Skip to the content
Documentation
Help Start
Reading in:
  • German: 9,059 of 9,059 pages
About the help in other languages
All help pages

Story: the REST API

A feature story about Exponential's REST content API - one extension serving versions 1 and 2, reads at both versions and writes at v2, permission checks on every call, OAuth2 tokens and personal API keys - for coverage…

Download as PDF

Address: https://doc.exponential.earth/exphelp/viewer/help/press/story-rest-api.md

On this page

Story: the REST API

This page is for technical journalists who cover headless content management and integrations. Exponential serves its content over a REST API, and the 6.0.15 line put the two API versions into one extension.

Contents

  1. The story in one paragraph
  2. Facts you can print
  3. What not to claim
  4. Angles and headline ideas

The story in one paragraph

The README lists "A headless CRUD REST API" among the main features. In Exponential 6.0.15, versions 1 and 2 of the REST content API come from one extension, ezprestapi: reads answer at v1 and v2, writes (create, update, delete) at v2 only, and "every read and write checks the user's policies ... whatever the request was authenticated with". Clients authenticate with an OAuth2 token or a personal API key (REST API v1 and v2). REST v2 with write support was the headline of 6.0.9 in a 7x press release of 2025 (Earlier press releases and coverage).

Facts you can print

FactSource
Reads at /api/ezp/v1/... and /api/ezp/v2/...; writes at v2 onlyREST API v1 and v2, In short
Permission checks on every call (content/read, content/create, content/edit, content/remove)same
OAuth2 tokens or personal API keyssame; Personal API keys
The old ezprestapiprovider extension is deprecated; clients see no changesame
The guide's statements were checked on the demonstration server on 15 October 2026REST API v1 and v2

What not to claim

Do not saySay instead
"GraphQL in Exponential 6"GraphQL belongs to the Symfony line (Exponential Platform DXP) (Story: Exponential Platform DXP)
"Anyone can write through the API"Writes need authentication and the user's permissions
"The API is new"The API has existed for years; 6.0.15 unifies the versions and adds checks

Angles and headline ideas

  • "Headless with permissions: every API call checks the user's rights."
  • "One API extension, two versions, no breaking change."

Become an Exponential Partner

Partners share their information, provide funding, contribute back and develop the products with us, and that is how Exponential grows. A partner website and dashboard are planned for mid-2027: please become a partner today to speed up our growth rate and land new features faster.

Something wrong on this page? Report an error

Documentation license

This documentation is free documentation, licensed under the GNU Free Documentation License 1.3 or later.

Exponential Copyright © 1998-2026 Exponential Foundation and 7x