Changelog

The API now covers more of what you can do in the dashboard.

You can update domain security settings, delete domains (including their sources and any redirects left empty), and filter redirect and domain lists with the same query search syntax used in the UI.

Team endpoints also expose and update settings such as name, summary emails, and security defaults. Updating team settings requires the new team:write scope.

We've improved the search functionality for redirects and domains, with better matching for exact fully qualified domain names (FQDNs), including paths. This makes it easier to quickly find the exact redirect or domain you're looking for, especially in larger configurations.

Users can now securely recover access to their account if they lose their two-factor authentication device. The new self-service recovery flow makes it possible to regain access without contacting support.

We've added a dedicated tags page where you can view all tags in your account, create them manually, and see which redirects and users are associated.

This makes it easy to set up tags ahead of time without first creating a redirect that uses the tag.

You can now use Accept-Language header values in dynamic destinations and rules. New variables include {acceptLanguage.raw}, {acceptLanguage.primary}, {acceptLanguage.language}, {acceptLanguage.region}, and {acceptLanguage.q}, making it easy to steer visitors based on their preferred language.

We've added support for SAML Single Logout (SLO). Users can now be signed out through both Identity Provider (IdP)-initiated logout and Service Provider (SP)-initiated logout, providing a complete logout experience across connected applications.

Redirects are no longer limited to ports 80 and 443. We now accept incoming traffic on additional standard HTTP and HTTPS ports, making it easier to redirect applications and services running on custom ports.

Supported HTTP ports: 80, 8080, 8880, 2052, 2082, 2086, 2095.

Supported HTTPS ports: 443, 2053, 2083, 2087, 2096, 8443.

Customers on Pro, Business, and Enterprise plans can now enable short-lived SSL certificates. These certificates are valid for just 160 hours and are renewed automatically. You can choose between a preferred mode with automatic fallback or a strict mode that only issues short-lived certificates.

Read more