# BioFlow public API v1 launches

2026-07-20

The BioFlow public REST API is live at https://app.getbioflow.com/v1: 22 operations across pages, blocks, publishing, contacts, files, analytics, usage, and webhook endpoints. Authenticate with bf_live_/bf_test_ API keys; errors are RFC 9457 problem+json with stable codes; responses carry IETF draft-11 RateLimit headers; consequential POSTs accept Idempotency-Key; lists use cursor pagination. The whole surface is described by an OpenAPI 3.1 spec.

## Added

- 22 /v1 operations: pages CRUD, block add/remove, two-phase publish, contacts, files, analytics summary, usage, and webhook-endpoint management.
- API keys with scoped access: bf_live_ for production, bf_test_ for read-only test mode, created in the developer console.
- Plan quotas: Creator 10,000 requests/mo with a 60/min burst, Pro 100,000 requests/mo with a 120/min burst; GET /v1/usage is free and shows where you stand.
- RFC 9457 problem+json errors with a stable code registry (14 codes) and a docs page per code.
- IETF draft-11 RateLimit / RateLimit-Policy response headers on every operation.
- Idempotency-Key support on consequential POSTs, backed by a server-side idempotency ledger.
- Cursor pagination: { data, has_more, next_cursor } envelopes with limit/after parameters.
- OpenAPI 3.1 specification generated from the same schemas the handlers validate with.

Back to the changelog: https://getbioflow.com/changelog