Change history: Get API key

← Changelog. Entries: 29.

• 2026-10-22 BC-1022-4: deleting the final OAuth key deactivates the app
• 2026-10-20 FIX-1020-6: key deletion no longer gets stuck after a bot change
• 2026-10-19 BC-1019-1: Adding storage access requires a personal key
• 2026-10-12 NEW-1012-15: Management keys are available in OpenAPI
• 2026-10-11 BC-1011-1: Interrupted key issuance retains its quota slot
• 2026-10-08 FIX-1008-13: key deletion waits for bot cleanup
• 2026-10-06 BC-1006-6: whitespace-only names of a key and of an AI credential are rejected
• 2026-10-03 FIX-1003-3: deleting a blocked key confirms revocation of its tokens
• 2026-10-01 FIX-1001-9: Cowork key no longer refused to a box service account
• 2026-10-01 BC-1001-19: changing the mode of Cowork seat keys through V1 and re-issuing a key wider than the caller are refused with 403
• 2026-09-30 BC-0930-31: Key revocation with a server outside its owner and Bitrix24 account scope
• 2026-09-26 BC-0926-1: the Cowork subscription key of an owner without a Bitrix24 account cannot be rotated, re-enabled or extended
• 2026-09-25 FIX-0925-9: Editing the scopes of a key whose webhook stayed on the previous Bitrix24 account address answers PORTAL_ADDRESS_CHANGED
• 2026-09-22 BC-0922-9: Retrying an unfinished key rotation requires recovery
• 2026-09-16 FIX-0916-5: the COWORK_HARNESS_DISABLED code no longer arrives on Cowork subscription keys
• 2026-08-26 NEW-0826-10: the vibe:infra scope is no longer granted on accounts with infrastructure disabled
• 2026-08-22 BC-0822-2: the create and rotate responses now match the documented key shape
• 2026-08-22 NEW-0822-4: a key now reports the channel it was issued through, and a refusal reports its exact cause
• 2026-08-22 FIX-0822-5: a rotation refused over scopes now reports the same code on every account
• 2026-08-22 BC-0822-8: rotating and bringing back platform-issued keys is closed
• 2026-08-22 NEW-0822-10: Reactivating a subscription key checks the issuance gates
• 2026-08-20 FIX-0820-18: revoking a key now closes the access links it issued
• 2026-08-09 BC-0809-1: meta.total is no longer returned by default in lists
• 2026-08-06 NEW-0806-24: a clear refusal when a personal key is left with only placement or entity
• 2026-08-05 FIX-0805-23: a personal key with no Bitrix24 webhook now says what it is missing
• 2026-07-29 NEW-0729-18: totalDefault — the meta.total default on the API key itself
• 2026-07-03 NEW-0703-6: key deletion is blocked while an agent or bot is linked
• 2026-06-30 FIX-0630-4: PATCH on an OAuth application key's scopes: honest rejection instead of false access
• 2026-06-28 FIX-0628-1: editing a key's scopes now applies them to the Bitrix24 webhook