Changelog - Aptly API

May 21, 2026

New Endpoint: POST /api/email/create-draft — Create a new outbound email draft discussion from recipient and content fields (to, cc, bcc, subject, body, channelId). Returns streamId and draftUuid for use with POST /api/email/send.
New Endpoint: POST /api/email/send — Send an outbound email, either from an existing draft (discussionId + uuid) or on-the-fly from bare email fields. Auto-assignment is always applied when the draft is finalized.
Enhancement: Delegate tokens now support an email:* scope. When granted (read or write), the token can call POST /api/email/create-draft and POST /api/email/send on behalf of the user.

Fix: Card objects in board responses now consistently include both _id and cardId fields.

New Endpoint: POST /api/app/verify — Verify a short-lived delegate token and retrieve user identity without an API key. For use by embedded apps and plugins that receive a token from the Aptly platform.
New Endpoint: POST /api/board/verify-user — Verify a delegate token scoped to board access and retrieve the associated user context.
New Endpoint: GET /api/board/{boardId}/{cardId}/comments — List all comments on a card in chronological order.
New Endpoint: GET /api/board/{boardId}/{cardId}/contacts — List person contacts linked to a card via its person fields.
New Endpoint: POST /api/board/{boardId}/{cardId}/comment — Add or update a comment on a card.
New Endpoint: POST /api/board/{boardId}/{cardId}/file — Upload a file attachment to a card (multipart/form-data, max 50 MB).
New Endpoint: POST /api/board/{boardId}/tabView — Embed a tab view on a board.
Enhancement: Board, Contacts, and Knowledge endpoints now accept delegate token authentication (Authorization: DelegateToken <token>) in addition to API keys. Tokens carry explicit read and write scopes per resource.
Enhancement: GET /api/board/{boardId} now supports an assignee query parameter to filter cards by assigned user.
Enhancement: Cards created or updated via a delegate token now record the authenticated user as createdBy / updatedBy rather than attributing changes to “aptly”.

New Endpoint: GET /api/company/info — Retrieve your company’s profile including name, address, contact details, and logo URL.

New Endpoint: GET /api/users — List all non-archived users in your company.

New Endpoint: GET /api/boards — Discover all API-enabled boards for your account, including their UUIDs and ready-to-use endpoint URLs for card operations.

Enhancement: GET /api/contacts now supports updated_after and updated_before query parameters to filter contacts by last-updated timestamp.