endpoint has been removed.