List a Site's versions

GET/v1/organization/{orgId}/sites/{siteId}/versions

US Region: https://public-api.sessionboard.com · EU Region: https://public-api-eu.sessionboard.com

Every publish, newest first, with a plain-language summary of what it changed. A Site's first publish also keeps the Site as it was before (source: baseline). Draft checkpoints are listed too (source: checkpoint): an unpublished draft by someone else, kept before an API or assistant edit changed it. Restoring any version writes the draft, never live. Also at GET /v1/sites/{siteId}/versions.

Request example

cURL

curl --request GET \
  --url 'https://public-api.sessionboard.com/v1/organization/{orgId}/sites/{siteId}/versions' \
  --header 'x-access-token: <api-token>'

JavaScript

const response = await fetch('https://public-api.sessionboard.com/v1/organization/{orgId}/sites/{siteId}/versions', {
  method: 'GET',
  headers: {
    "x-access-token": "<api-token>"
  },
});

const data = await response.json();
console.log(data);

Python

import requests

response = requests.request(
    "GET",
    "https://public-api.sessionboard.com/v1/organization/{orgId}/sites/{siteId}/versions",
    headers={
        "x-access-token": "<api-token>"
    },
)

print(response.json())

PHP

<?php

$curl = curl_init();

curl_setopt_array($curl, [
    CURLOPT_URL => "https://public-api.sessionboard.com/v1/organization/{orgId}/sites/{siteId}/versions",
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_CUSTOMREQUEST => "GET",
    CURLOPT_HTTPHEADER => [
        "x-access-token: <api-token>",
    ],
]);

$response = curl_exec($curl);
curl_close($curl);

echo $response;

Go

package main

import (
  "fmt"
  "io"
  "net/http"
)

func main() {
  req, _ := http.NewRequest("GET", "https://public-api.sessionboard.com/v1/organization/{orgId}/sites/{siteId}/versions", nil)
  req.Header.Add("x-access-token", "<api-token>")

  res, _ := http.DefaultClient.Do(req)
  defer res.Body.Close()
  body, _ := io.ReadAll(res.Body)

  fmt.Println(string(body))
}

Java

HttpRequest request = HttpRequest.newBuilder()
    .uri(URI.create("https://public-api.sessionboard.com/v1/organization/{orgId}/sites/{siteId}/versions"))
    .header("x-access-token", "<api-token>")
    .method("GET", HttpRequest.BodyPublishers.noBody())
    .build();

HttpResponse<String> response = HttpClient.newHttpClient()
    .send(request, HttpResponse.BodyHandlers.ofString());

System.out.println(response.body());

Try it

RegionUS Region — https://public-api.sessionboard.comEU Region — https://public-api-eu.sessionboard.com

Authorization

Send asAPI token (x-access-token)OAuth access token (Bearer)

Token

Your token stays in this page. It is sent only to the region above and is never saved; it is gone when you leave or reload the page.

Path parameters

orgId*

siteId*

GET

Send request

Authorizations

• x-access-tokenstringheader

  Organization API token. Generate from Organization Settings → API Tokens.

• AuthorizationBearer <token>headeror

  OAuth 2.1 access token. Obtained via the OAuth PKCE flow at /oauth/token.

Send one of these. See Authentication.

Path parameters

• orgIdstringpathrequired

  Your organization ID. Any other organization returns 404.

• siteIdstring<uuid>pathrequired

  The Site's id from List Sites.

Responses

200application/json

OK

• payloadobject
  Show child attributes

  • versionsSiteVersion[]
    Show child attributes

    • idstring<uuid>
    • versioninteger

      0 is the Site before its first versioned publish.

    • sourcestring

      Allowed values

      "publish", "baseline", "checkpoint"

    • summarystring[]
    • created_byinteger | null
    • created_atstring<date-time>

403

• SCOPE_REQUIRED — the token lacks read:sites (or read:marketing, read:learning, read:awards) for reads, or the matching write: scope for writes.
• FORBIDDEN — the token's user cannot edit this Site.

Response examples

200

{
  "payload": {
    "versions": [
      {
        "id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
        "version": 123,
        "source": "publish",
        "summary": [
          "<string>"
        ],
        "created_by": 123,
        "created_at": "2026-01-15T09:30:00Z"
      }
    ]
  }
}