Does the Braze Endpoints API need an API key?

Yes for the 30 operations checked: an anonymous request was refused, on 2026-09-15. Where the document said nothing about it, this replaces a silence with an observation.

ERR-2026-1726, ERR-2026-1754, ERR-2026-1767, ERR-2026-1771, ERR-2026-1782, ERR-2026-1785, ERR-2026-1815, ERR-2026-1847, ERR-2026-1918, ERR-2026-1944, ERR-2026-1957, ERR-2026-1971

Every record behind those answers

30 open records, observed 2026-09-10. Every claim below carries the command that disproves it. If one is wrong, it should be withdrawn — 121 have been across the whole registry.

credentials are required (observed) (30)

The document establishes no authentication requirement for this operation; an anonymous request is refused with 401. The requirement is now observed rather than unknown.

`ERR-2026-1726`	List Available Content Blocks	HTTP 401	checked 2026-09-15, 2 times
`ERR-2026-1754`	News Feed Card Analytics	HTTP 401	checked 2026-09-15, 2 times
`ERR-2026-1767`	Segment List	HTTP 401	checked 2026-09-15, 2 times
`ERR-2026-1771`	Get Upcoming Scheduled Campaigns and Canvases	HTTP 401	checked 2026-09-15, 2 times
`ERR-2026-1782`	Segment Details	HTTP 401	checked 2026-09-15, 2 times
`ERR-2026-1785`	Send Analytics	HTTP 401	checked 2026-09-15, 2 times
`ERR-2026-1815`	Canvas Data Series Analytics	HTTP 401	checked 2026-09-15, 2 times
`ERR-2026-1847`	News Feed Cards Details	HTTP 401	checked 2026-09-15, 2 times
`ERR-2026-1918`	KPIs for Daily App Uninstalls by Date	HTTP 401	checked 2026-09-15, 2 times
`ERR-2026-1944`	See Content Block Information	HTTP 401	checked 2026-09-15, 2 times
`ERR-2026-1957`	Query Hard Bounced Emails	HTTP 401	checked 2026-09-15, 2 times
`ERR-2026-1971`	Monthly Active Users for Last 30 Days	HTTP 401	checked 2026-09-15, 2 times
`ERR-2026-1979`	Segment Analytics	HTTP 401	checked 2026-09-15, 2 times
`ERR-2026-1980`	Daily Active Users by Date	HTTP 401	checked 2026-09-15, 2 times
`ERR-2026-1981`	Campaign List	HTTP 401	checked 2026-09-15, 2 times
`ERR-2026-1997`	Daily New Users by Date	HTTP 401	checked 2026-09-15, 2 times
`ERR-2026-2004`	Custom Events List	HTTP 401	checked 2026-09-15, 2 times
`ERR-2026-2024`	Canvas List	HTTP 401	checked 2026-09-15, 2 times
`ERR-2026-2106`	List User's Subscription Group - SMS	HTTP 401	checked 2026-09-15, 2 times
`ERR-2026-2109`	News Feed Cards List	HTTP 401	checked 2026-09-15, 2 times
`ERR-2026-2126`	Campaign Details	HTTP 401	checked 2026-09-15, 2 times
`ERR-2026-2128`	See Email Template Information	HTTP 401	checked 2026-09-15, 2 times
`ERR-2026-2136`	Canvas Data Analytics Summary	HTTP 401	checked 2026-09-15, 2 times
`ERR-2026-2161`	Query List of Unsubscribed Email Addresses	HTTP 401	checked 2026-09-15, 2 times
`ERR-2026-2165`	Campaign Analytics	HTTP 401	checked 2026-09-15, 2 times
`ERR-2026-2166`	Custom Events Analytics	HTTP 401	checked 2026-09-15, 2 times
`ERR-2026-2171`	Canvas Details	HTTP 401	checked 2026-09-15, 2 times
`ERR-2026-2185`	App Sessions by Time	HTTP 401	checked 2026-09-15, 2 times
`ERR-2026-2186`	List User's Subscription Group Status - SMS	HTTP 401	checked 2026-09-15, 2 times
`ERR-2026-2224`	List Available Email Templates	HTTP 401	checked 2026-09-15, 2 times

Check it yourself:

curl -sS -o /dev/null -w '%{http_code}\n' https://rest.iad-01.braze.com/content_blocks/list

If a record here is wrong

Run its check. If the answer differs from what is written, say so here and it will be withdrawn — 121 already have been. A record nobody can contest is a record asking to be trusted, which is the opposite of the point.

What this page does not tell you

This is not a clean bill of health for anything not listed. The registry was built from a sample of two directories, and an operation absent from it was almost certainly never examined. Silence here means not looked at, not looked at and fine — which is the same mistake this registry exists to record in other people.

What this is

A record of defects in the public description of machine-callable operations: documents a directory claims are live and are not, hosts that no longer resolve, specifications that contradict the API they describe. It is not a ranking, not a review, and not a judgement about the service. No credential is ever sent to anything listed here.

The whole registry, machine-readable: errata.json. Index of subjects: index.html.

Built from registry errata-2026-09-10@b7cb54d3a847. If manifest.json shows a different one, this page is behind the records and should not be trusted over them.