--- title: "Harbyn | API Change Monitoring and Migration PRs" description: "Track changes to APIs, SDKs, AI models and MCP. Find affected code locally and review supported fixes as pull requests with Harbyn." canonical: "https://harbyn.com/" last-updated: 2026-10-25 --- # Harbyn Markdown version of . > Track changes to APIs, SDKs, AI models and MCP. Find affected code locally and review supported fixes as pull requests with Harbyn. **Your deploy is fine. The API it calls isn't.** Harbyn tracks external changes across APIs, SDKs, AI models and MCP, maps supported changes to your code, and proposes fixes for review. Before a change lands, you get the file and line that calls it, the date, the replacement, and the vendor's own announcement. The scanner runs on your machine. Your code never leaves it. Beta: `npx harbyn scan` (Node.js 22 or later). Copy prompt for your agent: https://harbyn.com/prompts/scan.md - Code stays on your machine - Every finding links its source - Signed feed ## The breaks nobody warns you about Your dependency file lists maybe half of what your code relies on. This is the other half. ### Beyond the lockfile REST APIs, model IDs, MCP servers and webhooks never appear in package.json. Harbyn reads the calls themselves, so the half of your stack Dependabot cannot see gets checked too. ### The exact line, not the SDK Not "you use this SDK". The finding names src/llm/client.ts:44, the identifier it matched, the date it stops working and what to change it to. ### The migration PR is already open A branch with the diff, the vendor announcement and the risk level. You review it and you merge it. Harbyn never merges on its own. ### Payments and auth stay alert-only Code that moves money, signs users in or handles keys is never edited for you. You get the alert and the evidence; the change stays yours. ### One retirement calendar Every model and API version you call, with its announced shutdown date, in one view. History stays history: it never shows up as an upcoming warning. ### A feed you can verify Every event is signed and links the vendor page it came from, with the day we recorded it. Check the signature yourself before you trust a line of it. ## Upcoming deadlines The next 10 of 188 dated changes we are tracking, soonest first. Each one links the vendor's own announcement. | Date | In | Vendor | Change | Use instead | Source | | --- | --- | --- | --- | --- | --- | | Oct 26, 2026 | in 1 day | Amazon Selling Partner API | October listing attribute usage and enumeration value updates | - | | | Oct 26, 2026 | in 1 day | OpenRouter | arcee-ai/trinity-large-thinking expire 2026-10-26 | - | | | Oct 28, 2026 | in 3 days | Amazon Selling Partner API | ORDER\_CHANGE notifications add PreFulfillmentStatusChange for Amazon Autos | - | | | Oct 30, 2026 | in 5 days | Google Cloud Run and Functions | Node.js 20 runtime decommission | - | | | Oct 31, 2026 | in 6 days | AWS Lambda | Python 3.10 runtime deprecation | - | | | Oct 31, 2026 | in 6 days | Mistral AI | Z.ai GLM 5.2 (zai-glm-5-2) retires on Mistral on October 31, 2026 | `zai-glm-5-3` | | | Oct 31, 2026 | in 6 days | OpenRouter | poolside/laguna-s-2.1 and 3 more expire 2026-10-31 | - | | | Nov 1, 2026 | in 7 days | Amazon Selling Partner API | Customs identifiers required for EU-bound FBM shipments | - | | | Nov 2, 2026 | in 8 days | Jira / Atlassian Cloud | Atlassian Analytics dashboard subscriptions being removed | - | | | Nov 2, 2026 | in 8 days | Fireworks AI | DeepSeek V4 Flash 0731 retires from Serverless Training November 2 | - | | [All 188 deadlines](https://harbyn.com/deadlines.md). [Full calendar (.ics)](https://harbyn.com/calendar.ics). ## Your code never leaves your machine Read the scanner. It is short, it is open, and it is the part that touches your code. - **Scanner: Read-only.