REST API v2.0 changelog
- Version 26.3.0.cl, March 2026
- Version 26.2.0.cl, February 2026
- Version 10.15.0.cl, December 2025
- Version 10.14.0.cl, November 2025
- Version 10.13.0.cl, October 2025
- Version 10.12.0.cl, September 2025
- Version 10.11.0.cl, July 2025
- Version 10.10.0.cl, July 2025
- Version 10.9.0.cl, June 2025
- Version 10.8.0.cl, April 2025
- Version 10.6.0.cl, March 2025
- Version 10.5.0.cl, December 2024
- Version 10.4.0.cl, November 2024
- Version 10.3.0.cl, October 2024
- Version 10.1.0.cl, August 2024
- Version 10.0.0.cl, July 2024
- Version 9.12.0.cl, May 2024
- Version 9.10.5.cl, April 2024
- Version 9.10.0.cl, March 2024
- Version 9.8.0.cl, January 2024
- Version 9.7.0, November 2023
- Version 9.6.0.cl, October 2023
- Version 9.5.0.cl, September 2023
- Version 9.4.0.cl, August 2023
- Version 9.3.0.cl, June 2023
- Version 9.2.0.cl, May 2023
- Version 9.0.0.cl, February 2023
This changelog lists the features and enhancements introduced in REST API v2.0. For information about new features and enhancements available for embedded analytics, see Whatβs New.
Version 26.3.0.cl, March 2026π
Webhook APIsπ
The Webhook API allows configuring Amazon S3 buckets as a storage destination for webhook payload delivery.
-
/api/rest/2.0/webhooks/create
Configures storage destination for webhook delivery. -
POST /api/rest/2.0/webhooks/{webhook_identifier}/update
Allows modifying storage configuration for a webhook. -
POST /api/rest/2.0/webhooks/search
Retrieves storage configuration details.
Object privilege APIsπ
Administrators and users with edit access to data models can now use /api/rest/2.0/security/metadata/manage-object-privilege to assign object-level permissions to users and groups and allow access to Spotter coaching information.
To fetch object privileges for a data model, user, or group, use the /api/rest/2.0/security/metadata/fetch-object-privileges API endpoint.
For more information, see Spotter coaching access.
User API enhancementsπ
The user APIs now support setting browser language as the default locale for ThoughtSpot users. Administrators can set the use_browser_language parameter as the default locale for ThoughtSpot users during the following API operations:
-
When creating a new user via
POST /api/rest/2.0/users/create -
When importing users via
POST /api/rest/2.0/users/import -
When updating user preferences via
POST /api/rest/2.0/users/{user_identifier}/update
When set to true, a userβs current locale preference is overridden and the browserβs language takes precedence.
The status of the browser language setting for a given user can also be retrieved using the following API endpoints:
-
POST /api/rest/2.0/users/search -
POST /api/rest/2.0/users/activate -
GET /api/rest/2.0/auth/session/user
Custom token generation APIπ
Note the following changes to request parameters for the /api/rest/2.0/auth/token/custom API endpoint:
-
The
filter_rulesparameter on the custom token authentication (/api/rest/2.0/auth/token/custom) page in the REST API Playground is no longer available for new configurations. Existing implementations that usefilter_rulescontinue to work. However, we strongly recommend migrating tovariable_valuesand ABAC via RLS for data security. -
The
parameter_valuesproperty is supported in the current release but will be deprecated in an upcoming version. Usingparameter_valuesfor row-level security will be phased out with this deprecation. Therefore, we recommend generating JWTs that pass data security attributes through formula variable attributes instead offilter_rulesorparameter_valuesfor ABAC.
For more information, see ABAC JWT migration guide and ABAC via RLS.
Version 26.2.0.cl, February 2026π
Security settings APIsπ
This release introduces the following Security settings APIs:
-
POST /api/rest/2.0/system/security-settings/configure
Allows configuring security settings at the Org level or for all Orgs on a ThoughtSpot instance. -
POST /api/rest/2.0/system/security-settings/search
Gets a list of security settings configured on a specific Org or for all Orgs on a ThoughtSpot instance.
For more information, see Security Settings.
Connection APIπ
ThoughtSpot administrators can now revoke OAuth refresh tokens for users who no longer require access to a data warehouse connection via the /api/rest/2.0/connections/{connection_identifier}/revoke-refresh-tokens API endpoint. When a token is revoked, the affected userβs session for that connection is terminated, and they must re-authenticate to regain access.
