Changelog

Changes and updates to the Open API. This API is currently in beta — breaking changes may occur between versions.

v0.11.0 — April 2026

Added Media upload endpoints (write:media scope): POST /media and GET /media/{id}
Extended POST /walls/{wall_id}/posts with optional media_ids array — upload first, then attach by id
Incoming webhook wall_post and chat_message actions now accept an optional media array of URL + type pairs (server fetches URLs, Slack/Discord-style)
Supported media types: image, video, document. Max 10 per post/message, same type across the batch

Added monotree.formresponse.updated webhook event (filterable by form)
Fires when a form response's status, deadline, visibility/archive flag, or assignees change
Does not fire on initial creation (use formresponse.created) or on unrelated activity like comments/notes
Whistleblower forms are excluded, matching the existing formresponse.created behavior

Added Comments CRUD endpoints on posts (read:comments, write:comments scopes)
New endpoints: GET/POST /posts/{post_id}/comments and GET/PUT/DELETE /posts/{post_id}/comments/{id}
Added monotree.comment.created, monotree.comment.updated and monotree.comment.deleted webhook events (filterable by wall)
Comment updates are restricted to the author within 30 minutes of creation

Outgoing webhooks now support resource filtering — optionally select specific forms or walls per event type
Form response webhooks can be scoped to specific forms (multi-select)
Post created webhooks can be scoped to specific walls (multi-select)
Default remains "all" — no filter means you receive all events of that type
Added filters field to webhook create/update API

Added Calendar Entries CRUD endpoints (read:calendar_entries, write:calendar_entries scopes)
Create, update, and delete calendar entries with optional body and group targeting
Added Create calendar entry action for incoming webhooks

Added Events CRUD endpoints (read:events, write:events scopes)
Create, update, and delete company events with date, time, location, and group targeting
Events are automatically published and added to the calendar on creation

Added Statistics read-only endpoints (read:stats scope)
User summary: total, registered, active and new users (yesterday/7d/30d)
Engagement: time series with active users, app time, sessions — filterable by granularity, period count, and group
Adoption rate: per-department active/total employees percentage — filterable by group
Content activity: posts, comments, reactions, chat messages, completed todos — this week vs last week
All statistics responses are cached server-side (1h–24h) for performance

Added Walls read-only endpoints with group associations (read:walls scope)
Post endpoints now nested under walls: /walls/{wall_id}/posts
Added Timestamp header to outgoing webhooks for replay attack prevention
Webhook signatures now include the timestamp: HMAC-SHA256(timestamp + "." + payload, secret)
Added bot user avatars for incoming webhooks (defaults to app icon)
Outgoing webhooks now use revoke instead of delete
Incoming webhooks now use unified text field for all actions (Slack-compatible)
Added Pagination section to documentation with meta and links format
Added incoming webhook rate limiting documentation

Added Announcements CRUD endpoints (read:announcements, write:announcements scopes)
Added Create post on wall action for incoming webhooks
Added monotree.announcement.published webhook event