** It opens files and never writes one. It does not follow symlinks and never leaves the folder you point it at. - **Scanner: Secrets stay closed.** .env files, private keys, .npmrc and credential files are never opened, not even locally. The summary says how many it skipped. - **Scanner: One request: the feed.** The only network call downloads the change feed over HTTPS, with redirects refused. No telemetry, no upload, no account to run a scan. - **Feed: Signed with Ed25519.** The feed is trusted because its signature verifies against keys pinned inside the scanner, not because of the server it came from. - **Feed: No stale or replayed feeds.** A feed past its expiry, or older than one you already accepted, is rejected. Nobody can hand you last month's list as today's. - **Feed: Fails closed.** If the feed does not verify, the scan reports nothing rather than something it cannot vouch for, and exits with an error. ## How it works Three steps on your side. The heavy lifting happens before the change reaches you. 01. **Run the scan.** One command in the repo, or the GitHub Action on every pull request. It lists the vendors, models and API versions your code actually calls. `npx harbyn scan` 02. **Read the finding.** Each finding is a file and line, a date, a replacement and the link to the vendor page that announced it. Nothing to take on faith. `src/ai/thumbnails.ts:5 gemini-2.5-flash-image` 03. **Merge the PR.** Harbyn opens a branch with the change, the evidence and the tests it ran. You review it like any other PR. It never merges itself. `harbyn/migrate-gemini-2.5-flash-image` ### Where the AI is, exactly We read the vendor pages so you do not have to. The model only touches the part that has no structure, and it is never the last word. - **Structured sources.** OpenAPI specs, release feeds and deprecation tables are parsed deterministically. No model involved. - **Prose changelogs.** Read by an LLM that extracts dates and identifiers, then checked against the text of the page it read. - **Strict schema.** Anything that does not validate is dropped, not guessed. Free text is capped and shown as text only. - **Review before publishing.** Breaking and security changes wait in a review queue, checked against the saved source, before they reach the feed. ## What we watch today 147 vendors, 1944 recorded changes. Every event cites the vendor page it came from. ### AI models and APIs Model retirements, snapshot shutdowns and API version changes, with the replacement model when the vendor names one. [OpenRouter](https://harbyn.com/vendors/openrouter), [ElevenLabs API](https://harbyn.com/vendors/elevenlabs), [Anthropic](https://harbyn.com/vendors/anthropic), [LangSmith](https://harbyn.com/vendors/langsmith), [Google Gemini API](https://harbyn.com/vendors/google-gemini), [Azure OpenAI](https://harbyn.com/vendors/azure-openai), [OpenAI](https://harbyn.com/vendors/openai), [Perplexity API](https://harbyn.com/vendors/perplexity), [fal.ai](https://harbyn.com/vendors/fal), [Deepgram](https://harbyn.com/vendors/deepgram), [Together AI](https://harbyn.com/vendors/together), [AssemblyAI](https://harbyn.com/vendors/assemblyai), [Fireworks AI](https://harbyn.com/vendors/fireworks), [vLLM](https://harbyn.com/vendors/vllm), [Runway (Runway Dev API)](https://harbyn.com/vendors/runway), [Mistral AI](https://harbyn.com/vendors/mistral), [Pinecone](https://harbyn.com/vendors/pinecone), [xAI API](https://harbyn.com/vendors/xai), [AWS Bedrock](https://harbyn.com/vendors/aws-bedrock), [Qwen (Alibaba Cloud Model Studio)](https://harbyn.com/vendors/qwen), [Google Vertex AI](https://harbyn.com/vendors/vertex-ai), [Langfuse](https://harbyn.com/vendors/langfuse), [Black Forest Labs (FLUX API)](https://harbyn.com/vendors/black-forest-labs), [Cerebras](https://harbyn.com/vendors/cerebras), [Cohere](https://harbyn.com/vendors/cohere), [Kling