Connection configuration API enhancementsπ
You can now include same_as_parent and policy_process_options attributes in your API request to /api/rest/2.0/connection-configurations/create and /api/rest/2.0/connection-configurations/{configuration_identifier}/update endpoints.
The same_as_parent parameter specifies if the configuration should inherit settings from its parent. The policy_process_options attribute can be used to define additional policy or processing options for the connection, to allow granular control over connection behavior.
Liveboard Report API enhancementsπ
You can now download Liveboard reports in the CSV and XLSX formats through the POST /api/rest/2.0/report/liveboard API endpoint. Both these options are Early Access features.
For more information, see Data and Report APIs.
Email customization API enhancementsπ
The template_properties parameter now has two additional elements for email template customization:
-
contact_support_urlto add a customized link for contacting customer support. -
hide_contact_support_urlto hide the option of adding a link for customer support.
System configuration API enhancementsπ
The API response from the /api/rest/2.0/system/config endpoint indicates whether SAML or Okta authentication is enabled on the system.
User API enhancementsπ
-
POST /api/rest/2.0/users/import
Thepreferred_localeparameter allows configuring the preferred locale for users being imported via API request. -
POST /api/rest/2.0/users/search
Theinclude_variable_valuesparameter in the API request allows including variable values in the search response. The variable values can be assigned for a user via ABAC tokens or variable API documentation.
Version 10.15.0.cl, December 2025π
Spotter APIsπ
This release introduces the following Spotter APIs:
-
POST /api/rest/2.0/ai/instructions/set
Allows configuring natural language (NL) instructions on a model to coach Spotter on how to interpret queries, handle data nuances, and improve responses. -
POST /api/rest/2.0/ai/instructions/get
Gets NL instructions that are currently assigned to a model. -
POST /api/rest/2.0/ai/data-source-suggestions
Retrieves a list of recommended data sources based on the specified query string.
For more information, see Spotter AI APIs.
Variable APIsπ
You can now create formula variables using the /api/rest/2.0/template/variables/create API endpoint, and assign values and scope to these variables using the /api/rest/2.0/template/variables/update-values API endpoint.
For more information, see Configure variables.
ABAC tokens with formula variable attributesπ
The /api/rest/2.0/auth/token/custom API endpoint allows creating a token request with formula variables for ABAC via RLS implementation.
For more information, see ABAC via tokens.
Version 10.14.0.cl, November 2025π
New API endpointsπ
- System
-
This release introduces the following endpoints for configuring communication channel preferences.
-
POST /api/rest/2.0/system/preferences/communication-channels/configureBeta
Sets a communication channel preference for all Orgs at the cluster level or at the individual Org level. -
POST /api/rest/2.0/system/preferences/communication-channels/searchBeta
Gets details of the communication channel preferences configured on ThoughtSpot.For more information, see Configure communication channel settings.
-
- Webhook
-
The following APIs are introduced for webhook CRUD operations:
-
POST /api/rest/2.0/webhooks/createCreates a webhook. -
POST /api/rest/2.0/webhooks/{webhook_identifier}/updateUpdates the properties of a webhook. -
POST /api/rest/2.0/webhooks/searchGets a list of webhooks configured in ThoughtSpot or in a specific Org. -
POST /api/rest/2.0/webhooks/deleteDeletes the webhook.For more information, see Webhooks for Liveboard schedule events.
-
- Column security rules
-
-
POST /api/rest/2.0/security/column/rules/update
Updates column security rules for a given Table. -
POST /api/rest/2.0/security/column/rules/fetch
Gets details of column security rules for the tables specified in the API request.
-
Variable API enhancementsπ
The variable API enhancements are listed in the following sections. For additional details, see Define variables.
Variable creation APIπ
-
The variable creation endpoint
/api/rest/2.0/template/variables/createdoesnβt support assigning values to a variable. To assign values to a variable, use the/api/rest/2.0/template/variables/update-valuesendpoint. -
The
sensitiveparameter is renamed asis_sensitive.
Variables update APIs BREAKING CHANGEπ
The /api/rest/2.0/template/variables/update endpoint is deprecated and replaced with /api/rest/2.0/template/variables/update-values.
To update the properties of a specific variable, use the /api/rest/2.0/template/variables/{identifier}/update endpoint and to assign values to one or several variables in a single API call, use the POST /api/rest/2.0/template/variables/update-values endpoint.
Variables search APIπ
-
The variables search API endpoint
/api/rest/2.0/template/variables/searchnow includes thevalue_scopeparameter that allows you to filter the API response by the objects to which the variable is mapped. -
Filtering API response by
EDITABLE_METADATA_AND_VALUESoutput format is no longer supported.
