Every object, every association. HMAC-signed webhooks, per-org rate limits, OAuth 2.0 apps and a public OpenAPI spec.
Per-org keys with scopes; OAuth 2.0 for third-party apps.
HMAC signatures, retries, delivery logs, per-event filters.
Machine-readable schema for v1 and v2.
Async import/export jobs with status polling.
SSE stream for real-time changes.
Per-org buckets, HMAC replay protection.