AI (Kuaishou) API](https://harbyn.com/vendors/kling), [Ollama](https://harbyn.com/vendors/ollama), [DeepSeek API](https://harbyn.com/vendors/deepseek), [Groq](https://harbyn.com/vendors/groq), [Hugging Face Inference](https://harbyn.com/vendors/huggingface-inference), [MiniMax API](https://harbyn.com/vendors/minimax), [AI21 Labs](https://harbyn.com/vendors/ai21), [GLiNER (urchade/GLiNER)](https://harbyn.com/vendors/gliner), [llama.cpp](https://harbyn.com/vendors/llama-cpp), [Luma AI (Luma Agents API / Dream Machine API)](https://harbyn.com/vendors/luma), [Moonshot AI (Kimi)](https://harbyn.com/vendors/moonshot), [Replicate](https://harbyn.com/vendors/replicate), [Writer](https://harbyn.com/vendors/writer), [Zhipu AI / Z.ai (GLM API)](https://harbyn.com/vendors/zhipu) ### Developer platforms and cloud API versions with support windows, REST deprecations and breaking releases on the platforms your backend calls. [Vercel](https://harbyn.com/vendors/vercel), [GitHub](https://harbyn.com/vendors/github), [Cloudflare](https://harbyn.com/vendors/cloudflare), [Notion API](https://harbyn.com/vendors/notion), [Jira / Atlassian Cloud](https://harbyn.com/vendors/atlassian-jira), [DigitalOcean](https://harbyn.com/vendors/digitalocean), [Google Cloud Run and Functions](https://harbyn.com/vendors/google-cloud), [PlanetScale](https://harbyn.com/vendors/planetscale), [Google Ads API](https://harbyn.com/vendors/google-ads), [Firebase](https://harbyn.com/vendors/firebase), [AWS Lambda](https://harbyn.com/vendors/aws-lambda), [Netlify](https://harbyn.com/vendors/netlify), [Modal](https://harbyn.com/vendors/modal), [Apple Developer](https://harbyn.com/vendors/apple-developer), [Box](https://harbyn.com/vendors/box), [Supabase](https://harbyn.com/vendors/supabase), [Neon](https://harbyn.com/vendors/neon), [Sentry](https://harbyn.com/vendors/sentry), [Auth0](https://harbyn.com/vendors/auth0), [Clerk](https://harbyn.com/vendors/clerk), [Linear API](https://harbyn.com/vendors/linear), [Heroku](https://harbyn.com/vendors/heroku), [npm](https://harbyn.com/vendors/npm), [GitLab API](https://harbyn.com/vendors/gitlab), [Google Maps Platform](https://harbyn.com/vendors/google-maps), [Mixpanel](https://harbyn.com/vendors/mixpanel), [Railway](https://harbyn.com/vendors/railway), [Sanity](https://harbyn.com/vendors/sanity), [Model Context Protocol](https://harbyn.com/vendors/mcp), [Docker](https://harbyn.com/vendors/docker), [Bitbucket Cloud API](https://harbyn.com/vendors/bitbucket), [Expo](https://harbyn.com/vendors/expo), [Figma](https://harbyn.com/vendors/figma), [LinkedIn Marketing API](https://harbyn.com/vendors/linkedin), [Okta](https://harbyn.com/vendors/okta), [Render](https://harbyn.com/vendors/render), [WorkOS](https://harbyn.com/vendors/workos), [HubSpot](https://harbyn.com/vendors/hubspot), [monday.com](https://harbyn.com/vendors/monday), [MongoDB](https://harbyn.com/vendors/mongodb), [Google Analytics Data API](https://harbyn.com/vendors/google-analytics), [Let's Encrypt](https://harbyn.com/vendors/letsencrypt), [Mux](https://harbyn.com/vendors/mux), [Node.js](https://harbyn.com/vendors/nodejs), [Prisma](https://harbyn.com/vendors/prisma), [Python](https://harbyn.com/vendors/python), [YouTube Data API](https://harbyn.com/vendors/youtube), [Zendesk API](https://harbyn.com/vendors/zendesk), [Amplitude](https://harbyn.com/vendors/amplitude), [Google Play](https://harbyn.com/vendors/google-play), [Google Workspace APIs](https://harbyn.com/vendors/google-workspace), [PHP](https://harbyn.com/vendors/php), [Snowflake](https://harbyn.com/vendors/snowflake), [Airtable Web API](https://harbyn.com/vendors/airtable), [Algolia](https://harbyn.com/vendors/algolia), [Asana](https://harbyn.com/vendors/asana), [Auth.js](https://harbyn.com/vendors/authjs), [AWS SDK for JavaScript