User API enhancementsπ
The following APIs now support the variable_values parameter. The variable_values property can be used for user-specific customization.
-
POST /api/rest/2.0/users/create -
POST /api/rest/2.0/users/search -
POST /api/rest/2.0/users/activate
DBT API enhancementsπ
The /api/rest/2.0/dbt/generate-tml endpoint supports the model_tables attribute to list models and their tables.
Version 10.13.0.cl, October 2025π
New API endpointsπ
- Spotter
-
-
POST /api/rest/2.0/ai/agent/conversation/create
Creates a new AI-driven conversation session based on a specified data source. The resulting session sets the context for subsequent queries and responses. -
POST /api/rest/2.0/ai/relevant-questions/
Breaks down a user-submitted query into a series of analytical sub-questions using relevant contextual metadata. -
POST /api/rest/2.0/ai/agent/converse/sse
Allows sending a follow-up message or question to an ongoing conversation session and returns the AI agentβs response, including answers, tokens, and visualization details.
-
For more information, see Spotter AI APIs.
- Email customization
-
POST /api/rest/2.0/customization/email/update
Updates an existing email customization. For more information, see Customize email template.
API enhancementsπ
The following APIs were modified to include new parameters:
- TML export
-
The TML export API now supports the
export_with_column_aliasesparameter inexport_optionsto indicate whether to export column aliases of the model. - Email customization
-
The
/api/rest/2.0/customization/email/updateand/api/rest/2.0/customization/emailAPIs now includecompany_privacy_policy_urlandcompany_website_urlproperties in template variables, and a neworg_identifierparameter in the API request.
For more information, see Customize email template.
Deprecated endpointsπ
- Spotter
-
The
POST /api/rest/2.0/ai/analytical-questionsSpotter AI API Beta is deprecated and replaced with the new API endpoint,POST /api/rest/2.0/ai/relevant-questions/. - Email customization
-
The
POST /api/rest/2.0/customization/email/{template_identifier}/deleteemail customization API is deprecated and replaced with the new API endpoint,POST /api/rest/2.0/customization/email/delete.
Version 10.12.0.cl, September 2025π
New API endpointsπ
The following API endpoints are now available:
- Custom calendar
-
-
POST /api/rest/2.0/calendars/create
Creates a custom calendar. -
POST /api/rest/2.0/calendars/generate-csv
Exports a custom calendar in the CSV format. -
POST /api/rest/2.0/calendars/search
Gets custom calendars for the connection ID specified in the API request. -
POST /api/rest/2.0/calendars/{calendar_identifier}/delete
Deletes a custom calendar. -
POST /api/rest/2.0/calendars/{calendar_identifier}/update
Updates a custom calendar.
-
- Connection configuration
-
-
POST /api/rest/2.0/connection-configurations/create
Creates an additional configuration to an existing connection to a data warehouse. -
POST /api/rest/2.0/connection-configurations/search
Gets the required connection configuration objects. -
POST /api/rest/2.0/connection-configurations/{configuration_identifier}/update
Updates an existing connection configuration object. -
POST /api/rest/2.0/connection-configurations/delete
Deletes the connection configuration object.
-
Enhancements to APIsπ
- Export API endpoint
-
-
Answer TML:
ThePOST /api/rest/2.0/metadata/tml/exportAPI endpoint now allows fetching TML for Answer objects that do not have an ID or name assigned. Thesession_identifierandgeneration_numberparameters allow you to define the session ID and the Answer generation number in the API request. These optional attributes can be used for unsaved Answers generated from Spotter queries. -
Table TML:
ThePOST /api/rest/2.0/metadata/tml/exportAPI request allows exporting column security rules for Table TML objects. This attribute will export column security rules only if the object specified in the API request has column security applied and whenexport_associatedis set totrue.
-
Version 10.11.0.cl, July 2025π
Search metadata API enhancementsπ
The search metadata (/api/rest/2.0/metadata/search) API includes the following enhancements:
-
The
liveboard_reponse_versionparameter. It allows you to specify the response format for Liveboard objects. -
The
subtypesattribute to specify the sub-type for theLOGICAL_TABLEmetadata type. TheLOGICAL_TABLEtype allows to fetch objects such as Tables, Models, and Views. Thesubtypesparameter allows you to filter API response by specifying subcategories of the object type. -
The
include_only_published_objectsattribute to specify whether the search should should include published objects.
System APIπ
The API response generated from the GET /api/rest/2.0/system/config-overrides requests now returns the overrides in the config_override_info object.
