Changelog

v1.0.0 — March 2026

Initial release of the SkyLight Chat REST API v1 and Webhooks system.

New endpoints

Contacts

• GET /api/v1/contacts — List contacts with search and filter
• POST /api/v1/contacts — Create a contact
• GET /api/v1/contacts/{id} — Get a contact
• PUT /api/v1/contacts/{id} — Update a contact
• DELETE /api/v1/contacts/{id} — Delete a contact
• POST /api/v1/contacts/{id}/blacklist — Toggle blacklist
• GET /api/v1/contacts/{id}/notes — List notes
• POST /api/v1/contacts/{id}/notes — Add a note

Messages

• GET /api/v1/conversations — List conversations
• GET /api/v1/contacts/{id}/messages — List messages for a contact
• POST /api/v1/messages/send — Send a message via a connected channel

Bookings

• GET /api/v1/bookings — List bookings
• POST /api/v1/bookings — Create a booking
• GET /api/v1/bookings/{id} — Get a booking
• PUT /api/v1/bookings/{id} — Update a booking
• POST /api/v1/bookings/{id}/cancel — Cancel a booking
• GET /api/v1/bookings/types — List booking types
• GET /api/v1/bookings/resources — List resources
• GET /api/v1/bookings/availability — Check available slots

Webhooks

• GET /api/v1/webhooks — List webhooks
• POST /api/v1/webhooks — Create a webhook
• GET /api/v1/webhooks/{id} — Get a webhook
• PUT /api/v1/webhooks/{id} — Update a webhook
• DELETE /api/v1/webhooks/{id} — Delete a webhook
• POST /api/v1/webhooks/{id}/test — Send test event
• GET /api/v1/webhooks/{id}/deliveries — List delivery logs
• POST /api/v1/webhooks/{id}/regenerate-secret — Rotate secret
• GET /api/v1/webhooks/events — List available events

Account

• GET /api/v1/account — Get account profile
• PATCH /api/v1/account — Update account profile
• GET /api/v1/account/subscription — Get subscription & plan details
• GET /api/v1/account/channels — Get connected channel status

Team

• GET /api/v1/team — List team members
• POST /api/v1/team — Create a team member
• GET /api/v1/team/{id} — Get a team member
• PUT /api/v1/team/{id} — Update a team member
• DELETE /api/v1/team/{id} — Delete a team member

Webhook events

10 event types available on launch: contact.created · contact.updated · contact.deleted · message.received · message.sent · booking.created · booking.updated · booking.cancelled · booking.completed · ticket.created

Security

• Bearer token authentication (Authorization: Bearer <key>)
• X-Api-Key header alternative
• Domain whitelisting per API key
• HMAC-SHA256 webhook payload signing
• Rate limiting: 120 requests per minute per key