Authentication
These endpoints accept either a dashboard session cookie or a server API key sent asAuthorization: Bearer <key>.
A note belonging to another organization returns
404, never 403 — you cannot tell “not yours” from “not there”.The release note object
List release notes
Response
Get a release note
200 OK — the release note object.
Create a release note
Response —
201 Created — the release note object.
Errors
Update a release note
publishedAt stays consistent.
Request body
200 OK — the updated release note.
Errors
Delete a release note
204 No Content
Publish and unpublish
200 OK. Unpublishing clears publishedAt; seen-state is kept, so a note that is unpublished and republished is not re-shown to devices that already read it.