API REFERENCE

Magento Version JSON API: free, no auth, CORS open

Nine endpoints, predictable shapes, identical schema across distributions. Replace {distribution} with magento-community, magento-commerce, or mage-os.

Distribution
GET /api/v1/{distribution}/versions/latest

Latest stable release.

Try it
https://magento.watch/api/v1/{distribution}/versions/latest
curl -s https://magento.watch/api/v1/{distribution}/versions/latest
Response fields
version string
The release identifier, e.g. "2.4.7-p5". Treat as opaque — do not sort lexically.
releaseDate date
ISO date the release was published. May be null for unreleased upcoming entries.
eolDate date
ISO date the release exits support. May be null.
statusLabel enum
upcoming · supported (latest) · supported · eol · unknown.
isLatestVersion boolean
Only the latest release of a distribution has this true.
isSecureVersion boolean
Released and not past EOL.
isFutureVersion boolean
releaseDate is in the future.
isEOLVersion boolean
eolDate is past.
systemRequirements object
Sparse map of stack components. Absent keys mean “not declared,” not “incompatible.”
Example response
{
  "data": {
    "2.4.9": {
      "version": "2.4.9",
      "releaseDate": "2026-05-12",
      "eolDate": "2029-05-12",
      "isEOLVersion": false,
      "isSecureVersion": true,
      "isLatestVersion": true,
      "isFutureVersion": false,
      "statusLabel": "supported (latest)",
      "systemRequirements": {
        "php": ["8.5"],
        "composer": ["2.10"],
        "mysql": ["8.4"],
        "mariadb": ["11.8", "12.3"],
        "opensearch": ["3"],
        "valkey": ["9"],
        "rabbitmq": ["4.3"],
        "varnish": ["8"],
        "nginx": ["1.30"]
      }
    }
  },
  "_documentation": "https://magento.watch/api",
  "_description": "Latest stable release"
}
Example response: /{distribution}/versions/{version}/security
{
  "data": {
    "distribution": "magento-community",
    "version": "2.4.7",
    "status": "vulnerable",
    "vulnerableTo": [
      {
        "id": "APSB25-88",
        "severity": "critical",
        "publishedDate": "2025-09-09",
        "cves": ["CVE-2025-54236"],
        "fixedIn": "2.4.7-p7",
        "isolatedPatches": []
      },
      {
        "id": "APSB25-71",
        "severity": "critical",
        "publishedDate": "2025-08-12",
        "cves": ["CVE-2025-49557"],
        "fixedIn": "2.4.7-p7",
        "isolatedPatches": []
      }
      // … 6 more, newest first
    ],
    "fixedBy": [
      {
        "id": "APSB24-18",
        "severity": "critical",
        "publishedDate": "2024-04-09",
        "cves": ["CVE-2024-20758", "CVE-2024-20759"],
        "fixedIn": "2.4.7"
      }
    ],
    "recommendedVersion": "2.4.7-p10"
  },
  "_documentation": "https://magento.watch/api",
  "_description": "Security status for 2.4.7"
}
Common recipes
  • Latest version: curl -s https://magento.watch/api/v1/magento-community/versions/latest | jq '.data | keys[0]'
  • All supported PHP versions: curl -s https://magento.watch/api/v1/magento-community/versions/supported | jq '[.data[].systemRequirements.php] | add | unique'
  • EOL date for a specific release: curl -s https://magento.watch/api/v1/magento-community/versions/2.4.7-p5 | jq '.eolDate'
Cache & rate limits

Responses ship Cache-Control: public, max-age=3600, s-maxage=86400, stale-while-revalidate=86400. There is no rate limit at the application layer; please cache locally for high-volume polling. CORS is open (Access-Control-Allow-Origin: *).