Garage Door ScienceGarage Door Science
← Developers

Changelog

Tools added, auth changes, rate limit updates. Breaking changes are flagged. Subscribe via the JSON feed if you want a programmatic reader.

April 2026

  1. Apr 28, 2026Auth

    Cloudflare Turnstile required on third-party browser callers

    Browsers calling /api/v1/<tool> from a non-allowlisted Origin must now include a managed-mode Turnstile token in the request body as `turnstileToken`. Server-to-server clients (no Origin header) and Bearer-authed callers are exempt. Failures return 403 TURNSTILE_MISSING or TURNSTILE_INVALID. Cookbook example at /developers/use-cases.

  2. Apr 28, 2026AuthBreaking

    retrieveLabContext is now Bearer-authed (pro-only)

    Public-tier callers (anonymous /mcp + /api/v1/retrieveLabContext) now receive 401 AUTH_REQUIRED with a pointer to /developers. retrieveLabContext is the only tool with non-trivial per-call cost (OpenAI embeddings + pgvector). All other tools are still public. Same-origin browser requests from garagedoorscience.com continue working without a key. Custom GPTs / cookbook agents calling retrieval need to pass Authorization: Bearer gds_live_… going forward — grab a free key at /developers.

  3. Apr 28, 2026Tool

    visualDiagnose live; daily caps documented

    Vision-based diagnostic tool is fully shipped on /api/v1/visualDiagnose, /mcp, and /mcp-pro. Per-tool daily caps: 20/day per IP on the public tier, 100/day per IP/key on pro. Photo URLs are temporary (Vercel Blob with a 48-hour TTL enforced by daily prune cron). Spec at /developers/api.

  4. Apr 25, 2026Docs

    visualDiagnose tool surfaced on /developers/api docs

    Plan landed but the tool itself is still in active build — the registry entry will surface in /openapi.json + Scalar once shipped. Watch this entry for the activation date.

  5. Apr 24, 2026Tool

    submitInspection added to MCP_TOOLS

    New write tool: agents can submit a completed 24-point inspection on behalf of a homeowner. Returns a scored report URL, flagged items, and optionally queues the email. Excluded from voice agents (writes over voice are too risky); available on /mcp, /mcp-pro, and /api/v1/submitInspection.

  6. Apr 24, 2026Tool

    costEstimate tool added

    Resolve a structured cost range for a diagnosed issue, with optional door-size and ZIP modifiers for tighter regional + partner-aware estimates.

  7. Apr 24, 2026Auth

    CORS opened on /api/v1/* for cross-origin widget callers

    Browser-side widgets embedded on a contractor site can now call the REST shim directly without a server-side proxy. Bearer tokens still required for the pro tier.

  8. Apr 23, 2026Auth

    /mcp-pro launched with bearer-key auth

    New paid tier with 4× public rate limits and top-10 retrieval. Self-serve email magic-link signup at /developers; keys come back as gds_live_… one-time-shown.

  9. Apr 23, 2026Tool

    /mcp public endpoint live

    Public MCP endpoint, no auth required, 60/min and 2000/day per IP. Six homeowner-facing read tools: diagnose, routeByZip, getDoorStyles, getActivePromotions, getInspectionReferencePhotos, retrieveLabContext.

  10. Apr 23, 2026Docs

    OpenAPI 3.1 + interactive Scalar docs at /developers/api

    Auto-generated from the same MCP_TOOLS registry that powers /mcp — one source of truth, zero drift.