Online
Here it is: docs.acme.com/api/v2. The auth section has the new OAuth2 PKCE flow documented with code samples for React and Node.
Rate limit is 100 requests per minute per API key for search. For batch operations it's 20 per minute. Both are documented in the rate limits section.
Yes, v2 webhooks use a standardized envelope: { event, timestamp, data, signature }. The signature uses HMAC-SHA256 now instead of the old MD5 hash. Migration guide is at docs.acme.com/api/v2/webhooks/migration.