Changelog

This page lists every meaningful change to the /api/v1/data/* surface. Subscribe by watching this URL or by polling /openapi.json for schema diffs.

Conventions: Added for new capabilities, Changed for backwards-compatible adjustments, Deprecated for things scheduled for removal (with sunset date), Removed when a sunset actually fires, Fixed for bug fixes that may visibly change output.

2026-09-30

Fixed — The per-second and per-minute rate limits are now enforced across all of our API servers. Previously each server counted separately, so bursts could exceed the published 10 requests/second and 300/minute. The limits now use fixed one-second and one-minute windows (UTC); the 429 response and Retry-After values are unchanged. See Rate limits.

2026-09-28

Changed — The Data API is now self-serve on Pro (and the 7-day Pro trial): subscribe, then create keys under Settings → API keys. The invite-only beta has ended.

Changed — Monthly quota and rate limits are counted per account instead of per key. All of your clf_ keys and OAuth clients share one pool (10,000 calls per month on Pro); clf_test_… keys keep their own 1,000-per-month cap inside that pool. Quota notification emails refer to the account total.

Removed — The X-API-Key request header is no longer accepted. Send the key as Authorization: Bearer clf_…; a request that carries the key only in X-API-Key now returns 401. See Authentication.

Fixed — Tool-level misses are now returned the same way on every endpoint: HTTP 200 with an error field and, in most cases, a failure_kind. Previously financials, statement, screen and snapshot returned 500 for a miss. Some successful calls failed too: financials for a company with two or more years of data returned 500, revenue-geography returned empty fields, and filings search returned 500 when the results included SEC index rows. See Errors.

Changed — Responses now include every field the data layer produces, for example quarter, ticker, sources and coverage, which were previously dropped. This is additive; clients that ignore unknown fields need no change.

Fixed — Retry-After (rate limit) and X-Clarifo-Quota-Used / X-Clarifo-Quota-Limit (monthly quota) headers are now delivered on 429 responses. See Rate limits.

Added — 402 Payment Required is documented: it is returned when the key's owner no longer has an active plan or trial with API access.

2026-06-04

Added — Public OpenAPI schema published at https://api.clarifo.com/openapi.json. Generate clients with any OpenAPI 3.x tool (openapi-generator, swagger-codegen, fern, etc.).

Added — API stability & versioning policy documenting the v1 backwards-compatibility contract and the deprecation flow (≥6 months notice, Deprecation + Sunset headers).

Added — Idempotency-Key header is now honoured on all POST endpoints (/filings/search, /filings/content-search, /companies/compare, /companies/screen). Sending the same key with the same body within 24 hours replays the original response without re-running the work or consuming additional quota.

Added — clf_test_… keys, separate from clf_live_…, for development against the same data without burning your production quota. Both prefixes are honoured by the same endpoints. Every key has its own monthly counter; test keys default to a 1,000-request quota, live keys to 10,000.

Added — Quota notification emails at 80 %, 95 %, and 100 % of the monthly limit. Sent at most once per threshold per calendar month per key. Plain transactional mail from support@clarifo.com — no configuration needed.

Added — Per-call audit trail in the API Keys settings page. The last ~50 calls per key now show endpoint, status, response time, source IP, and user agent. Useful for verifying integration health and detecting key leakage.

Added — Per-endpoint usage breakdown and 30-day call-volume chart in the API Keys settings page.

Changed — Browser-based clients on any origin can now call /api/v1/data/* directly. CORS is open for this surface (your clf_ key is the only gate); the rest of app.clarifo.com keeps its strict origin whitelist. Cross-origin requests may send only the Authorization, Content-Type and Accept headers, so Idempotency-Key is available to server-side clients only.

MCP server

The MCP server at mcp.clarifo.com/mcp has its own surface and is listed here separately, newest first. See MCP server for the full tool list.

2026-10-06

Added — search_filings with mode="season" answers how an earnings season is going: reporters against the universe, breadth and medians year on year, momentum against the previous quarter, signals, a sector breakdown, outliers, the largest companies and who reports next. It covers the US and the Nordic markets.

2026-10-05

Added — value_company returns P/FFO and P/AFFO for US REITs.

2026-10-04

Added — dd_quickscan, the valuation reconciliation and multiples, and stored CEO quotes now return sources with citations.

2026-10-03

Added — search_filings with mode="calendar" (and company_events) returns scheduled report dates, each marked published once the report is in Clarifo.

Added — get_filing_snapshot takes include_text (the full indexed text of the page, with adjacent_pages) and highlight (a figure as printed or a short quote, so the link opens at that spot). search_filing_content takes include_adjacent_pages to add the page before and after a hit.

Changed — Tools that cited nothing, or only bare ids, now return source links.

Earlier

The API has been in invite-only beta since early 2026. Prior to 2026-06-04, schema changes were communicated by email to active testers; from this date forward, every change lands here.

If you integrated before 2026-06-04 and want a written diff of what your client was built against versus today's contract, email support@clarifo.com with your key prefix and we'll send one.