This is an overview of the changes to the Webflow APIs and related tools. To filter the list, select one or more tags.
Enhanced security and permissions, and new endpoints for site configuration
In this latest release, we’ve rolled out some significant updates to our APIs. First up, we’ve strengthened security by ensuring that only Workspace Admins can manage changes to Apps. In the Data API, we’ve introduced new endpoints that give you greater control over robots.txt files and site redirects. And for those using the Designer API, you can now subscribe to alerts when users select new CMS items on collection pages, making it simpler to keep track of automatically generated page paths.
Security & permissions
- Enhanced Workspace App Management Permissions: Previously, all members within a Workspace had the ability to manage Apps (for example, uploading new bundles, updating redirect URIs). Apps now enforce stricter permissions, allowing only Workspace Admins to perform these actions. This ensures that sensitive operations are restricted to authorized personnel.
- Mandatory 2FA for Workspace Admins: To further enhance security, Workspace Admins are now required to have two-factor authentication (2FA) enabled to upload new App Bundles. This additional security layer helps protect your Workspace from unauthorized access and potential threats.
New endpoints
Robots.txt
- Replace robots.txt: Replace the
robots.txtconfiguration for various user agents. - Update robots.txt: Update the
robots.txtconfiguration for various user agents. - Delete user-agent rules: Remove specific rules for a user-agent in your
robots.txtfile.
Site redirects
- Get site redirects: Fetch a list of all URL redirect rules configured for a specific site.
- Create a site redirect rule: Add a new URL redirection rule to a site.
- Delete site redirect rules: Remove URL redirection rules from a site.
Security & permissions updates for Webflow Apps
Security & permissions updates for Webflow Apps
Webflow Apps now require enhanced security and permissions.
- Enhanced Workspace App Management Permissions: Previously, all members within a Workspace had the ability to manage Apps (for example, uploading new bundles, updating redirect URIs). Webflow enforces stricter permissions, allowing only Workspace Admins to perform these actions. This ensures that sensitive operations are restricted to authorized personnel.
- Mandatory 2FA for Workspace Admins: To further enhance security, Workspace Admins are now required to have two-factor authentication (2FA) enabled to upload new App Bundles. This additional security layer helps protect your Workspace from unauthorized access and potential threats.
SDK version
Subscribe to CMS collection page changes
The Designer API now includes a new event subscription method for CMS collection pages:
- Subscribe to CMS Collection Page Events
Track when users interact with CMS collection pages and items. This event triggers in two scenarios:- When a user navigates to a collection page
- When a user selects a different CMS item within a collection page
This event subscription works with both CMS and Ecommerce collection pages.