This is an overview of the changes to the Webflow APIs and related tools. To filter the list, select one or more tags.

August 22, 2024

Enhanced security and permissions, and new endpoints for site configuration

In this latest release, we’ve rolled out some significant updates to our APIs. First up, we’ve strengthened security by ensuring that only Workspace Admins can manage changes to Apps. In the Data API, we’ve introduced new endpoints that give you greater control over robots.txt files and site redirects. And for those using the Designer API, you can now subscribe to alerts when users select new CMS items on collection pages, making it simpler to keep track of automatically generated page paths.

Security & permissions

  • Enhanced Workspace App Management Permissions: Previously, all members within a Workspace had the ability to manage Apps (for example, uploading new bundles, updating redirect URIs). Apps now enforce stricter permissions, allowing only Workspace Admins to perform these actions. This ensures that sensitive operations are restricted to authorized personnel.
  • Mandatory 2FA for Workspace Admins: To further enhance security, Workspace Admins are now required to have two-factor authentication (2FA) enabled to upload new App Bundles. This additional security layer helps protect your Workspace from unauthorized access and potential threats.

New endpoints

Robots.txt

Site redirects


Security & permissions updates for Webflow Apps

Webflow Apps now require enhanced security and permissions.

  • Enhanced Workspace App Management Permissions: Previously, all members within a Workspace had the ability to manage Apps (for example, uploading new bundles, updating redirect URIs). Webflow enforces stricter permissions, allowing only Workspace Admins to perform these actions. This ensures that sensitive operations are restricted to authorized personnel.
  • Mandatory 2FA for Workspace Admins: To further enhance security, Workspace Admins are now required to have two-factor authentication (2FA) enabled to upload new App Bundles. This additional security layer helps protect your Workspace from unauthorized access and potential threats.

SDK version


August 22, 2024

Subscribe to CMS collection page changes

The Designer API now includes a new event subscription method for CMS collection pages:

  • Subscribe to CMS Collection Page Events
    Track when users interact with CMS collection pages and items. This event triggers in two scenarios:
    • When a user navigates to a collection page
    • When a user selects a different CMS item within a collection page

This event subscription works with both CMS and Ecommerce collection pages.