API Changelog

Version history for the FluffyStack public API. Breaking changes are flagged — non-breaking additions and fixes don't require any changes to existing integrations.

API documentation JSON Schemas Get an API key

Versioning policy

  • The API version is in the URL path: /v1/...
  • Backwards-compatible changes (new endpoints, new optional fields, bug fixes) ship within the current version.
  • Breaking changes (removed fields, changed semantics, restructured responses) ship as a new version (/v2/...). The old version stays live indefinitely.
  • Deprecations are announced here at least 90 days before removal.

v1Current

Version

v1 — Initial public release

First public release of the FluffyStack API. Provides read-only access to the full service catalogue (192 services across 16 providers), governance policy generation (AWS SCP, Azure Policy, GCP Org Policy), service list management, and Markdown export.

  • 12 endpoints across 6 groups: catalogue, governance, export, lists, status, auth
  • GitHub + Google OAuth for API key registration
  • KV-based rate limiting: 30 req/min anonymous, 120 req/min authenticated
  • JSON Schema published at /v1/schemas/service-list.schema.json
  • Custom domain: api.fluffystack.dev
Added

OAuth authentication

Added GitHub and Google OAuth sign-in. Users get a free API key (flsk_ prefix) on first login. Keys are rotatable via POST /v1/auth/rotate.

Added

Rate limiting

All endpoints now return X-RateLimit-Limit, X-RateLimit-Remaining, and X-RateLimit-Reset headers. Anonymous requests limited to 30/min by IP; authenticated requests to 120/min by API key. Exceeding the limit returns 429 with a Retry-After header.

Fixed

Policy exports validated against vendor specs

AWS SCP, Azure Policy, and GCP Org Policy generators were producing JSON with invalid top-level keys (_comment) that vendor APIs would reject. Fixed: AWS uses the grammar-valid Id field, Azure removed the unsettable policyType field and switched mode to "all", GCP removed the _comment field entirely.

Added

Red Hat OpenShift provider

Added OpenShift as provider #16 with 8 services: ROSA, ARO, OpenShift Dedicated, OpenShift on IBM Cloud, OpenShift Container Platform, Pipelines, GitOps, and OpenShift AI.

Changed

Custom domain: api.fluffystack.dev

API moved from fluffystack-api-prod.andibing.workers.dev to api.fluffystack.dev. The old workers.dev URL continues to work as a fallback but is no longer referenced in documentation.

Future API versions will be documented here when they ship. Subscribe to the GitHub releases feed for notifications.