v1.8.0
22 May 2026 Feature- New: read-only HTTP API under
/api/v1/with eight endpoints covering databases, schemas, models, validation, migration, and health. Feature-flagged off by default behindQUELLERY_API_ENABLED. Authentication is by bearer key; authorisation uses the same group-membership model that governs the GUI. - New: Admin → API Keys tab. Mint keys (secret shown once in the reveal panel), revoke them (soft-delete, so their history stays visible), and manage which groups they belong to.
- New: standalone /api-docs.html route reference, accessible to all editions including Trial. Trial customers can evaluate the API surface before upgrading.
- New: per-key activity column on the API Keys tab — created, last used, and request count, visible to your own operators on your own instance. Quellery never sees it.
- New: internal observability listener on
127.0.0.1:8081exposing/internal/live,/internal/ready,/internal/metrics, and/internal/version. Configurable viaQUELLERY_METRICS_BIND_ADDRESSandQUELLERY_METRICS_BIND_PORT. - New: Prometheus text-format exposition at
/internal/metricsfor your own scraper. - Changed: group memberships now accept both users and API keys as subjects. Existing memberships persisted under the old
userIdfield continue to decode unchanged — no migration required. - API access is available on Personal, Team, and Enterprise editions. Trial editions can read the API reference but cannot call the API.
- Note: the WebSocket path at
/wsremains an internal protocol used by the browser app. It is not supported for external programmatic use; integrations should call/api/v1/*instead.