Partner API

Appearance

Changelog ​

2026-10-24, IP allowlist on every call, ping limit ​

A client's IP allowlist is now checked on every call, not only on POST /authorize. A token used from an address outside the allowlist gets 401 PARTNER_UNAUTHORIZED. Clients without an allowlist are unaffected. Tokens issued before this change are not bound to an address and keep working until they expire (at most one hour).

GET /ping works with either scope and is limited to 60 calls per minute per client, separate from the other limits.

POST /authorize returns 503 PARTNER_SNAPSHOT_UNAVAILABLE with Retry-After, instead of a bare 500, when its rate limiter is briefly unavailable.

2026-10-24, vehicle custom fields ​

company is gone from GET /fleet/vehicles and GET /fleet/vehicles/{vehicleId}. Each vehicle now has customFields: every custom field the organisation defined, with value: null when that vehicle has no value stored.

2026-10-24, scopes and tighter limits ​

GET /fleet/* now requires the fleet.data.read scope. A token that only has fleet.snapshot.read can still call GET /vehicles, GET /ping and POST /authorize. Ask an administrator to create a client with Fleet data checked, or to add that scope, then authorize again. Existing tokens do not gain the new scope until the next /authorize.

GET /fleet/driving-times is also limited to 30 calls per minute per client and 60 per minute per organisation, inside the shared 600.

include=activityToday on GET /vehicles is cached for about 12 seconds. Polling it faster does not recompute the day.

2026-10, v1 fleet data endpoints ​

Added read-only /fleet/* endpoints:

  • GET /fleet/vehicles, GET /fleet/vehicles/{vehicleId}, GET /fleet/groups, GET /fleet/drivers
  • GET /fleet/positions, GET /fleet/positions/{vehicleId}
  • GET /fleet/daily-summary, GET /fleet/trips, GET /fleet/driving-times
  • GET /fleet/events
  • GET /fleet/driver-scores
  • GET /fleet/geofences, GET /fleet/places, GET /fleet/points-of-interest

They require the fleet.data.read scope (see the 2026-10-24 note). They share a limit of 600 calls per minute per client. Driving times has a lower limit on top of that.

POST /authorize, GET /ping and GET /vehicles are unchanged.

Partner API v1