Changelog · InOrbit API

2026-10-01: units. Every call made for an account is counted and weighed by its operation's category (read 1 to generate 400 units); an account gets an allowance of units a month, 100 000 on free, and when it runs out its keys are refused with 429 quota_exceeded until the 1st. Usage and units has the details; the console's Usage page shows the month. usage:read also reads the units and the price list, and radar:read opens the radar's published digests to keys.
2026-10-01: an API key holds the scopes chosen when it is made: identity:read, account:read, usage:read; a route admits a token only with its scope, and each operation in the reference names it. The single tbd.public scope is gone: a key made before today no longer reaches any route; make a new one in the console.
2026-10-01: sign in on this site with the same account as the rest of inorbit.hr; the reference's playground can call as you, or with a token you paste, and the API answers this site's browser calls (GET only).
2026-10-01: GET /openapi.json serves the public document only: the routes an API key may call, the health endpoints, and the schemas those use. Before, it served every route the gateway has. With a token, GET /v1/openapi.json answers the document for your plan.
2026-09-30: these pages open. The OpenAPI document gains servers (the API's public address), a bearer security scheme on every operation but the health endpoints, and x-tbd-public on the routes a key may call; GET /openapi.json needs no token. Token requests are limited per client address instead of one shared bucket.