Vintages

200 success

The vintages.

As application/json.

X-RateLimit-Limit header

The per-minute request ceiling that applies.

X-RateLimit-Remaining header

Requests left in the current window.

X-RateLimit-Reset header

Seconds until the window refills: on every answer, the time until the bucket is full again; on a refusal, until a request is allowed (as Retry-After).

X-DTG-Sandbox header

Present, with the value true, on every response to a sandbox API key, success and problem alike; it is set as soon as the credential is known. Every value in a sandbox response is synthetic and must never be published as data. Absent for live keys and sessions.

Cache-Control header

no-store.

dataarray of DataVintagealways present

Every readable vintage in the caller's scope that has not been withdrawn, newest first. A file the server cannot read (a build still being written) is left out rather than failing the list.

data[].idstringalways present

The build id (20260913; a sandbox key sees sandbox-2026.1 style ids). Pass it as vintage= to pin a request to this vintage, which never changes once released.

data[].labelstring or nullalways present

The public name to cite: DTG <year>.<N>, N counting releases in the calendar year; a correction adds r<N> (DTG 2026.3r1); a sandbox vintage is SANDBOX 2026.1. Null only for a vintage no manifest labels.

data[].built_atstring or nullalways present

When the build finished, as its manifest records it (ISO 8601); null if not recorded.

data[].currentbooleanalways present

True for the vintage requests read when no vintage= is given. Exactly one row is current; the pointer moves atomically at release.

data[].entitledbooleanalways present

Whether this caller may request it as vintage=: the current vintage always, earlier ones when the plan includes prior vintages (every paid plan), and a superseded one never, whatever the plan. Every sandbox vintage is entitled for a sandbox key.

data[].superseded_bystring

Present only on a vintage withdrawn and replaced by a correction: the id of the replacement. A request pinned to this vintage answers 404 vintage_superseded. (A vintage withdrawn with no correction yet is not listed at all.)

data[].sandboxtrue

Present, and true, on every row a sandbox key sees: a synthetic vintage.

metaobject

Sandbox keys only.

meta.sandboxtruealways present

Always true: these are synthetic vintages.

400 error

Bad request. Codes: unknown_parameter (a query parameter this route does not take; parameters[] names them), repeated_parameter (a parameter given more than once; parameter), bad_request (more than 50 query parameters).

As application/problem+json.

401 error

Unauthenticated. Codes: unauthenticated (no credential, or an API key or session that is unknown or expired); key_revoked (an API key that was revoked: revoked_at, and reason -- holder, admin, member_removed, seat_removed, api_disabled, addon_ended, account_closed, org_closed, retired, or null for a key revoked before T110 -- and a sentence saying when and why).

As application/problem+json.

403 error

Forbidden. Codes: no_membership (the account has no active organization membership), account_suspended (O56: the caller's own account is suspended by DTG; reason where recorded), org_suspended (the organization is suspended; organization {id, name} and, where recorded, reason), org_closed (the organization is closed; organization), wrong_instance (a key of the mode this process does not serve, for example a sandbox key on a live-only process; expected, and base_url naming the address that serves it).

As application/problem+json.

404 error

Not found. Codes: not_found (an X-DTG-Org header naming an organization the caller does not belong to).

As application/problem+json.

414 error

URI too long. Codes: uri_too_long (the request URL is longer than the configured maximum, 8,192 bytes by default).

As application/problem+json.

429 error

Rate limited, and only that: rate_limited (over the 120 requests a minute per credential or 300 a minute per organization; the sandbox ceilings are lower). Retry-After and X-RateLimit-* say when to retry. This route is not admission-gated or metered.

As application/problem+json.

Retry-After header

Seconds to wait before retrying.

X-RateLimit-Limit header

The per-minute request ceiling that applies.

X-RateLimit-Remaining header

Requests left in the current window.

X-RateLimit-Reset header

Seconds until the window refills: on every answer, the time until the bucket is full again; on a refusal, until a request is allowed (as Retry-After).

500 error

Server error. Codes: internal_error (for example a vintage file the server cannot read).

As application/problem+json.