Skip to main content

API changelog

Every change to the public ShowMojo APIs, webhooks, and their documentation is listed here with the date it went live, newest first. Each entry also bumps the version of the affected OpenAPI document: a patch bump for documentation-only clarifications, a minor bump for additive changes, and a major bump for breaking changes. Breaking changes and removals follow the versioning and deprecation policy.

Download the current specs from /openapi/showmojo-api-legacy.yaml, /openapi/showmojo-api-v4.yaml, and /openapi/showmojo-api-zapier.yaml.

2026-10-16​

Legacy API 3.2.2.

  • Report Export documented in full. The JSON envelope, the CSV header rule, the column list of every named report, and the error responses. See Report Export.
  • Leads & Showings webhook event.action corrected. The documented values now match what ShowMojo sends, all 169 of them, with their meaning. See Leads and Showings.
  • Listing schemas split. ListingResponse is what List Listings returns; Get Listing returns ListingDetail, which adds showing_types, contact_info, application_url and scheduling_block.
  • Deprecated: HTTP Basic auth on the API, sunset 2027-01-19. Sending a ShowMojo login and password stops working on that date. Replace the Authorization: Basic header with Authorization: Token {token}, using the token from Settings > Listing Import; every endpoint that accepted Basic auth accepts the token. See Versioning.
  • Listing index filtering and pagination. GET /api/v3/listings accepts updated_since and status filters, returns listings in a stable order, and paginates when page or per_page is sent, using the same envelope as the properties index. Responses without those parameters are unchanged. See List Listings.
  • Listing responses include listing_group_name. See Get listing.
  • Versioning and deprecation policy published. What counts as a breaking change, the notice period before a deprecated element is removed, and the list of current deprecations. See Versioning.

2026-10-15​

Legacy API 3.1.0.

  • Leads & Showings webhook requests are signed. Every delivery carries X-ShowMojo-Timestamp and X-ShowMojo-Signature headers; verify the HMAC-SHA256 signature with the signing secret shown in Settings > Leads Export and reject deliveries older than five minutes. See Leads and Showings.
  • Deprecated: the Authorization: Bearer header on webhook deliveries. It is still sent to HTTPS endpoints configured before signing was introduced and will be removed; verify the signature instead.
  • Webhook delivery semantics documented: 15-second timeout, only a 200 counts as delivered, retries after 5, 15, 45, 135, and 405 minutes, the same event.id on every attempt, and automatic disabling of the endpoint after five exhausted events within 24 hours.
  • X-Request-Id on every response. ShowMojo echoes the id you send or generates a UUID; quote it when contacting support. See Request tracing.
  • Token lifecycle documented: generating a new API token revokes the previous one immediately. See Listings.
  • Machine-readable docs published: OpenAPI documents in YAML and JSON under /openapi/, plus /llms.txt and /llms-full.txt for AI tools.

2026-09-15​

2026-07-17​

  • Listing import accepts housing_type and listing_group_name. The group name is matched case-insensitively against existing groups and a new group is created when none matches. See Import listings.

2026-05-28​

  • Listing responses include scheduling_block and application_url. See Get listing.

2026-05-08​

  • Leads API error responses documented. Validation failures return a JSON body with an error message.

2026-04-29​

  • Listing responses include fees, with the fee type, category, amount, and whether the fee is required. See Get listing.