TML APIπ
The API response for the POST /api/rest/2.0/metadata/tml/async/import and POST /api/rest/2.0/metadata/tml/async/status now includes the author_display_name property. This property shows the display name of user that initiated the asynchronous TML import request.
REST API Java SDKπ
The REST API Java SDK library artifacts are now available in the com.thoughtspot Maven namespace. If you are using Maven Central to import the REST API SDK artifacts, update the group ID in your pom.xml file to com.thoughtspot and the artifact ID to rest-api-sdk.
For more information, see REST API Java SDK.
Version 10.10.0.cl, July 2025π
Email template customization APIs:π
This release introduces the following new endpoints for email template customization:
-
POST /api/rest/2.0/customization/email
Allows you to personalize the ThoughtSpot notification emails content. -
POST /api/rest/2.0/customization/email/{template_identifier}/delete
Removes the customizations done for the ThoughtSpot notification emails. -
POST /api/rest/2.0/customization/email/search
Allows searching the email customization configuration if any set for ThoughtSpot. -
POST /api/rest/2.0/customization/email/validate
Validates the email customization configuration if any set for ThoughtSpot.
Group APIπ
The /api/rest/2.0/groups/search endpoint now supports the following new options in group search API requests:
-
include_users
When set totrue, it includes user details in the group search API response. -
include_sub_groups
When set totrue, it includes sub-groups in the group search response.
Schedule APIπ
You can now specify the personalised_view_id of a Liveboard in API requests to the following schedule APIs:
-
POST /api/rest/2.0/schedules/createTo schedule a job for a personalized view of the Liveboard, specify thepersonalised_view_id. -
POST /api/rest/2.0/schedules/{schedule_identifier}/updateTo update schedule details for a specific view of the Liveboard, specify thepersonalised_view_id.
Version 10.9.0.cl, June 2025π
Metadata parameterization and content publishing across Orgsπ
This release introduces the following new endpoints for metadata parameterization Beta and content publishing Beta across Orgs. To enable the content publishing feature and the related API operations on your instance, contact ThoughtSpot Support.
-
POST /api/rest/2.0/metadata/parameterizeBeta
Allows you to parameterize fields in metadata objects. -
POST /api/rest/2.0/metadata/unparameterizeBeta
Allows removing parameterization from fields in metadata objects -
POST /api/rest/2.0/security/metadata/publishBeta
Publish metadata objects to one or several Orgs on an instance. -
POST /api/rest/2.0/security/metadata/unpublishBeta
Removes published metadata objects from the Orgs specified in the API request. -
POST /api/rest/2.0/template/variables/createBeta
Allows creating a template variable which can be used to parameterize fields in a metadata object. -
POST /api/rest/2.0/template/variables/searchBeta
Allows searching template variables -
POST /api/rest/2.0/template/variables/{identifier}/updateBeta
Allows updating properties of a template variable. -
POST /api/rest/2.0/template/variables/updateBeta
Allows you to add, remove, or replace properties of one or several template variables. -
POST /api/rest/2.0/template/variables/{identifier}/deleteBeta
Deletes a template variable.
If your metadata objects are parameterized, you can use the show_resolved_parameters to filter the API response from /api/rest/2.0/connection/search and /api/rest/2.0/metadata/search endpoints to get only the objects with resolved parameterized values.
Liveboard Report APIπ
The Liveboard Report API now allows you to define the following properties:
-
tab_identifiers
Optional parameter to specify the name or GUID of a Liveboard tab to export only the visualizations in that tab. -
personalised_view_identifier
Optional parameter to specify the GUID of the Liveboard personalized view that you want to download.
In addition to these parameters, you can also define the following properties for PNG downloads:
-
image_resolution -
image_scale -
include_header
For more information, see Liveboard Report API.
REST API Java SDKπ
The REST API Java SDK enables developers to interact programmatically with ThoughtSpot REST APIs from Java applications. It provides a client library with Java methods and classes that map to API endpoints, handle authentication, send API requests, and allow creating and modifying ThoughtSpot resources and objects.
For information about how to install and use the SDK, see Java SDK for REST APIs.
Version 10.8.0.cl, April 2025π
New API endpointsπ
This version introduces the following endpoints:
-
POST /api/rest/2.0/metadata/update-obj-id
Update object IDs for given metadata objects.
|
Note
|
An object ID is a user-defined ID assigned to a ThoughtSpot object in addition to the system-generated GUID.
