From c72d39bbecfda2688dde949c6ce5a413ff5fc1c4 Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
 <41898282+github-actions[bot]@users.noreply.github.com>
Date: Wed, 9 Sep 2026 15:09:08 +0000
Subject: [PATCH] docs: sync changelog

---
 changelog.mdx | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/changelog.mdx b/changelog.mdx
index 1e09964..ea93343 100644
--- a/changelog.mdx
+++ b/changelog.mdx
@@ -79,7 +79,13 @@ mode: "center"
 
 </Update>
 
-<Update label="2026-09-03" tags={["SDK", "UI Kit"]}>
+<Update label="2026-09-03" tags={["API", "SDK", "UI Kit"]}>
+
+### API
+
+**Breaking**
+
+- `POST /quote` and `POST /quote/v2`: requests that include a `referrer` in the body now require a valid `x-api-key` header. Requests with a referrer but no valid key return `401` with `errorCode: "UNAUTHORIZED_QUOTE"`. Note that the Relay SDK sets `referrer` automatically, so SDK integrations must configure **`apiKey`** on `createClient` or pass the key per call via the `headers` parameter. Create and manage API keys in the [Relay Dashboard](https://dashboard.relay.link) — see [API keys and Rate Limits](/references/api/api-keys).
 
 ### RelayKit