Changelog

2026-10-25: Developer API, first release

The first release of the Panlytics developer API. It opened in steps, and every step is now live.

• Keys. A person whose role holds "Make keys for programs and AI agents" can make a key on their Developer page. A key acts as its maker, inside their role and behind the fence, and ends 1 to 5 hours after it is made.

• Developer mode. The CEO switches keys on for the company and sets how long they last. Switching it off revokes every key at once.

• The agent prompt. Every new key comes with a prompt to paste into an AI agent, with the key, its reach, its end and the rules.

• GET /v1/me. Who the key acts as, what it reaches, what it may do and when it ends.

• These docs, with a markdown twin of every page, /developers/llms.txt, /developers/llms-full.txt and /developers/openapi.json.

• The v1 endpoints. Your company, shops, categories and their settings, report uploads, reorder points (the level that triggers a new order), the order list and the stop-stocking list with CSV export, recompute, suppliers, and chat with its runs, under /v1. Twenty-two endpoints in all, the AI sign-in link below included, each with its page in the API reference.

• Pages and retries. Every list answers { data, nextCursor, total }, and every creating POST takes an Idempotency-Key header.

• Proposals stay with a person. Anything the assistant proposes in a run a key started waits for a person to approve it in the app.

• Retries after a fault. A 500 is kept on its Idempotency-Key for 24 hours, so the same key answers the same 500. Check what exists, then send a new key.

• Three live streams per key. A fourth GET /v1/runs/{id}/stream answers 429 net.rate_limited until one closes.

• A role that loses the key ability revokes its keys. The keys of a person whose role no longer holds "Make keys for programs and AI agents" are revoked at once, and their runs and streams stop.

• AI sign-in. When the CEO switches it on, an AI with a live key asks POST /v1/agent-sign-in-links for a one-time link and pastes it into its own browser's address bar, to use the app as the key's maker behind the fence. Letting an AI sign in to the app has the rules.

How this page works

Each entry is dated and lists what changed for a caller of the API. A change that could break a working program is marked as one, with what to do about it. The markdown twin of this page, /developers/changelog.md, is the easiest way for a program or an agent to check for changes.