Note that the object ID generation for metadata objects is disabled by default. If this feature is enabled on your instance, you can use the |
Metadata APIπ
-
The
POST /api/rest/2.0/metadata/searchendpoint now supports the following parameters:-
include_discoverable_objects
Allows including Answers and Liveboards that are marked as discoverable by the object owner. -
metadata_obj_id
Filters metadata objects by the user-defined object ID. This parameter returns data only if the user-defined object ID feature is enabled on your instance.
-
TML APIsπ
-
The
all_orgs_contextparameter in TML import APIs (` /api/rest/2.0/metadata/tml/import` and/api/rest/2.0/metadata/tml/async/import) is deprecated and removed from the Playground. Useall_orgs_overrideto define the Org context in your API requests. -
The TML export API now allows exporting TML content with user feedback received for objects such as AI-generated Answers. The
export_with_associated_feedbacksattribute is set tofalseby default.
Report APIsπ
The Liveboard export API (/api/rest/2.0/report/liveboard) now allows overriding filters applied to a Liveboard. The override_filters array allows specifying several types of filters and updates the Liveboard data during export.
For more information, see Override filters.
Version 10.6.0.cl, March 2025π
New metadata API endpointsπ
-
POST /api/rest/2.0/metadata/headers/update
Updates metadata header for a given list of objects. -
POST /api/rest/2.0/metadata/worksheets/convert
Converts a Worksheet object to a Model.
Report APIsπ
BREAKING CHANGE
Downloading Liveboard reports in the CSV and XLSX file format via POST /api/rest/2.0/report/liveboard API endpoint is not supported. The CSV and XLSX file_format options have been removed because they were not functioning in the expected manner.
Parameters for regional settingsπ
The /api/rest/2.0/report/answer and /api/rest/2.0/report/liveboard now allow users to define the following regional_settings attributes:
-
currency_format -
user_locale -
number_format_locale -
date_format_locale
Custom object ID in TML and Metadata APIsπ
The following API endpoints allow you to specify a custom object ID (obj_identifier) in the metadata object properties:
-
POST /api/rest/2.0/metadata/search -
POST /api/rest/2.0/metadata/headers/update -
POST /api/rest/2.0/metadata/tml/export
TML import APIπ
The /api/rest/2.0/metadata/tml/async/import and POST /api/rest/2.0/metadata/tml/import endpoints allow skipping diff check when processing TMLs for imports. The skip_diff_check attribute is disabled by default and can be enabled to avoid importing objects that do not have any changes.
API response changesπ
The 200 and 201 response body from POST /api/rest/2.0/ai/answer/create and POST /api/rest/2.0/ai/conversation/{conversation_identifier}/converse API calls now includes the display_tokens property.
Version 10.5.0.cl, December 2024π
Custom access token APIπ
The /api/rest/2.0/auth/token/custom API endpoint allows setting the following attributes in API requests:
-
auto_create
Creates a user if username specified in the API request is not available in ThoughtSpot. By default, theauto_createis set totrue. -
REPLACEenum forpersist_option
Allows replacing persisted values with new attributes defined in the token generation API request. For more information, see ABAC via tokens.
TML import APIsπ
- TML async import
-
The
/api/rest/2.0/metadata/tml/async/importsupports setting the following properties via API requests:-
import_policy
Allows you specify if all objects should be imported during the TML import operation. Valid values are:-
PARTIAL_OBJECT(default) -
PARTIAL -
VALIDATE_ONLY -
ALL_OR_NONE
-
-
enable_large_metadata_validation
Indicates if the TMLs with large and complex metadata should be validated before the import.For more information about these attributes, see Import TML objects asynchronously.
-
- TML import API
-
The
/api/rest/2.0/metadata/tml/importAPI also supports setting theenable_large_metadata_validationattribute for large and complex metadata objects during TML import. - TML export API
-
The
/api/rest/2.0/metadata/tml/exportendpoint now allows you to include additional attributes when exporting TML for an object from ThoughtSpot. Theexport_optionsallows you to include the following optional attributes:-
include_obj_id_ref
Specifies whether to exportuser_defined_idof the referenced object. This setting is valid only if theUserDefinedIdproperty in TML is enabled. -
include_guid
Specifies whether to export the GUID of the object. This setting is valid only if theUserDefinedIdproperty in TML is enabled. -
include_obj_id
Specifies whether to export theuser_defined_idof the object. This setting is valid only if theUserDefinedIdproperty in TML is enabled.
-
- Share metadata
-
The
emailattribute is now optional in thePOSTrequest body sent to the/api/rest/2.0/security/metadata/shareAPI endpoint. - Role API
-
The
/api/rest/2.0/roles/createAPI endpoint now allows settingread_onlyattribute to specify if the role is read only. A read-only role cannot be updated or deleted.