Signed requests and tighter rate limits across the API
Every service-to-service request now carries an HMAC signature, and rate limits are split per caller so one client cannot spend another's budget.
News
What has actually changed: feature launches, security changes and maintenance, with the date each one landed.
Every service-to-service request now carries an HMAC signature, and rate limits are split per caller so one client cannot spend another's budget.
The scattered settings pages are replaced by a single Settings area with a tab per module, and the URL keeps the tab so it can be linked and survives a refresh.
Settings now includes a self-service data export and a permanent account deletion flow, both gated behind the checks that make them safe.
The first working slice of the dashboard: a server picker, per-server overviews, and staff records you can add, change and remove with a rank hierarchy that matches your Discord roles.
The modules, the dashboard and the documentation are being built in the open. Here is what that means for the servers already using it.