v3](https://harbyn.com/vendors/aws-sdk-js-v3), [Better Auth](https://harbyn.com/vendors/better-auth), [Calendly](https://harbyn.com/vendors/calendly), [Chroma](https://harbyn.com/vendors/chroma), [Cloudinary](https://harbyn.com/vendors/cloudinary), [Datadog](https://harbyn.com/vendors/datadog), [Drizzle ORM](https://harbyn.com/vendors/drizzle), [Elastic](https://harbyn.com/vendors/elastic), [Intercom](https://harbyn.com/vendors/intercom), [Kubernetes](https://harbyn.com/vendors/kubernetes), [LaunchDarkly](https://harbyn.com/vendors/launchdarkly), [Mapbox](https://harbyn.com/vendors/mapbox), [PostHog](https://harbyn.com/vendors/posthog), [Qdrant](https://harbyn.com/vendors/qdrant), [RevenueCat](https://harbyn.com/vendors/revenuecat), [Twilio Segment](https://harbyn.com/vendors/segment), [Strapi](https://harbyn.com/vendors/strapi), [Stytch](https://harbyn.com/vendors/stytch), [TikTok for Developers](https://harbyn.com/vendors/tiktok), [Weaviate](https://harbyn.com/vendors/weaviate) ### Payments, commerce and messaging Payment, commerce and messaging APIs. Payments are alert-only: we say what changed and where, and never edit that code. [Shopify](https://harbyn.com/vendors/shopify), [Plaid](https://harbyn.com/vendors/plaid), [Stripe](https://harbyn.com/vendors/stripe), [Twilio](https://harbyn.com/vendors/twilio), [BigCommerce](https://harbyn.com/vendors/bigcommerce), [WooCommerce](https://harbyn.com/vendors/woocommerce), [Slack API](https://harbyn.com/vendors/slack), [Discord API](https://harbyn.com/vendors/discord), [Resend](https://harbyn.com/vendors/resend), [Amazon Selling Partner API](https://harbyn.com/vendors/amazon-sp-api), [Brevo](https://harbyn.com/vendors/brevo), [Meta Graph API / WhatsApp Cloud API](https://harbyn.com/vendors/meta-graph), [X (Twitter) API](https://harbyn.com/vendors/x-api), [Klaviyo](https://harbyn.com/vendors/klaviyo), [Mollie](https://harbyn.com/vendors/mollie), [Paddle](https://harbyn.com/vendors/paddle), [eBay APIs](https://harbyn.com/vendors/ebay), [OneSignal](https://harbyn.com/vendors/onesignal), [PayPal](https://harbyn.com/vendors/paypal), [Polar](https://harbyn.com/vendors/polar), [Postmark](https://harbyn.com/vendors/postmark), [Square](https://harbyn.com/vendors/square), [Adyen](https://harbyn.com/vendors/adyen), [Braintree](https://harbyn.com/vendors/braintree), [Checkout.com](https://harbyn.com/vendors/checkout-com), [LiveKit](https://harbyn.com/vendors/livekit), [Mailgun](https://harbyn.com/vendors/mailgun), [Razorpay](https://harbyn.com/vendors/razorpay), [Twilio SendGrid](https://harbyn.com/vendors/sendgrid), [Telegram Bot API](https://harbyn.com/vendors/telegram), [Vonage](https://harbyn.com/vendors/vonage) Payments vendors are alert-only by design: we tell you what changed and where, and never edit that code for you. ## Questions a careful engineer asks ### What leaves my machine when I run a scan? Nothing about your code. The scanner downloads the signed feed and matches it locally. If you connect a repository to the dashboard you can opt in to send a manifest of vendor, version and identifier names so alerts reach you; it never contains code, file contents or secrets, and you can print it before it is sent. ### What does the free plan really give me? The open-source CLI and GitHub Action with unlimited local scans, the public change pages, the Radar and the deadline calendar, and a dashboard account with 5 vendors on your watch list, 1 connected repository and email alerts. Pro and Team start with 7 days free. ### Will it touch my payments or auth code? No. Code that moves money, signs users in or handles keys is alert-only on every plan. You get the finding and the evidence; any change to that code is yours to write. ### How do I verify the feed? Every release of the feed is signed with Ed25519. The scanner checks the signature