1. Signed responses
Every authed GET can carry X-Ausdata-Signature: sha256=... so you
(or a customer) can HMAC-verify the body came from ausdata.io, not a mirror.
Mint or view the per-account secret with GET /v1/account/signing-secret
(Embed / Enterprise). Free and Analyst callers get a clear 403 today;
there is no public signed-response playground on this page.
curl -H 'Authorization: Bearer ak_your_key' \
https://api.ausdata.io/v1/account/signing-secret Full verify steps: docs and the interactive reference at api.ausdata.io/docs.
2. Embed tokens for live charts
Series charts are SVG. For a public page, mint a chart-only token
(emb_…) so the ak_ key stays server-side.
GET /v1/account/embed-token
# then, in HTML (never put ak_ in a public page):
<img src="https://api.ausdata.io/v1/series/AU.CASHRATE/chart.svg?key=emb_..."
alt="RBA cash rate">
Honest check: /v1/series/AU.CASHRATE/chart.svg returns 200 image/svg+xml
with a valid key. This page does not ship a live <img> with a forged
emb_ token. Walkthrough: docs · Charts and embedding.
3. Webhook → hero chart (release morning path)
Embed Pulse subscriptions POST a signed release.published event when an
ABS/RBA calendar row crosses the publish boundary. Refresh a cited chart from
release.series_id without a second discovery round-trip. Documented in the API guide §10b. No invented demo on this page.
Step A · subscribe
curl -X POST https://api.ausdata.io/v1/webhooks \
-H 'Authorization: Bearer ak_your_key' \
-H 'Content-Type: application/json' \
-d '{"url":"https://your.app/hooks/ausdata","datasets":["CPI"],"sources":["abs"]}'
# → { "id": "wh_...", "secret": "...", ... } # secret only on create Step B · verify delivery
Headers: X-Ausdata-Signature: sha256=<hmac_sha256(secret, raw_body)>,
X-Ausdata-Event: release.published. Body includes
release.series_id (e.g. AU.CPI.YOY) when the dataset links to catalog series.
Step C · refresh Embed surface
# Cited latest (must-use: citation + source_url + retrieved_at)
GET /v1/series/AU.CPI.YOY/latest
# Public chart (chart-only emb_ token; never put ak_ in page source)
GET /v1/series/AU.CPI.YOY/chart.svg?key=emb_...
Webhook create/list is Embed-gated (Free/Analyst keys see 403). Preview the
calendar with GET /v1/releases on any tier. Same walkthrough in
docs · Release webhooks to Embed charts
and OpenAPI.
When you do not need Embed
- Exploring series IDs and citations: Free is enough.
- Daily notebooks, CI, or MCP under 10k calls: Analyst ($29).
- Private tools can render SVG with your
ak_key; do not paste that key into public HTML.
Same numbers. Proof and delivery for products.
Start free, upgrade with the same email when you ship to someone else. Compare tiers on pricing.