Keep track of every change to the Kolide API.

This changelog lists additions and updates to the Kolide API, in chronological order.

October 13th, 2025

• Add people/{personId}/person_groups endpoint.

October 3rd, 2025

• Add person_groups/{personGroupId}/people endpoint.

August 5th, 2025

• Add searchable person_name field in the /auth_logs endpoint.
• Add searchable person_email field in the /auth_logs endpoint.
• Add searchable person_id field in the /auth_logs endpoint.
• Add searchable device_id field in the /auth_logs endpoint.
• Add searchable result field in the /auth_logs endpoint.

July 24th, 2025

• Add reporting/queries/{queryId}/results endpoint providing paginated reporting query results.
• Allow omitting results in the /reporting/queries and /reporting/queries/{id} endpoints via the omit_results=1 URL query parameter. API responses may time out for reporting queries with large resultsets. In such cases, results can be omitted from these responses by including a URL query parameter of omit_results=1. To retrieve query resultsets in a paginated fashion, please use the new /reporting/queries/{queryId}/results endpoint.

March 14th, 2025

• Add searchable device_display_name field in the checks/{checkId}/results/ endpoint.
• Add searchable device_display_name field in the devices/{deviceId}/check_results/ endpoint.
• Add searchable check_name field in the checks/{checkId}/results/ endpoint.
• Add searchable check_name field in the devices/{deviceId}/check_results/ endpoint.
• Add searchable status field in the checks/{checkId}/results/ endpoint.
• Add searchable status field in the devices/{deviceId}/check_results/ endpoint.

February 4th, 2025

• Add searchable id field in the /people endpoint.

January 21st, 2025

• Add whoami/ endpoint.

January 17th, 2025

• Add devices/{deviceId}/check_results/ endpoint.

December 12th, 2024

• Add kolide_provided field in the /checks endpoint.

November 19th, 2024

• Add updatable options field to the checks/{checkId}/configurations/ endpoint.

November 14th, 2024

• Add update support to the checks/{checkId}/configurations/ endpoint.

October 21st, 2024

• Add checks/{checkId}/configurations/ endpoint.

October 3rd, 2024

• Add checks/{checkId}/results/ endpoint.

September 11th, 2024

• Add support for device_trust.status_changed webhooks. This event is sent when a device’s authentication status changes.

September 6th, 2024

• Add searchable check_slug field in the checks endpoint.

July 24th, 2024

• Add osquery_sql_template, issue_title, fix_instructions_template, and rationale_template fields to GET /checks and GET /checks/{checkId} endpoints.

July 2nd, 2024

• Add support for deleting Live Query campaigns

June 27th, 2024

• Add more detailed ‘actor’ information to audit_logs list and show endpoints.

June 21st, 2024

• Add support for admin_users.created webhook events. This event is sent when a new admin user is created.

June 17th, 2024

Bug fix: This makes the responses match the documented types.

• Ensure identifier on registered_owner_info is a string for GET /devices and GET /devices/{id}.
• Ensure identifier on registered_owner_info and device_info are a string for DELETE /devices/{deviceId}/registration.
• Ensure identifier on requester_information, device_information, and issues are a string for GET /exemption_requests, GET /exemption_requests/{id}, PATCH /exemption_requests/{id}, and PUT /exemption_requests/{id}.
• Ensure identifier on device_information and check_information are a string for GET /issues and GET /issues/{id}
• Ensure identifier on device_information is a string for GET /live_query_campaigns/{liveQueryCampgainId}/query_results
• Ensure identifier on requester_information and device_information are a string for GET /registration_requests, GET /registration_requests/{id}, PATCH /registration_requests/{id}, and PUT /registration_requests/{id}

June 15th, 2024

• Deprecate internal_denial_reason in favor of internal_message for PATCH /registration_requests/{id} to support adding a note when approving requests. More details.

June 3rd, 2024

• Add create support to /live_query_campaigns endpoint.
• Add update support to /live_query_campaigns endpoint.

March 28th, 2024

• Add people/{personId}/open_issues/ endpoint.

March 21st, 2024

• Add support for auth_logs.failure webhooks. This event is sent when an end-user attempts to authenticate through Kolide but never successfully finishes the authentication attempt.

March 12th, 2024

• Add will_block_at filtering to /devices endpoint.

March 11th, 2024

• Add support for auth_logs.success webhooks. This event is sent when an end-user successfully completes an SSO authentication through Kolide.

March 5th, 2024

• Add searchable last_rechecked_at field in the issues endpoint.

January 22nd, 2024

• Add /packages and /packages/{id} endpoints for information about agent installation packages.