against keys pinned in its own source, rejects expired or older feeds, and reports nothing if verification fails. You can run the same check yourself with the published public key. ### Why not just use Dependabot or Renovate? Keep them. They watch the versions in your lockfile. Harbyn watches what never appears there: the model ID in a string, the pinned API version in a header, the REST endpoint a vendor is retiring. The two do not overlap. ### How do you find out about a change? From the vendor, directly: specs, release feeds, deprecation pages and changelogs, fetched politely and cited on every event. Structured sources are parsed without a model; prose is read by one and checked against the page. Breaking changes are reviewed before they are published. ### What if Harbyn is wrong? Every finding links the vendor page it is based on, so you can check it in seconds. Tell us and we fix the event for everyone. A wrong alert costs us more than a late one, and we build the feed around that. ## More [Pricing](https://harbyn.com/pricing.md) - [Home](https://harbyn.com/index.md) (https://harbyn.com/) - [Pricing](https://harbyn.com/pricing.md) (https://harbyn.com/pricing) - [Documentation](https://harbyn.com/docs.md) (https://harbyn.com/docs) - [About](https://harbyn.com/about.md) (https://harbyn.com/about) - [Contact](https://harbyn.com/contact.md) (https://harbyn.com/contact) - [Privacy policy](https://harbyn.com/privacy.md) (https://harbyn.com/privacy) - [Terms of service](https://harbyn.com/terms.md) (https://harbyn.com/terms) - [Security](https://harbyn.com/security.md) (https://harbyn.com/security) - [Upcoming deadlines](https://harbyn.com/deadlines.md) (https://harbyn.com/deadlines) - [Radar](https://harbyn.com/radar.md) (https://harbyn.com/radar) - [Vendors](https://harbyn.com/vendors.md) (https://harbyn.com/vendors) - [Blog](https://harbyn.com/blog.md) (https://harbyn.com/blog) - [Home (Brazil edition)](https://harbyn.com/br.md) (https://harbyn.com/br) - [Pricing (Brazil edition)](https://harbyn.com/br/pricing.md) (https://harbyn.com/br/pricing) - [Blog (Brazil edition)](https://harbyn.com/br/blog.md) (https://harbyn.com/br/blog) - [Home (Mexico edition)](https://harbyn.com/mx.md) (https://harbyn.com/mx) - [Pricing (Mexico edition)](https://harbyn.com/mx/pricing.md) (https://harbyn.com/mx/pricing) - [Blog (Mexico edition)](https://harbyn.com/mx/blog.md) (https://harbyn.com/mx/blog) - [Home (Germany edition)](https://harbyn.com/de.md) (https://harbyn.com/de) - [Pricing (Germany edition)](https://harbyn.com/de/pricing.md) (https://harbyn.com/de/pricing) - [Blog (Germany edition)](https://harbyn.com/de/blog.md) (https://harbyn.com/de/blog) - [Home (Japan edition)](https://harbyn.com/jp.md) (https://harbyn.com/jp) - [Pricing (Japan edition)](https://harbyn.com/jp/pricing.md) (https://harbyn.com/jp/pricing) - [Blog (Japan edition)](https://harbyn.com/jp/blog.md) (https://harbyn.com/jp/blog) - [Home (China edition)](https://harbyn.com/cn.md) (https://harbyn.com/cn) - [Pricing (China edition)](https://harbyn.com/cn/pricing.md) (https://harbyn.com/cn/pricing) - [Blog (China edition)](https://harbyn.com/cn/blog.md) (https://harbyn.com/cn/blog) - [Home (Indonesia edition)](https://harbyn.com/id.md) (https://harbyn.com/id) - [Pricing (Indonesia edition)](https://harbyn.com/id/pricing.md) (https://harbyn.com/id/pricing) - [Blog (Indonesia edition)](https://harbyn.com/id/blog.md) (https://harbyn.com/id/blog) - [Home (India edition)](https://harbyn.com/in.md) (https://harbyn.com/in) - [Pricing (India edition)](https://harbyn.com/in/pricing.md) (https://harbyn.com/in/pricing) - [Blog (India edition)](https://harbyn.com/in/blog.md) (https://harbyn.com/in/blog) - [llms.txt](https://harbyn.com/llms.txt), [agents.md](https://harbyn.com/agents.md), [OpenAPI](https://harbyn.com/openapi.json)