Changelog

Track breaking changes, new features, and improvements to the Pixee PIM API.

v6.19.x — Breaking changes for integrators (June 2026)

Authentication changes (SEC-01, SEC-02, SEC-03)

• Refresh token mechanism changed — Refresh tokens are now server-side, DB-backed (rotation + family revocation on reuse detection). The POST /auth/refresh endpoint no longer accepts a Bearer token in the header — it reads the refresh_token HttpOnly cookie set at login. Clients that passed a JWT in Authorization to refresh must migrate to cookie-based refresh.

• Access token TTL reduced: 120 min → 15 min — Review your token handling to ensure clients refresh before expiry.

• API key header changed: Authorization: Bearer → X-API-Key — The API key authentication header is now X-API-Key: pm_live_.... The previous Authorization: Bearer pm_live_... format is no longer valid for API key authentication.

• Code2ASIN exports: JWT query param → presigned URL — Export downloads now require a presigned URL obtained via POST /code2asin/exports/{job_id}/download-url (valid 5 min). The old ?token=<jwt> query parameter is removed.

API changes

• External API (/api/v1/ext/*) — New M2M integration surface with 8 endpoints. Auth: X-API-Key. Scopes: ext:products:read, ext:products:write. See External API.

• WinDev Integration (/api/v1/windev/*) — New WinDev-optimized sync surface with 12 endpoints and WinDev-friendly envelope. Auth: X-API-Key. See WinDev Integration.

• Pagination standardized — All paginated endpoints now use page/per_page parameters (default: 20, max: 100). The skip/limit parameters are deprecated legacy aliases.

• Workflow Engine (/api/v1/workflow/*) — Product publication workflow: draft → review → approved → published → archived. Completeness gate ≥ 70%. 10 endpoints.

Removals

• GraphQL/Hasura proxy removed — The /api/v1/graphql proxy has been removed. Headless integrations should use the External API REST surface (/api/v1/ext/*) instead.

v4.5 — May 2026

Major platform update.

• Rebranding: Products Manager → Pixee PIM. Base URL updated to https://api.pixeepim.com/api/v1/
• Authentication: Added JWT Bearer Token support (120-minute TTL, refreshable). API keys now prefixed pm_live_ / pm_test_ with granular scopes
• Products: New bulk endpoints (POST /products/bulk, PATCH /products/bulk). Products now identified by UUID; EAN remains unique index. Added cost_price, weight, is_active fields
• Imports: Jobs moved to /imports/jobs. Added pause/resume/cancel controls. Added /preview endpoint for pre-flight validation. New automated recurring imports via /imports/automations
• Exports: Format-specific endpoints (/exports/csv/products, /exports/json/products, /exports/excel/products, /exports/zip/products). New export platforms (Google Drive, S3, MinIO, SFTP). Scheduled exports via /exports/schedules
• AI Enrichment: New multi-provider job system at /ai-enrichment/jobs. Support for OpenAI, Anthropic Claude, and configurable models. Cost tracking per job. Provider recommendation engine at /ai-services/recommendations/{use_case}
• Price Monitor: New endpoint structure at /prices/products/{id}. Added competitor price management, price history, stats, and best-price endpoints. Margin tracking
• EAN Lookup: Changed from GET /ean-lookup/{ean} to POST /ean-lookup/lookup with provider selection. Batch limit raised to 500 EANs. Added cache stats and pending queue management
• Webhooks: New events: import.started, supplier.created, supplier.updated, ean.resolved. Added delivery logs with per-entry retry (POST /webhooks/{id}/logs/{log_id}/retry)
• Code2ASIN: Full job lifecycle: create → start → pause/resume/cancel. Added results with confidence scoring, manual accept/reject, global statistics, and CSV/JSON export
• Rate Limiting: Replaced plan-based limits with per-tier system (AUTH, READ_STANDARD, WRITE_STANDARD, EXPORT_STANDARD, etc.) backed by Redis
• Pagination: Standardised to skip/limit parameters. Response wrapper changed from data to items. meta object enriched with has_next and has_previous
• Errors: Response format updated — detail field replaces error/message. Added 202 Accepted for async operations, 423 Locked for account lockout

v1.0 — March 2024

Initial public release.

• Products CRUD API (GET, POST, PATCH, DELETE)
• Bulk import via CSV and JSON (/imports)
• Export catalog to CSV/Excel (/exports)
• AI enrichment for descriptions and attributes (/enrichment)
• Connector sync for Shopify, WooCommerce, PrestaShop (/connectors)
• EAN lookup and validation (/ean-lookup)
• Price monitoring and alerts (/price-monitor)
• Code2ASIN mapping (/code2asin)
• Compliance & Digital Product Passport endpoints (/compliance)
• Webhook support for real-time event notifications
• API key authentication

API versioning

The current API version is v1. The version is included in the base URL:

https://api.pixeepim.com/api/v1/

When breaking changes are introduced, a new version (v2, etc.) will be released. The previous version will remain available for at least 12 months after the new version is published.