API changelog

Breaking changes are called out in bold.

v2.3 — 2026-02

• Removed the temporary /api/v2/_debug endpoint that was left enabled after the January incident.
• GraphQL: added ledgerEntries connection.
• Webhook signatures now use SHA-256 (X-AcmePay-Signature).

v2.1 — 2025-11

• Developer portal moved from devportal.acmepay.duckdns.org to portal.acmepay.duckdns.org. Old host redirects.
• Sandbox base URL is now sandbox.acmepay.duckdns.org (previously a path under the API host).

v2.0 — 2025-09

• New API host api.acmepay.duckdns.org replaces apigw.acmepay.duckdns.org. The old gateway hostname now 301-redirects.
• Bearer tokens replace API-key headers for all v2 endpoints. X-AcmePay-Key remains only on /api/v1.
• GraphQL read API released in beta.

v1.4 — 2025-05

• Legacy merchant dashboard (legacy.acmepay.duckdns.org) frozen; no new features.
• Announced v1 sunset for 2025-12-31. Migration guide in the legacy docs.