API v1hldgroup.org

Changelog

A record of all API changes. Breaking changes are announced with a minimum 90-day deprecation notice via email and the developer changelog webhook event.

Note:Subscribe to the api.changelog.published webhook event to receive notifications when new versions are released.
v1.4.0feature2025-06-01
  • Added SCIM 2.0 endpoint for bidirectional identity provider sync.
  • New Stripe integration: transaction monitoring and Radar fraud signal ingestion.
  • Webhook event: compliance.report.ready now fires on async report completion.
  • Sentinel response actions: added kill_process and quarantine_file.
v1.3.2fix2025-05-12
  • Fixed: device.isolated webhook event not firing for API-triggered isolations.
  • Fixed: pagination has_more incorrectly returning true on final page.
  • Improved error messages for invalid filter parameters.
v1.3.0feature2025-04-28
  • New integration: JumpCloud identity provider.
  • Identity API: added force_mfa response action.
  • Compliance API: added evidence list endpoint.
  • Rate limit headers now included on all responses (previously only on 429).
v1.2.0feature2025-03-15
  • New integration: GCP Security Command Center and Cloud Audit Logs.
  • Sentinel incidents: added notes endpoint (POST /incidents/:id/notes).
  • Alerts: new filter filter[category] to scope by alert category.
  • All list endpoints now support filter[created_after] and filter[created_before].
v1.1.0feature2025-02-01
  • Initial release of the Sentinel API (incidents, response actions, timeline).
  • Webhooks: added signature verification (X-HLD-Signature-256).
  • Tenants: added suspend and reactivate endpoints.
  • Devices: added live query endpoint.
v1.0.0release2025-01-15
  • Initial public release of the HLD API v1.
  • HomeBase API: tenants, alerts, devices, identity.
  • OAuth 2.0 with PKCE and API key authentication.
  • Webhook delivery with retry logic.