Deprecation of C4 endpoint URLs

Deprecation of C4 endpoint URLs

Notes
Note: This post is only for users who are still using the C4 endpoints.
Hello everyone,
 
At Zoho Creator, we're committed to continuously enhancing the security, performance, and capabilities of our platform. As part of this ongoing effort, we'll be deprecating older C4 endpoint URLs in the next few months. This transition is critical for security, as the old endpoints rely on outdated libraries, leaving it potentially vulnerable to security issues. We believe this update is a crucial step towards making the platform more secure and unified. With this post we aim to guide you through the migration process.
 
What are C4 endpoint URLs?   
These are a legacy URL pattern that were a part of the C4 version of Zoho Creator and could be used to access data via APIs. Essentially, the C4 endpoints are the one that contains a .do action (such as restapiaction.do, getApps.do and so on). 
 
If you built custom workflows several years ago, they might still be using these URLs. With the launch of our C5 version and REST APIs, we transitioned to a more standardized URL format. However, we continued to support requests made in the older format to prevent service disruptions.
 
What is changing?   
We're phasing out all C4 endpoint URLs in favor of new standardized URL formats which have been in place since 2018. Going forward, all API requests, such as adding, updating, or deleting records, must be performed using the format as per our v2.1 REST APIs. 
 
Use the table below to find examples of new endpoints that corresponds to the legacy C4 endpoint URLs. Please note that all URLs that end with .do in them needs to be replaced.
 
Action
C4 format
New format
Add Record from Web Client
/addRecordValidate.do
https://creatorapp.zohopublic.<DC>/<ScopeName>/<AppLinkName>/form/<FormLinkName>/clientadd/<PublishKey>
/getApps.do
https://www.zohoapis.com/creator/v2.1/meta/applications
/getallapps.do
https://www.zohoapis.com/creator/v2.1/meta/applications
/getformmeta.do
https://www.zoho.com/creator/help/api/v2.1/get-fields.html
/restapiaction.do
https://www.zohoapis.com/creator/v2.1/data/<ScopeName>/<AppLinkName>/form/<FormLinkName>
-X POST
/restapiaction.do
https://www.zohoapis.com/creator/v2.1/data/<ScopeName>/<AppLinkName>/report/<ReportLinkName>
-X PATCH
/restapiaction.do
https://www.zohoapis.com/creator/v2.1/data/<ScopeName>/<AppLinkName>/report/<ReportLinkName>
-X DELETE
/postrequestadd.do
https://www.zohoapis.com/creator/v2.1/data/<ScopeName>/<AppLinkName>/form/<FormLinkName>
-X POST
/showXml.do
https://www.zohoapis.com/creator/v2.1/data/<ScopeName>/<AppLinkName>/report/<ReportLinkName>
-X GET
 
What should you do?   
To prevent any disruption to your applications, you'll need to update your scripts that use these old C4 endpoint URLs.
 
Your action plan should be:
  1. Identify: Review your existing workflows and third-party services for any code that calls C4 endpoints.
  2. Update: Make necessary changes to your scripts to make sure they align with the new standardized format.
  3. Test: Thoroughly test your updated scripts to ensure they function as expected. 
When does this take effect? 
We plan to fully deprecate C4 endpoints in the 1st week of March, 2026. Please note that, after this date, any API call made to a C4 endpoint will fail.

We request your utmost attention to this matter and encourage you to make the necessary changes before the deadline to avoid any disruption to your workflows.

We're confident these changes will improve the security and performance of your integrations. We look forward to your cooperation in ensuring a smooth and successful migration.

If you need any assistance or have questions, please feel free to reach out to us; we're always here to help.

Regards,
The Zoho Creator team